Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: +kSvjkto7oEGu7oYaRtun0mvpa1jfs5Po01RhT5691A=
Subject key identifier: B8:CA:B0:3B:15:85:04:20:8A:E8:48:9F:A5:C1:E7:52:FE:44:6F:64
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 019A28559DFBF1B3C19E9F6C665F4C251E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 01:01:30 +0000
Manifest this update: Tue 28 Oct 2025 01:01:30 +0000
Manifest next update: Wed 29 Oct 2025 01:01:30 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: hmmLTcdmpCzBo8DMzLdLPpH9xNAzBMHOS5qocfj1XKM=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:9d:fb:f1:b3:c1:9e:9f:6c:66:5f:4c:25:1e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Oct 28 01:01:30 2025 GMT
Not After : Oct 29 01:01:30 2025 GMT
Subject: CN=b8cab03b158504208ae8489fa5c1e752fe446f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:9e:3c:77:45:22:65:d1:a6:ca:2e:43:a2:
ae:1d:8b:ec:50:24:1a:58:60:ed:b4:7c:14:88:f2:
0f:ca:ce:d6:19:68:84:1f:86:1f:3c:b4:dc:4f:0d:
b2:62:2d:9e:d9:97:8f:44:96:b5:6e:1b:05:bc:2f:
9e:cc:7e:f3:a4:ee:56:51:a9:2c:ba:4d:d0:d9:3d:
03:ee:1a:89:e4:e6:a1:08:e7:ce:3d:91:cf:56:59:
4c:92:68:8b:98:f1:34:e8:5d:de:db:ce:61:f3:2c:
af:3d:58:21:be:2d:25:e1:bf:37:7e:de:a2:eb:09:
8e:96:ff:94:e5:a9:a5:2b:8b:2b:ce:83:d4:7a:ea:
5b:ed:65:e6:b1:0a:d9:f9:4d:9e:e3:6f:9f:b1:b3:
14:9c:05:fb:ce:d4:28:5a:31:eb:d9:8b:ae:14:b0:
e9:57:f1:c6:82:a8:de:79:84:cd:ea:5e:04:ce:c9:
bf:4b:0b:7f:74:d9:76:e7:f2:4b:57:43:ec:5f:c3:
85:7e:d0:67:9b:89:73:e4:da:b9:47:96:d2:34:fc:
a1:8f:ac:15:73:33:fa:56:fb:0a:aa:b1:6b:33:1f:
d7:eb:9f:e2:6d:e2:d2:b3:bf:2b:f0:50:09:d7:76:
19:e1:92:4f:77:b7:34:3c:5d:42:f5:26:10:14:5c:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:B0:3B:15:85:04:20:8A:E8:48:9F:A5:C1:E7:52:FE:44:6F:64
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:ac:fb:63:39:04:46:b8:d4:5f:5e:b6:3f:1b:5d:a2:6a:
b7:e7:25:ce:0c:8f:db:46:81:a1:11:26:bc:5c:d2:7e:85:7d:
f0:d5:bc:fe:89:5c:93:26:1d:ff:4e:0b:2d:91:65:73:60:33:
8e:3b:fd:3d:75:19:36:2c:bd:06:49:74:61:75:20:53:b8:0c:
82:fd:5f:86:fd:07:4e:fa:d9:36:6c:63:27:22:63:c2:96:e9:
ba:9d:94:0d:d4:e5:5a:18:9d:1a:a3:81:63:d1:bd:a2:c0:fd:
47:00:1d:bd:43:1e:af:7b:a7:57:55:fc:dc:a3:65:6f:21:6b:
52:fd:d3:35:4a:5b:c2:1d:a0:7c:19:33:80:69:b5:1a:d0:39:
ee:5b:5b:0b:95:d2:9e:8c:12:32:7e:35:e6:d7:79:43:23:51:
90:17:37:67:e1:24:0d:f5:b7:c0:aa:60:b5:e0:48:f0:df:e9:
d3:9d:50:c2:d1:fb:5f:97:1d:a5:7b:69:3e:8e:0b:9a:9b:c1:
fc:3d:27:85:d3:85:ca:c8:42:e2:29:a8:7c:96:1e:d3:10:33:
91:56:22:5a:5a:a7:1b:eb:5c:fc:f7:38:9d:07:7e:b8:43:3a:
4b:75:0a:b6:4f:54:fc:86:28:33:a0:83:17:6b:3d:f8:f8:12:
d0:6a:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:50:55 2025 by rpki-client