Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: xz8z0BU1LixLS2f8SW3DFb+QjNFMMKIZ0YY5rYqEW6Q=
Subject key identifier: 9F:88:CA:39:E4:1B:D8:50:89:67:3A:D6:00:F9:4C:41:D7:56:E3:11
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019A725C87CD7002899A1247A9811AC5FF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 124B
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: gEB96/o89sBsG+WDZ/uU32mPf23fE61qaT/D7A3vV8o=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:87:cd:70:02:89:9a:12:47:a9:81:1a:c5:ff:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=9f88ca39e41bd85089673ad600f94c41d756e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:5a:b3:6b:08:3b:f1:9a:78:ef:8d:54:0a:
23:c3:f2:0d:4f:74:6e:e3:7c:d2:61:e1:a2:ba:05:
d7:ff:a6:63:44:a0:ca:5e:ef:ac:a7:f2:bd:4d:7c:
4e:6e:21:6f:7a:ee:f0:92:c1:8c:27:32:88:b1:58:
38:14:2e:60:c5:79:86:a7:a3:3c:e9:df:81:1c:29:
0e:61:ff:c3:59:7c:f3:e7:1f:ac:2a:a1:9e:3e:8e:
a6:bf:e5:04:7b:a1:1e:24:cc:71:0a:b4:22:00:20:
0c:56:2b:20:e2:84:3a:87:9d:85:e3:a7:cd:93:74:
e8:c0:ad:1e:b4:12:9b:3d:76:9e:c7:8d:d7:c2:61:
72:a1:bf:dc:52:86:23:74:56:ef:a4:a1:70:d7:5b:
1b:be:77:91:ca:e2:6f:e0:95:f2:fe:f6:13:f4:8a:
f4:18:ab:e0:c7:36:52:1f:92:24:c5:ef:7b:64:63:
1f:f5:f6:c0:4b:ac:3d:5d:a2:df:5c:aa:d3:bc:6c:
41:2d:0a:d9:80:08:69:b1:50:90:96:c8:0c:44:f9:
d2:db:5a:d4:f1:eb:c0:f3:d5:24:45:6d:7d:24:b9:
da:4c:5b:a2:7c:99:d7:4e:6a:72:4f:5f:93:37:9f:
4d:05:aa:d0:e8:6f:92:e5:9a:64:56:4a:7a:d0:4b:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:CA:39:E4:1B:D8:50:89:67:3A:D6:00:F9:4C:41:D7:56:E3:11
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:27:1b:0f:fa:93:c4:0c:0c:57:7f:5d:bf:64:04:bd:ca:
41:f1:86:5d:a5:f9:ce:44:f9:3a:63:47:6a:11:62:1f:cd:d3:
1a:38:67:28:d4:ea:58:06:2b:f1:c2:25:76:6c:dc:b0:c4:79:
e0:aa:80:46:74:1d:db:72:be:f7:97:b5:84:66:7d:0b:ce:17:
36:05:b6:67:a8:51:bb:7b:71:b5:21:2a:61:ec:3d:a8:fa:49:
44:43:3f:77:2b:0b:b8:ba:7f:2d:78:35:c7:7b:13:ea:0e:5b:
30:2d:06:15:bb:f2:37:f7:9a:56:86:b1:c2:2d:87:54:48:a5:
13:ef:78:2e:d9:10:9d:79:95:07:af:c4:08:0a:f3:ca:d4:08:
df:1d:4e:af:17:dc:a3:ae:90:34:c4:52:c9:71:49:fd:e0:64:
65:d6:1c:ca:48:66:38:54:c8:ea:e6:04:b4:40:ad:30:37:47:
7a:64:1d:fe:ce:83:35:a1:6d:ae:57:cd:95:11:96:49:1d:9e:
a6:50:2d:4f:9d:b9:36:5d:77:39:15:1e:55:0e:83:c5:5d:e5:
92:df:10:9a:df:ad:5c:c7:75:99:c9:d8:86:2b:e5:93:3c:0c:
b0:99:16:51:31:e9:1d:41:ab:b2:c4:59:fe:25:1a:67:cf:ef:
d8:55:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:09 2025 by rpki-client