Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: l32PFaXqA1+97+Aq/B4hWbvjjMvsXWJyn7ca5KhoSUQ=
Subject key identifier: BB:29:5F:DA:45:8D:7B:9E:36:C7:07:07:2A:5B:87:F6:18:0D:E4:F3
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 0199225519446B9D1D5DBBEA9305D01A90C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 119D
Signing time: Sun 07 Sep 2025 04:00:26 +0000
Manifest this update: Sun 07 Sep 2025 04:00:26 +0000
Manifest next update: Mon 08 Sep 2025 04:00:26 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: F8FdcH34EP3FT7sa16Y3qYTd1+fSqPtIkfCuHIBpUQc=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:19:44:6b:9d:1d:5d:bb:ea:93:05:d0:1a:90:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Sep 7 04:00:26 2025 GMT
Not After : Sep 8 04:00:26 2025 GMT
Subject: CN=bb295fda458d7b9e36c707072a5b87f6180de4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:6d:d7:e9:cb:46:2c:c6:0b:24:21:f3:b2:
ed:71:88:82:10:d9:16:0c:e8:88:1d:9a:b8:fa:3b:
f5:77:b4:12:27:ce:9a:f6:94:25:85:2c:46:97:ae:
27:4d:69:0c:20:7b:23:4f:81:d5:60:a3:ef:4f:43:
ec:3e:29:89:01:e5:93:00:89:02:b1:50:72:7f:34:
da:6e:7d:7f:59:48:07:36:f8:63:bf:b8:1e:14:e4:
2d:5d:1d:58:fc:84:0e:77:b7:1f:c9:0a:78:d9:40:
5d:60:7f:de:a9:d4:f8:2d:94:ff:03:21:49:95:1b:
27:8a:c5:76:c9:ab:46:7a:8e:45:14:31:7f:9e:34:
39:14:f4:34:77:a1:7d:ea:34:e1:c8:99:9f:8a:c7:
a8:8e:fa:73:e4:8c:3f:97:bb:5c:70:c4:f6:cc:89:
a4:67:40:56:f4:04:f4:ea:f8:55:4c:b9:69:f2:f5:
68:fa:d6:5c:3b:c6:03:cc:d5:8b:01:41:50:87:02:
92:22:59:bd:f9:6b:a6:95:fd:25:13:95:48:28:22:
6b:8d:24:4c:58:f2:da:5e:36:a7:bc:54:be:24:1e:
84:5e:35:50:36:e3:8f:bf:6c:44:98:b1:d6:b6:59:
dc:1e:b4:9d:0a:38:84:67:fe:36:59:21:a3:5b:36:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:5F:DA:45:8D:7B:9E:36:C7:07:07:2A:5B:87:F6:18:0D:E4:F3
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:55:b1:be:6f:27:f3:f4:4d:8b:2d:4e:26:96:bd:4c:57:
3d:86:7e:33:79:41:c3:08:67:13:f9:8b:4b:39:68:19:11:bd:
a5:9f:39:fa:31:a8:2f:b8:d9:1c:d4:81:a2:7c:32:b0:34:f8:
f0:a9:ab:39:ef:33:fd:d4:c3:da:b7:2f:65:e4:2a:52:b8:b0:
73:8a:1b:fa:77:9b:c4:92:99:96:ab:bc:6e:e7:cf:83:2f:8f:
3e:76:c8:01:55:87:e2:b0:1f:55:46:f3:be:7b:58:64:e7:b0:
6b:ae:3a:14:b4:89:25:0d:c9:b9:4a:87:33:30:13:ff:a1:51:
2e:45:66:e2:e1:2f:86:15:77:3f:3d:55:47:0e:ea:0d:df:02:
65:6d:22:82:19:0b:83:ea:0e:f6:ab:ca:85:09:d4:39:af:ba:
09:a5:0c:d1:8e:4a:64:97:8e:92:f2:c6:e6:d7:fe:cb:0e:67:
d0:d4:67:77:ed:23:18:6b:b9:b8:ca:f9:32:74:d8:8e:d8:7f:
e2:dd:8f:65:17:69:b3:98:7a:44:f0:80:8f:6d:95:0e:f9:5f:
a8:0b:45:77:cc:af:13:ff:97:7c:23:d1:d4:ce:21:4b:9e:43:
62:f2:ac:5e:e7:25:4a:61:4e:4f:32:9c:4d:44:31:73:e1:02:
52:f4:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:09 2025 by rpki-client