Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: XNx8UXItZ3ppDSgqPZutYdXzOyrYk6cpKCV+dw+b+VY=
Subject key identifier: 91:4F:09:D3:F2:3E:B5:E6:09:BE:DA:96:6C:0A:0F:25:B4:AC:66:97
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019A0A4AA17B7ABA0C33BF78CB014B60C678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0FEA
Signing time: Wed 22 Oct 2025 05:00:54 +0000
Manifest this update: Wed 22 Oct 2025 05:00:54 +0000
Manifest next update: Thu 23 Oct 2025 05:00:54 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: 6XnwK2SOFCbstB51apdpDZsuiyhB04QIWXLswn+8iwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:a1:7b:7a:ba:0c:33:bf:78:cb:01:4b:60:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Oct 22 05:00:54 2025 GMT
Not After : Oct 23 05:00:54 2025 GMT
Subject: CN=914f09d3f23eb5e609beda966c0a0f25b4ac6697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:e1:60:e8:55:22:d9:c8:df:6e:5a:f0:e0:
98:61:bf:79:fe:0f:f1:a7:5b:8b:b3:57:46:65:6f:
e2:8b:d7:72:af:28:52:69:69:00:1e:f6:3c:d5:e7:
2a:31:f4:de:86:6c:b9:9c:62:fb:e6:52:14:c5:79:
39:ff:84:0d:a0:c8:74:3f:1c:d7:96:c1:0d:97:97:
21:07:93:47:17:b8:8a:db:5f:2e:29:de:d7:f8:d9:
b2:6a:84:cf:04:2e:10:7f:f7:07:de:5f:71:9f:63:
d5:86:b4:e2:fe:ca:9f:d1:74:de:c6:20:0c:34:89:
df:fa:80:34:81:a8:87:bf:07:0c:fb:4e:f1:4c:f1:
47:c5:d4:58:b6:66:28:23:5a:68:de:e3:1a:73:81:
93:b3:f0:f6:e6:22:27:53:d0:83:f1:87:1f:ee:48:
14:a6:8c:c1:7a:51:21:8d:00:ec:10:1c:41:e7:f5:
f3:34:f1:12:7b:18:f9:3f:96:a1:03:f7:f9:5e:cd:
94:91:e0:fc:f7:cd:68:0e:6a:45:79:93:b5:28:8c:
7b:8a:b6:43:c4:d8:33:65:a8:3e:ba:3b:c9:75:7a:
e9:43:97:cd:55:fa:1a:22:7e:6f:b6:f0:d9:62:eb:
9e:9f:5c:97:3e:41:d2:2f:ea:22:b9:70:ba:9d:ad:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:09:D3:F2:3E:B5:E6:09:BE:DA:96:6C:0A:0F:25:B4:AC:66:97
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:ef:38:8f:85:19:bf:90:9d:a0:3a:b0:9d:b7:33:19:8a:
07:fa:33:f4:33:4b:48:4d:bb:01:ba:38:df:88:40:c9:2f:c6:
3f:99:4a:7d:82:99:89:4c:75:b8:44:b3:8c:13:38:e8:5d:d3:
16:fc:a0:91:df:54:5e:24:9c:c2:7c:f4:98:2d:5a:64:f8:a8:
87:68:90:57:ac:29:7d:e4:d3:8a:e7:6a:f0:74:a3:ab:7a:e9:
84:0a:13:04:61:f1:de:2a:a4:5c:f6:7c:4c:fd:4e:3d:d8:c3:
5b:3e:03:6f:08:1e:5d:3e:20:c0:8f:a5:c9:0f:ca:02:76:a1:
b1:43:c2:72:11:72:90:b9:e4:0b:11:a3:00:d1:9e:39:88:23:
a8:0e:fb:54:0f:1a:31:04:49:01:89:c5:a7:b6:3b:dc:f8:47:
64:c3:b5:f8:85:d6:f7:65:a5:72:d4:2d:0d:8a:6a:66:3e:9c:
9e:c9:9f:46:23:e4:b8:cd:ab:d3:09:39:85:2a:8f:74:d3:e3:
30:94:df:2e:64:3a:7d:1e:34:0d:71:4b:07:e9:53:cb:d4:71:
8b:6a:81:b0:3b:0e:ba:75:70:bf:7c:58:07:90:b2:3b:ea:c6:
36:7d:52:33:36:35:a7:4f:d1:4f:5e:ba:10:3c:8e:66:9b:86:
49:2e:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:38:17 2025 by rpki-client