Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: U8THTaBERakd1DMkdfNozSnKfXfegQkt3VObkSVjteU=
Subject key identifier: 02:C6:29:2D:6F:97:FD:3B:0C:97:E9:82:B7:1F:9E:CA:C5:90:17:11
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 01984965155FF0CCDD4B035D339FE1D9E47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 0580
Signing time: Sun 27 Jul 2025 01:00:17 +0000
Manifest this update: Sun 27 Jul 2025 01:00:17 +0000
Manifest next update: Mon 28 Jul 2025 01:00:17 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: 0f3W6S6OWlOLh0VgEbYMdw9UIXfXx+A0CWm1LDDn3/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:15:5f:f0:cc:dd:4b:03:5d:33:9f:e1:d9:e4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Jul 27 01:00:17 2025 GMT
Not After : Jul 28 01:00:17 2025 GMT
Subject: CN=02c6292d6f97fd3b0c97e982b71f9ecac5901711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:91:bb:88:f7:d9:87:e7:61:94:87:62:75:
f7:25:1f:25:e4:e1:e9:32:99:a6:d6:6f:50:33:b4:
62:7e:c2:82:1e:80:62:8e:70:f6:d6:1f:0a:fc:5c:
96:38:59:07:66:59:1f:14:34:d4:5d:5f:60:68:e8:
be:bd:5d:99:96:88:4e:56:74:53:1c:81:dd:22:55:
4f:68:95:12:a8:db:07:e8:d2:3d:62:cd:d9:1b:e0:
7c:75:a5:4b:f1:a0:4e:2c:21:0f:b8:d6:dc:67:c7:
5f:ee:68:90:17:2c:05:75:94:80:c9:ae:3a:f0:25:
8b:55:da:87:12:d1:da:8a:df:3c:7e:80:55:90:7c:
fc:8f:4d:d1:03:ee:58:78:d4:27:56:d2:73:84:83:
20:f2:ba:db:d6:f9:d0:f3:a0:75:ba:35:da:a1:e9:
99:23:59:de:83:22:5b:b6:f9:75:2a:df:d6:88:23:
6a:28:1d:25:4d:d4:2f:11:7f:58:06:f9:51:0d:99:
c7:cd:71:cb:9e:31:04:2a:82:24:f8:77:fc:d3:13:
17:ff:52:dd:9c:fe:93:c3:c9:32:87:e0:29:78:bf:
1f:70:c1:e3:57:e4:23:ad:3e:9c:0a:94:ab:1c:c4:
40:69:7e:27:a1:25:24:0e:ca:83:a3:ed:11:53:d8:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:29:2D:6F:97:FD:3B:0C:97:E9:82:B7:1F:9E:CA:C5:90:17:11
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:7d:96:b9:a7:92:c7:e5:10:50:b5:5b:78:a2:24:a0:79:2e:
74:b8:f3:e9:94:5a:2d:c5:5f:cc:b8:b8:13:f5:60:09:9b:64:
c3:72:92:3c:1d:75:4d:34:fa:4d:81:de:81:97:cb:5d:39:5e:
93:c0:e8:f6:b1:dc:c2:c3:eb:c3:53:b4:47:23:35:a9:c4:ae:
58:3e:05:38:74:5c:53:90:d2:91:24:f0:0a:c5:42:00:c7:76:
85:47:c7:99:df:a4:8d:41:16:51:e6:b8:ec:b7:c5:ee:c2:ff:
96:60:81:c7:a9:64:ce:de:ed:c2:db:df:2a:49:aa:09:15:22:
35:0c:f3:6d:fc:b8:23:a2:27:08:44:f3:d9:e9:a6:8a:34:7e:
19:db:df:2e:06:48:a0:0e:84:fb:6f:7a:28:92:2b:7a:2f:66:
9d:0f:97:96:40:46:0d:a7:1e:58:e8:be:dd:fb:fd:5b:32:87:
fb:8e:45:df:8a:3e:e3:fc:db:b2:bc:a9:59:75:f9:bf:52:f3:
1f:ef:67:79:2c:5d:56:2f:97:de:a3:ac:ca:42:3d:17:23:cf:
ca:ec:c6:16:e7:91:98:93:9e:1f:81:73:e4:5d:4c:07:9f:40:
4e:fd:65:8f:27:84:eb:3c:12:e6:c9:eb:31:82:4d:65:88:50:
bc:65:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:04 2025 by rpki-client