Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: ack1Fs9m2d/tG5+dKllhteWigCjItnl6Agjx2PSVTfw=
Subject key identifier: 26:40:93:55:FF:4D:AB:DD:CF:2E:BB:BB:C1:56:51:B9:88:7D:39:5C
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 019A725C72CCBD4FD8838931DBE2342DFCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 1514
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: 7szXuPAqNml/RTDyVPg0O0q2s8Ye/AUV/zDTN++9YS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:72:cc:bd:4f:d8:83:89:31:db:e2:34:2d:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=26409355ff4dabddcf2ebbbbc15651b9887d395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:c9:a2:4a:84:07:85:86:61:8c:2c:e3:af:
12:cb:f0:71:7b:f4:f6:1a:06:7b:61:6a:f4:4d:b9:
18:07:2d:c0:0f:7b:fa:dd:10:5d:bb:c1:67:f2:ac:
8d:74:bf:c2:b6:a6:2b:af:24:4a:11:fa:2e:68:e1:
64:36:42:fd:02:fe:3c:f5:0f:95:24:38:de:65:25:
55:60:79:60:30:d2:35:18:0c:ca:1f:a3:13:e5:67:
2e:ca:5d:de:ee:e0:95:c9:58:78:93:31:db:04:2f:
71:19:e0:13:f3:3a:55:ae:04:99:96:31:99:5b:71:
a6:11:b0:77:b5:04:70:2d:66:1c:4b:f6:6e:c3:e1:
68:76:2b:f7:6f:d5:cf:3b:fb:8c:4d:0e:80:7d:71:
6c:f0:b1:04:b9:fd:27:e9:84:ce:af:c8:9f:b4:33:
65:41:30:17:51:5c:4b:50:6e:e6:6c:06:17:40:ad:
fe:a1:61:27:df:a5:c1:c2:80:07:ac:c1:18:37:17:
f6:1c:e8:6c:9d:90:97:51:43:34:10:37:0e:f7:7d:
d1:0f:61:10:f4:d4:2d:5e:76:bd:01:ea:bc:3c:ec:
4d:c4:93:ba:2f:39:ad:04:71:db:a6:aa:86:b0:dc:
aa:4a:dc:51:d1:c2:67:39:d7:54:70:3a:11:7c:00:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:93:55:FF:4D:AB:DD:CF:2E:BB:BB:C1:56:51:B9:88:7D:39:5C
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:d3:86:73:48:a8:65:0b:69:b2:3b:3f:77:03:9d:61:fc:
2a:26:43:d5:17:d5:3d:ec:59:bc:5c:fb:4c:0d:f8:8e:33:82:
79:98:ce:60:db:13:05:f1:d3:cd:c2:f3:9b:1a:07:1c:a3:63:
f7:e4:08:bb:79:dd:39:1f:4a:57:b1:57:11:6a:05:52:fd:21:
30:4c:e8:de:36:5f:34:32:8f:58:e1:87:a8:14:3b:cb:ed:ed:
83:28:62:d2:6c:c2:a1:9d:53:0d:c4:ce:d5:97:df:f9:3c:65:
35:59:b4:cc:c1:ae:44:36:5e:48:32:d5:56:1e:e4:9a:04:65:
04:33:94:11:a0:73:c6:05:d4:4c:6f:46:aa:95:28:a6:03:22:
50:91:6f:79:4e:c5:61:cc:f2:60:6c:73:d5:23:c3:95:cc:97:
ae:e9:f4:da:82:a6:30:b2:56:46:ae:f0:a0:dc:29:54:a6:5a:
cb:b4:0c:af:7a:43:3f:b9:0c:6c:2c:2a:08:7b:96:80:2a:31:
14:42:9a:99:2b:77:e6:1a:ac:4e:75:b5:1d:1e:ac:f3:c5:e6:
0f:39:07:90:2e:ab:2a:84:c7:43:9c:c7:65:b1:03:9d:a3:c3:
00:9b:97:f0:3a:3f:38:24:b6:8b:f9:4a:c3:93:bc:85:37:b9:
17:f6:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:59 2025 by rpki-client