Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: Acy0kJMax11CELpSc/xbbEkbvOmD+L2+ivgfXlEj4Cw=
Subject key identifier: 4E:2E:2C:99:AA:80:BD:7C:93:34:AE:44:B7:FC:A5:DC:EB:54:18:1E
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 019A722617FFFF1F4E4DA81FAA8C73148CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 0378
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: laK3WZs1qhd+uNxJtCU31+oeaHkBvThZEmjE17MfI3E=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:ff:ff:1f:4e:4d:a8:1f:aa:8c:73:14:8c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=4e2e2c99aa80bd7c9334ae44b7fca5dceb54181e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:d5:e9:c7:62:b8:e7:e6:37:4a:b0:e5:0d:
a2:a2:ff:d8:31:64:88:8c:32:0d:af:7c:51:65:ef:
9e:5d:09:ac:53:7c:80:e1:b3:af:56:86:a9:ca:4a:
92:fe:9f:e8:1d:84:44:44:3b:eb:50:74:3b:a1:df:
79:a7:a2:54:7f:46:11:0a:ab:f4:b1:cb:d5:57:19:
00:25:91:0f:f8:69:d5:4c:d6:20:57:35:14:36:30:
93:65:fb:04:4d:52:12:bb:69:d9:71:bd:a4:c1:cd:
1c:fa:55:24:06:17:f9:2d:3d:82:ba:5f:cf:69:94:
e9:09:06:bb:54:8e:48:a3:ea:fe:9b:81:64:36:c6:
a1:0a:52:b7:77:e2:39:5e:ad:80:db:08:0c:a6:44:
d3:c8:2a:2d:28:c3:e5:3b:f7:59:ad:7d:4d:41:46:
ce:2c:4c:72:19:e6:65:cc:1f:06:14:90:a9:2a:0c:
1e:74:29:dc:b2:53:8a:5d:5f:3e:a5:07:3f:33:26:
94:34:ec:6b:82:31:db:a5:32:cc:89:9c:ae:59:57:
5c:1f:c2:30:11:dc:30:89:e3:76:75:71:49:bc:5e:
ee:ca:59:ce:9c:d1:02:7c:49:36:8b:88:c8:13:7e:
a6:d4:16:d8:fe:d7:9e:d0:ac:4a:48:c1:b1:be:81:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:2C:99:AA:80:BD:7C:93:34:AE:44:B7:FC:A5:DC:EB:54:18:1E
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:d8:6e:22:8c:5d:56:74:c6:e5:de:52:2c:00:fe:23:07:
c2:12:90:be:91:16:b5:27:e5:64:2e:05:a6:40:af:18:0d:fe:
24:6b:91:25:2c:2a:dc:c4:5a:f7:e8:00:d8:4a:a3:67:74:e8:
1a:e8:0f:1f:b6:c3:57:68:36:cb:5b:a4:f7:e8:c0:e7:50:bf:
75:79:92:db:80:fa:99:a2:0e:64:2a:aa:33:e9:36:94:34:aa:
4d:0b:e5:27:c7:6c:fb:d2:d9:8c:75:5e:89:b8:db:13:df:a6:
11:f3:04:11:23:3d:d1:c0:38:c9:fa:ef:b9:70:bc:a0:47:e4:
ff:04:29:33:ab:5b:a3:9e:70:e4:2e:68:c0:78:45:b0:b4:0c:
c6:6f:2c:d4:1b:a2:df:2a:dd:ad:87:40:52:21:f4:c7:45:c3:
4a:fd:17:e5:4c:6c:b0:eb:c0:88:71:04:b7:c5:50:1f:89:87:
72:2f:e2:7b:4c:64:20:71:60:06:77:94:6f:67:58:ad:54:89:
b4:14:db:10:94:3e:98:1c:52:30:0b:7a:c3:0e:3c:e7:15:d8:
66:88:71:3f:9e:50:4d:5e:09:f7:6a:d3:21:b7:c6:f4:b6:0e:
e7:a3:23:eb:b9:7d:4e:63:dc:d5:42:c2:3f:a3:95:20:a2:e9:
49:e3:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client