Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier: hBD1CQn8dvVXM3mUgMW7VDEha5PCG1WgTTR2KVZxiBg=
Subject key identifier: BE:C7:F8:0E:C9:6C:67:9C:79:DE:B6:05:DB:A2:8A:02:72:FC:CB:E0
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 019A2FA029D5EC00F9BC62C092620C4BFB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number: 034D
Signing time: Wed 29 Oct 2025 11:00:16 +0000
Manifest this update: Wed 29 Oct 2025 11:00:16 +0000
Manifest next update: Thu 30 Oct 2025 11:00:16 +0000
Files and hashes: 1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=)
2: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: 3FDuP9ZyBbXLQ9wAPOu360NiiD2Fl/zpim2XVdwm0fA=)
3: sUY5J2N8PCLs__awrXNAzoRAVL0.roa (hash: ey1paCcg6V8UnGfsgdc6JpJWrVKzneosnYZFoSG6890=)
4: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=)
5: y6CjvWQerUp0Mv77KMhz5spMEWA.roa (hash: BRh0sxRN6LJqe+S+C32b8EMbRfEqAVHqJDsn1Jnu7HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:29:d5:ec:00:f9:bc:62:c0:92:62:0c:4b:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Oct 29 11:00:16 2025 GMT
Not After : Oct 30 11:00:16 2025 GMT
Subject: CN=bec7f80ec96c679c79deb605dba28a0272fccbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:f6:47:5c:fb:aa:e7:b6:d0:8d:52:80:77:
f3:3e:a3:4e:fe:fc:6f:45:7c:4e:32:7a:59:11:d9:
37:22:87:b5:52:4f:9a:e7:84:a4:0a:be:7f:77:5f:
2f:ea:f8:7e:35:ca:a9:71:5f:13:65:5b:35:54:1d:
62:98:9a:91:45:3a:35:43:ae:44:87:70:20:92:8d:
12:de:13:d2:dd:74:63:96:39:eb:e0:62:4e:f9:fb:
bf:27:c0:1a:f3:6f:d3:a1:a8:71:0b:07:2b:ed:44:
2b:9c:32:7e:dc:76:35:6b:51:1b:9f:9d:67:08:f2:
ef:62:83:ac:3f:b2:53:27:f9:4b:f7:20:00:ef:54:
bd:1f:82:9a:11:66:87:90:06:54:68:be:59:89:ce:
4c:1c:00:0b:c3:3f:66:88:03:b6:23:99:5e:ac:ba:
ce:18:0b:ae:30:08:e2:06:5f:12:88:c2:80:5e:c8:
c6:91:7f:24:36:ae:78:aa:3f:8e:83:3f:59:93:36:
96:09:fc:e3:5e:00:84:38:00:a6:3b:20:fd:2e:25:
ba:72:f7:8a:92:78:68:cb:48:13:b3:04:5a:82:63:
93:59:d6:58:55:15:d0:31:76:29:2d:be:2f:e3:3f:
99:23:f0:6a:56:fc:53:ee:64:c0:58:98:f7:d0:a0:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:F8:0E:C9:6C:67:9C:79:DE:B6:05:DB:A2:8A:02:72:FC:CB:E0
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5f:40:da:f9:ff:48:16:1b:79:60:1b:1c:92:c5:21:3c:12:
c8:b0:cc:c4:5d:f1:f3:1e:34:ed:09:48:65:c1:97:03:fb:1c:
dc:cd:ce:8f:a0:c1:bc:a5:3c:19:55:ae:08:a1:8f:db:21:ce:
be:f2:6b:32:1d:0e:76:ad:06:92:47:5d:f9:ef:41:5e:b5:68:
6c:d6:d5:69:ec:21:36:19:04:11:fd:0e:40:cf:67:ff:aa:93:
13:7e:5e:08:e6:75:79:3a:34:f8:23:33:4c:17:bd:4f:0e:97:
73:af:a9:5c:aa:11:b1:19:a9:0f:2d:a7:89:96:dd:1d:44:c9:
bd:5c:16:c2:d4:a4:ef:dc:67:2e:43:15:2a:20:7d:90:32:f6:
37:a9:bc:52:15:c9:b7:a6:ef:92:94:6c:bf:65:a2:af:69:42:
fe:e0:28:dc:16:74:c3:96:6e:3b:a0:aa:0e:b8:b0:33:6b:f1:
0e:b6:51:67:2a:c0:23:6c:3a:5c:2a:11:01:8c:0c:16:b1:19:
2b:35:3f:d8:30:d9:a4:a7:42:ce:cb:09:23:d0:5b:eb:87:23:
21:42:3e:22:41:c0:44:65:dd:89:13:3d:91:d4:4f:a3:53:7f:
66:97:74:a0:d6:a7:12:b9:56:b8:50:da:a8:ec:80:d5:cd:9f:
2f:4c:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:39:56 2025 by rpki-client