Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: GhxkHoEjcYu5r2zEAuIAe4LqdAkU/pen8T/+nTKPONA=
Subject key identifier: 02:3D:5B:73:E3:9F:E9:43:CE:3E:66:A1:BA:2C:77:22:C7:E4:63:AC
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019A28C2DB8FA046CAECA61858CC0CBCF649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 1410
Signing time: Tue 28 Oct 2025 03:00:49 +0000
Manifest this update: Tue 28 Oct 2025 03:00:49 +0000
Manifest next update: Wed 29 Oct 2025 03:00:49 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: 7F3X+V98EpufYnlU07SA3qu/P63y5bAMXCtp3kND8DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:db:8f:a0:46:ca:ec:a6:18:58:cc:0c:bc:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Oct 28 03:00:49 2025 GMT
Not After : Oct 29 03:00:49 2025 GMT
Subject: CN=023d5b73e39fe943ce3e66a1ba2c7722c7e463ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:d7:fd:0e:82:3a:22:0f:58:e3:8b:5e:6a:
fd:0e:e3:fb:64:27:0f:42:5a:5c:a8:5c:5d:01:f4:
f9:b8:59:96:6d:07:fd:25:87:eb:77:b2:a4:47:c7:
6f:9a:fd:7f:35:8c:7d:8b:77:59:f5:89:f6:fc:8d:
b8:f1:b4:84:47:c6:62:ac:52:3c:0e:f7:cb:42:5c:
2c:1e:7b:60:30:02:8a:0b:e1:4d:63:7a:80:77:34:
1c:5a:fa:e9:03:0c:ea:78:0b:a8:14:0b:d8:b4:6b:
87:88:99:1c:80:40:7b:9c:e1:6f:03:e0:11:41:c0:
11:23:0a:bf:ff:de:65:2c:56:fd:34:30:0a:be:1b:
59:39:92:b1:61:75:a3:79:4b:c9:4a:d8:ac:19:32:
fc:d1:b8:c3:75:14:a4:f3:9d:34:5a:af:3b:fe:5e:
5b:f7:db:b9:a3:71:81:f7:c3:f3:a9:c7:00:1e:6f:
25:1b:3e:97:f8:4f:53:0a:3a:8e:5a:54:ec:0b:d3:
f6:4d:b4:1e:eb:f6:fa:d4:9f:5e:05:25:53:1f:13:
d1:c0:3e:9f:00:ca:6e:d5:53:a3:b8:eb:cb:29:a1:
41:4b:c8:78:96:56:a7:60:73:83:59:d7:3c:1e:b4:
76:ad:0f:a6:dd:4d:a4:46:66:79:e3:99:8b:52:40:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:5B:73:E3:9F:E9:43:CE:3E:66:A1:BA:2C:77:22:C7:E4:63:AC
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:70:3a:00:fa:4a:fb:00:53:e5:16:f0:fc:2d:f1:ba:29:ac:
bf:69:ea:29:2f:94:b2:d2:04:80:bb:70:41:6b:9a:4b:83:38:
8d:1b:e3:34:da:48:c0:32:9e:46:f3:a8:5f:aa:0b:8e:83:f9:
f5:03:c7:59:d1:bb:ab:95:df:59:6c:00:76:89:a9:d5:f7:3c:
29:bc:c6:73:4e:19:2a:73:fb:22:95:09:be:f0:76:9f:d5:ef:
b7:14:e9:60:49:ef:d0:89:8b:91:eb:f4:08:b7:b0:1a:76:8f:
35:81:1f:a4:d6:31:55:b5:54:ee:fc:5d:c6:08:d5:0e:3f:30:
19:d9:98:e4:ff:0c:21:fa:9a:19:83:22:f0:03:51:cc:08:93:
9e:21:02:60:2e:07:7e:e1:75:dc:85:26:cb:84:f3:16:a0:c1:
57:6f:e1:b6:46:ab:cd:85:e7:24:94:4d:0d:78:1d:c7:a6:6d:
34:76:6e:24:54:e5:0e:b7:7b:9c:c7:41:7c:d2:32:e7:4c:42:
e5:69:aa:1e:e3:aa:1a:3e:21:1f:f8:58:da:30:b4:61:12:69:
e6:54:ab:36:82:64:fd:48:01:0e:02:a7:a8:61:18:a6:18:eb:
d7:a9:16:1d:07:81:b9:a5:e2:7d:fa:92:e9:55:bc:20:7b:81:
68:e7:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:32:36 2025 by rpki-client