Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: VBA4qHE33deXI9hmsBgnNfbGLM73/AOsKdd0KPoMPUQ=
Subject key identifier: 59:D4:D4:AC:96:8C:E0:FC:9B:91:9B:13:C5:70:48:77:B2:4A:5F:7F
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0199240D9845D0E1ABEF3A4AE780D8AEE778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 02CB
Signing time: Sun 07 Sep 2025 12:01:34 +0000
Manifest this update: Sun 07 Sep 2025 12:01:34 +0000
Manifest next update: Mon 08 Sep 2025 12:01:34 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: JSAdbqwUfmTZUwEi0tpcsV/7Fk82hEL8SkMHuNmwRlY=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:98:45:d0:e1:ab:ef:3a:4a:e7:80:d8:ae:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Sep 7 12:01:34 2025 GMT
Not After : Sep 8 12:01:34 2025 GMT
Subject: CN=59d4d4ac968ce0fc9b919b13c5704877b24a5f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:b1:c7:12:87:7d:31:ac:e0:9e:36:18:cc:
4b:83:77:97:07:ee:52:01:14:22:fc:19:11:a2:30:
70:bb:3e:6f:b6:36:53:0d:68:d8:57:86:27:6c:ea:
8b:a4:f7:56:85:db:6b:16:22:0b:d8:01:21:63:58:
38:20:e4:3c:2f:3e:42:a6:5a:29:99:60:ed:3b:f2:
cb:04:fd:8c:99:3f:ab:8c:72:b3:94:2e:e3:e3:08:
a4:01:de:e0:fc:54:00:7b:fe:38:39:5a:08:eb:05:
51:a7:c8:24:75:68:5e:64:74:a3:a7:d5:69:0a:48:
8e:77:63:af:41:a4:a4:73:22:de:fe:3e:f0:78:68:
4d:39:c2:f9:72:50:2f:0b:bb:fb:ea:a2:b2:10:4a:
66:36:2a:b2:f3:06:46:7b:43:24:4e:fc:44:89:78:
12:0b:46:31:bc:06:65:ee:71:b9:64:91:a5:3f:df:
68:83:ec:4c:b1:53:81:91:f5:5f:6d:c5:f3:fd:00:
26:3a:bc:0f:c2:fe:dd:9a:92:2e:a5:34:78:cb:0d:
51:ed:6c:18:fa:13:4e:e4:c3:76:d0:41:6f:70:4d:
e6:42:40:78:05:00:fa:af:2d:f4:74:d7:66:f2:02:
d7:de:ae:8a:f0:39:b7:bc:7d:2d:f7:db:01:5a:87:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:D4:AC:96:8C:E0:FC:9B:91:9B:13:C5:70:48:77:B2:4A:5F:7F
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:14:19:4b:44:67:23:3a:4b:6d:03:7c:28:a7:5f:96:19:
e3:71:35:5a:f4:c3:14:07:1c:94:91:9e:e8:de:41:45:07:6c:
2a:4c:3b:9d:ba:d6:21:60:52:44:d1:94:e2:f0:14:1a:48:45:
45:9d:69:5b:32:35:98:9c:99:a7:a6:53:2c:8f:2d:62:d6:b4:
11:c0:6b:b5:a7:10:d6:e9:d9:2e:0d:7e:af:3e:fa:ca:8e:a3:
af:13:42:77:6d:73:2f:69:69:7c:72:4a:f3:76:90:ed:c1:b7:
d0:40:44:ea:7a:34:83:ea:03:07:ec:5a:9c:61:22:1b:42:7a:
d1:7d:df:68:d6:b7:8c:5b:38:74:88:49:f8:a3:75:40:d0:60:
f3:f8:4f:54:6e:11:2b:e9:bc:ea:11:7e:0b:8c:32:29:b0:4e:
17:91:45:fa:de:40:bf:e1:a1:ef:5b:db:d5:14:46:b9:b2:96:
47:f9:ce:96:a0:53:b0:b7:f0:c7:2b:67:1d:8d:50:59:4b:f7:
04:0e:8c:c7:5d:71:59:38:78:ef:e9:fa:66:4a:77:df:3f:2c:
5b:37:17:ea:33:1a:3b:f6:48:63:0a:cc:77:6f:21:d3:4b:74:
cf:ef:83:df:87:dd:3c:34:68:eb:ef:6e:a5:6d:0c:5a:f7:41:
55:7d:e7:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDZhF0OGr7zpK54DYrud4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWFjNjkxNGJmODQ3M2QxODBiNjAzODdiZDA5OGYxZDM3
ZGFjODAwHhcNMjUwOTA3MTIwMTM0WhcNMjUwOTA4MTIwMTM0WjAzMTEwLwYDVQQD
Eyg1OWQ0ZDRhYzk2OGNlMGZjOWI5MTliMTNjNTcwNDg3N2IyNGE1ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSuxxxKHfTGs4J42GMxLg3eXB+5S
ARQi/BkRojBwuz5vtjZTDWjYV4YnbOqLpPdWhdtrFiIL2AEhY1g4IOQ8Lz5Cplop
mWDtO/LLBP2MmT+rjHKzlC7j4wikAd7g/FQAe/44OVoI6wVRp8gkdWheZHSjp9Vp
CkiOd2OvQaSkcyLe/j7weGhNOcL5clAvC7v76qKyEEpmNiqy8wZGe0MkTvxEiXgS
C0YxvAZl7nG5ZJGlP99og+xMsVOBkfVfbcXz/QAmOrwPwv7dmpIupTR4yw1R7WwY
+hNO5MN20EFvcE3mQkB4BQD6ry30dNdm8gLX3q6K8Dm3vH0t99sBWofbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnU1KyWjOD8m5GbE8VwSHeySl9/MB8GA1UdIwQY
MBaAFGsaxpFL+Ec9GAtgOHvQmPHTfayAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhyR2tVdjRSejBZQzJBNGU5Q1k4ZE45cklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmZlYmQtYmQzNy00MzkzLWEzM2Qt
NDhjMDM1MjBmYWY3LzEvYXhyR2tVdjRSejBZQzJBNGU5Q1k4ZE45cklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmZlYmQtYmQzNy00MzkzLWEzM2QtNDhjMDM1MjBmYWY3
LzEvYXhyR2tVdjRSejBZQzJBNGU5Q1k4ZE45cklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuMUGUtE
ZyM6S20DfCinX5YZ43E1WvTDFAcclJGe6N5BRQdsKkw7nbrWIWBSRNGU4vAUGkhF
RZ1pWzI1mJyZp6ZTLI8tYta0EcBrtacQ1unZLg1+rz76yo6jrxNCd21zL2lpfHJK
83aQ7cG30EBE6no0g+oDB+xanGEiG0J60X3faNa3jFs4dIhJ+KN1QNBg8/hPVG4R
K+m86hF+C4wyKbBOF5FF+t5Av+Gh71vb1RRGubKWR/nOlqBTsLfwxytnHY1QWUv3
BA6Mx11xWTh47+n6Zkp33z8sWzcX6jMaO/ZIYwrMd28h00t0z++D34fdPDRo6+9u
pW0MWvdBVX3nnA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client