Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: rT0G4g88c9k+nR9aYITPwLflfivOqt5yL32NE2Xpppw=
Subject key identifier: 15:2D:28:8B:CC:29:7B:77:FA:A4:CF:22:F8:A5:91:01:77:25:CB:94
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 019A71B7AC55A3173A55B3029BB9D48BCFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 069E
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: TaDKiFnMCy4ngbePfR3fiVCQ+89o6548WTj02prbwPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ac:55:a3:17:3a:55:b3:02:9b:b9:d4:8b:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=152d288bcc297b77faa4cf22f8a591017725cb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:23:f2:01:80:7c:eb:d6:17:1d:67:93:42:91:
ea:43:51:8d:36:0a:71:2d:e4:eb:67:f3:72:3c:9c:
c5:61:e0:96:86:95:63:90:f7:a7:15:93:d8:e2:6d:
c9:aa:4c:3e:9e:fe:1a:73:da:db:60:45:17:a1:c5:
f4:4b:ad:74:d4:c8:e9:19:13:e3:dc:40:f0:99:b9:
2b:76:f0:2d:2f:df:6f:8a:ed:f0:4f:2c:bb:e8:18:
4e:74:a8:62:2f:77:24:76:4a:69:8c:e4:79:7f:15:
31:85:17:d8:cb:7e:21:ab:b2:78:18:94:e2:97:c0:
57:a4:95:27:ac:ac:c3:12:36:a9:87:a5:6f:15:65:
bf:d9:14:4c:27:ae:2a:cc:f8:64:8f:d9:9d:dc:76:
68:41:fa:5f:ce:6c:11:d5:67:76:e1:91:9e:64:d1:
3b:cd:3e:9e:09:a8:87:20:2f:cb:41:ce:64:07:47:
5f:51:0e:13:25:83:6c:b9:95:f8:33:52:b5:70:d6:
e3:fd:83:3e:bf:9a:01:3b:1b:00:c9:f5:ba:55:02:
51:03:ed:56:d1:b6:e4:70:83:46:9b:0f:df:10:7e:
c1:6f:4e:4c:cb:22:f4:e0:47:9d:95:33:90:5f:ec:
80:b8:d4:da:98:af:03:d3:62:5b:b3:cb:64:8e:be:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:28:8B:CC:29:7B:77:FA:A4:CF:22:F8:A5:91:01:77:25:CB:94
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:75:59:85:e1:5a:bc:81:09:d1:5f:09:88:4e:36:a1:ec:
51:58:7c:a9:c5:4d:e1:2a:3b:cf:9d:1c:5f:83:92:f7:e6:5b:
d5:42:e8:65:fa:b9:29:4a:1e:83:09:f8:f3:f4:52:24:30:3d:
20:78:5c:6c:08:88:cc:14:33:85:36:4a:1f:e1:d0:2f:da:45:
24:75:b2:82:b5:19:d5:b2:1c:a6:9b:61:07:c0:cc:96:a7:5f:
fb:1e:c8:4a:21:f7:ce:51:d2:1e:28:0a:05:80:b1:01:f8:7a:
8e:5c:56:2c:ef:60:30:95:d2:fd:e3:f5:34:c8:03:b7:42:94:
7a:d6:23:7a:5a:92:37:30:af:d9:94:24:b5:b7:ca:89:fb:88:
48:a5:fb:67:73:ba:84:c7:2e:bb:fd:80:de:20:b4:f6:aa:a9:
26:8c:1b:9a:05:10:4e:26:e1:a9:ab:43:6f:21:a5:f7:17:95:
5d:3b:a3:e4:29:5a:76:0e:71:0e:61:b4:f5:b8:e4:1f:74:9c:
3f:91:b8:69:8a:d9:47:2a:f5:81:14:10:dd:46:3b:00:40:8f:
d4:c9:c7:9a:94:ae:60:c6:61:e9:51:49:a5:8d:97:6f:6c:4c:
6f:73:71:c4:83:81:5c:70:54:5c:b1:9c:01:74:21:95:d3:90:
4e:52:fd:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6xVoxc6VbMCm7nUi8/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWM4ZThjYzA3NWMyZDA0MzEzYjkxMWQ5M2Q2MWZlMmE5
YWRlYTIwHhcNMjUxMTExMDcwMDUzWhcNMjUxMTEyMDcwMDUzWjAzMTEwLwYDVQQD
EygxNTJkMjg4YmNjMjk3Yjc3ZmFhNGNmMjJmOGE1OTEwMTc3MjVjYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiPyAYB869YXHWeTQpHqQ1GNNgpx
LeTrZ/NyPJzFYeCWhpVjkPenFZPY4m3Jqkw+nv4ac9rbYEUXocX0S6101MjpGRPj
3EDwmbkrdvAtL99viu3wTyy76BhOdKhiL3ckdkppjOR5fxUxhRfYy34hq7J4GJTi
l8BXpJUnrKzDEjaph6VvFWW/2RRMJ64qzPhkj9md3HZoQfpfzmwR1Wd24ZGeZNE7
zT6eCaiHIC/LQc5kB0dfUQ4TJYNsuZX4M1K1cNbj/YM+v5oBOxsAyfW6VQJRA+1W
0bbkcINGmw/fEH7Bb05MyyL04EedlTOQX+yAuNTamK8D02Jbs8tkjr7XaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUtKIvMKXt3+qTPIvilkQF3JcuUMB8GA1UdIwQY
MBaAFAMcjozAdcLQQxO5Edk9Yf4qmt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQt
NjI2OGNlZGFiZDg0LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQtNjI2OGNlZGFiZDg0
LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxV1WYXh
WryBCdFfCYhONqHsUVh8qcVN4So7z50cX4OS9+Zb1ULoZfq5KUoegwn48/RSJDA9
IHhcbAiIzBQzhTZKH+HQL9pFJHWygrUZ1bIcppthB8DMlqdf+x7ISiH3zlHSHigK
BYCxAfh6jlxWLO9gMJXS/eP1NMgDt0KUetYjelqSNzCv2ZQktbfKifuISKX7Z3O6
hMcuu/2A3iC09qqpJowbmgUQTibhqatDbyGl9xeVXTuj5Cladg5xDmG09bjkH3Sc
P5G4aYrZRyr1gRQQ3UY7AECP1MnHmpSuYMZh6VFJpY2Xb2xMb3NxxIOBXHBUXLGc
AXQhldOQTlL99g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:25 2025 by rpki-client