Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: 2koYppoXsPK34G1zuJvwOsFxLKC5KdAyGHv+j2M1ZmM=
Subject key identifier: 94:62:29:22:25:F2:EA:80:4A:A2:38:60:75:78:54:22:8E:D1:63:E3
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01984B5526360C21CE3EC1C644797631A6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:02:08 +0000
Manifest this update: Sun 27 Jul 2025 10:02:08 +0000
Manifest next update: Mon 28 Jul 2025 10:02:08 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: rWj8G218REfuz20LQQQFUCDORYZ7s/P1TgLRWICKI+U=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:26:36:0c:21:ce:3e:c1:c6:44:79:76:31:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Jul 27 10:02:08 2025 GMT
Not After : Jul 28 10:02:08 2025 GMT
Subject: CN=9462292225f2ea804aa23860757854228ed163e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:c4:9b:ec:ab:88:46:a6:49:63:42:33:29:
54:d3:d2:e8:31:07:b9:0c:97:74:fb:0e:44:19:d7:
7c:49:8a:4d:d3:19:14:d7:03:76:b0:55:41:1c:b0:
9d:1d:c6:ea:77:89:89:e5:cb:76:bf:79:05:ad:e0:
95:6c:93:e2:73:c3:62:26:3c:1f:95:90:5b:08:cb:
98:88:4c:31:33:bb:f9:6f:68:8a:2c:c6:35:4a:e0:
fa:51:5e:fa:36:dc:b9:f4:f5:52:c2:c6:61:53:cf:
ad:ac:5a:96:13:54:5b:23:52:57:47:43:ee:85:c3:
10:44:7b:08:90:77:67:bc:e3:9b:a6:f9:ce:e7:cd:
11:69:91:16:76:2f:26:8d:5a:89:b8:46:f5:bc:42:
16:20:1a:a3:5a:cd:34:c8:35:9d:c8:a4:ca:2f:10:
9d:30:b4:27:23:24:57:0f:3c:40:1c:6d:a9:a2:1f:
da:5c:c9:06:92:44:c9:ba:a7:ba:b9:d5:82:ca:ad:
85:4c:ca:9b:b4:5f:5e:b6:15:29:52:02:c9:ac:33:
74:8d:2c:e9:b9:27:b7:c9:11:08:fe:09:4f:85:17:
b8:2c:3a:39:81:a0:ce:fa:24:57:6c:4e:57:34:2d:
24:76:15:0f:ff:70:c2:f9:ba:14:fa:24:0d:ec:10:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:29:22:25:F2:EA:80:4A:A2:38:60:75:78:54:22:8E:D1:63:E3
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5f:9f:28:db:ab:00:99:61:3d:93:03:fe:be:60:83:db:d0:
3c:73:00:85:09:39:c3:de:6e:ba:2a:a5:4e:67:e3:68:6b:21:
e8:16:a3:b5:d5:10:ff:28:25:1b:6c:3d:88:5d:b5:74:67:7a:
38:33:00:d7:e1:e2:50:91:f5:0a:f6:f6:a9:19:cb:68:18:7a:
fe:9c:63:a0:b9:ba:78:83:cd:fe:24:c9:69:1e:2d:6e:28:2a:
9b:70:55:ff:55:a7:07:ce:b5:2e:9d:09:3c:41:c3:aa:cd:26:
80:ff:3a:08:b0:c1:2f:3a:3a:e7:c7:d6:f2:1b:50:33:b1:f4:
88:db:36:2b:ed:ff:75:c0:c5:c1:8b:7f:06:7c:5f:6b:4c:ac:
81:6a:55:ce:ea:0d:63:b4:fa:14:17:b6:f7:ed:35:ee:2c:21:
0c:ac:fb:7c:29:78:d9:28:4c:45:61:34:40:2c:d8:8b:b4:ab:
be:7b:f5:24:72:42:14:d8:57:4d:81:c7:8c:f7:5c:95:42:9f:
8a:4a:da:f1:b0:9f:e1:c7:2b:b0:59:1f:aa:a6:7a:97:75:4c:
b3:0b:db:ce:f5:a1:1f:32:97:55:40:d1:4b:95:23:69:83:d0:
5b:1e:97:64:3a:9a:19:09:82:49:85:c1:a6:e1:1e:81:51:19:
f4:15:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:07 2025 by rpki-client