Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: U6mMsdFYam3lmnOSEjjZnGhWf6T9FOasKYYxW8V8nW4=
Subject key identifier: B7:A9:89:84:9C:7E:F3:29:F4:04:C5:19:C5:55:39:4B:66:4F:05:29
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019A1E3F0DF981EB5DBB7872FD0395BFCB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 170F
Signing time: Sun 26 Oct 2025 02:00:40 +0000
Manifest this update: Sun 26 Oct 2025 02:00:40 +0000
Manifest next update: Mon 27 Oct 2025 02:00:40 +0000
Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: l5ZtSEeIksR4mQ7gFnHrnfP++qz1xykXd61Aut5sLUs=)
3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:0d:f9:81:eb:5d:bb:78:72:fd:03:95:bf:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Oct 26 02:00:40 2025 GMT
Not After : Oct 27 02:00:40 2025 GMT
Subject: CN=b7a989849c7ef329f404c519c555394b664f0529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:60:a5:56:6f:e1:82:99:54:9f:fb:e8:3b:
5b:4f:11:82:0c:7a:9e:69:9c:74:de:dd:18:9f:4e:
34:fe:99:0e:ed:99:12:7f:63:64:10:9c:d8:e9:54:
d5:6a:d0:48:74:cb:32:c5:a3:74:6f:40:2b:e0:55:
04:3c:2b:26:9a:da:8b:75:12:2d:07:d8:18:cd:80:
ff:71:ce:04:9b:3c:ff:9f:c7:63:8a:e3:46:0c:c9:
ec:ca:e9:e5:98:2c:34:e4:d3:04:c9:fc:ae:28:d9:
e8:1a:16:56:a5:36:e6:26:fd:a6:ea:02:00:02:8c:
9a:e8:cd:8d:2d:be:28:0a:bf:48:52:10:30:74:6c:
3a:96:40:ce:31:0c:52:32:90:be:d6:dc:d2:ac:f3:
b7:89:c5:96:75:82:b7:9d:11:41:92:c4:09:1a:06:
4f:aa:66:06:b5:64:53:db:eb:b8:fe:01:4d:9b:ae:
10:2d:e2:84:2b:9f:4f:e8:21:5a:90:c5:dd:8e:8a:
8f:66:10:a2:e6:21:44:bd:d3:e1:51:35:5c:76:54:
4e:af:ac:40:54:f6:01:ae:a1:2a:d5:29:86:27:f1:
37:9b:bf:4b:12:62:85:1d:a8:61:5b:68:da:c9:7f:
b4:4d:89:8c:59:c2:c5:cb:76:70:7d:41:41:43:11:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:89:84:9C:7E:F3:29:F4:04:C5:19:C5:55:39:4B:66:4F:05:29
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:ab:84:a1:8c:f8:1a:a4:4a:e5:fa:0b:43:e7:fa:2d:2a:
c3:a5:be:2b:99:19:ad:4f:6d:a9:21:cf:3c:64:cf:c3:90:30:
b3:19:7d:72:aa:db:ca:da:34:e6:6e:ab:67:1c:24:74:5b:4b:
b8:b5:b7:5b:b0:6a:f8:a9:bf:54:6b:5a:cb:9e:5b:2b:ae:2e:
c3:5c:a5:b0:81:37:17:8b:3d:5e:b0:9d:20:36:31:cd:bb:9c:
77:d9:51:cf:01:7d:f2:e2:5e:3f:de:b0:4b:63:a9:2a:c7:ed:
c8:0b:61:48:e8:03:37:c2:19:79:97:43:c7:5c:53:69:da:36:
72:80:d7:d2:ad:52:3c:bd:28:30:55:59:c7:62:29:69:39:07:
96:d3:75:b0:1a:22:15:aa:3f:ad:bf:d7:51:b2:43:67:45:ad:
d5:3f:bc:2d:3a:01:62:0b:2e:33:a5:c6:93:72:a8:86:f8:c1:
b7:5b:3c:f2:46:7d:7e:8c:2e:0d:11:96:11:94:70:e2:24:71:
82:ce:00:a7:fb:55:5c:cf:5f:f7:cc:22:55:5c:e0:fa:16:14:
63:bc:dd:b0:c1:dd:dc:85:23:0e:e6:f9:2b:b8:c2:13:6f:d5:
cd:da:8b:ba:df:df:85:8c:52:04:78:d5:a7:1d:02:90:ea:36:
14:15:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:31:15 2025 by rpki-client