Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: O9jJEv7LUrInV4FDOvahinzLQQdPO840wuipIv0tNEU=
Subject key identifier: EA:14:4C:B6:35:9F:70:FE:F2:DD:90:CD:7F:CC:47:B5:B6:FE:9E:15
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 0198530D9F86D76BA73FF1AE56F6D4154FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 22:00:58 +0000
Manifest this update: Mon 28 Jul 2025 22:00:58 +0000
Manifest next update: Tue 29 Jul 2025 22:00:58 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: fI0ov1RXD1S/mkX2iyxOQf8wIgVLalWbTfBmEKc8SK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:9f:86:d7:6b:a7:3f:f1:ae:56:f6:d4:15:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Jul 28 22:00:58 2025 GMT
Not After : Jul 29 22:00:58 2025 GMT
Subject: CN=ea144cb6359f70fef2dd90cd7fcc47b5b6fe9e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:2d:86:0b:f4:f8:11:87:0b:b6:07:0b:a2:
66:ef:06:cd:8a:6c:27:d3:ae:1a:ee:87:97:18:4c:
e7:9d:90:28:32:67:47:ca:0e:fc:30:fd:8b:62:93:
16:54:26:ef:03:af:73:ce:fc:e3:f5:3c:6d:85:45:
49:40:8c:6a:8c:56:83:45:a2:8a:03:2c:31:b9:ce:
58:13:d3:f6:c1:91:4e:06:f1:94:46:c8:5a:10:0b:
76:d8:56:4e:6e:7d:bf:b3:db:5f:87:9b:e7:9b:1b:
6d:45:e7:2f:14:88:a8:69:4e:fe:11:2c:e2:e5:14:
8b:a6:2d:18:90:a4:4d:01:0e:ea:20:07:7e:ed:5d:
02:11:19:c6:df:a0:77:ec:83:5b:cf:dc:f5:1e:32:
c5:5e:c6:0e:b4:30:b7:1a:8f:ba:80:35:c6:32:78:
d5:b0:60:fb:75:b9:2e:3c:5d:5b:3a:11:47:b1:b1:
bd:d8:4d:74:1e:41:32:27:64:c9:14:b8:84:f9:63:
b7:98:90:e5:92:7f:66:0d:2f:37:d2:79:24:09:95:
20:09:18:0c:6b:70:09:a9:fb:78:4d:e8:f8:f6:e1:
b2:34:c1:4f:8f:b8:27:9d:bc:fa:63:9e:37:4a:76:
3b:c0:0a:cd:78:db:c7:aa:8b:0b:bc:a4:16:be:43:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:4C:B6:35:9F:70:FE:F2:DD:90:CD:7F:CC:47:B5:B6:FE:9E:15
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5d:d0:fa:b6:64:7d:48:17:8a:0b:33:3e:75:15:14:72:af:
67:b3:59:39:c1:46:f4:3d:e0:72:3a:62:b0:c2:05:b5:59:53:
81:e9:33:c3:b5:31:32:3e:03:36:0d:e5:1c:c2:75:84:86:d5:
92:cb:ec:50:2e:1f:0b:9b:98:4d:54:f7:7b:0a:a8:5f:27:69:
e5:f1:54:8a:33:98:bc:e6:a1:dd:2c:4b:88:d4:8e:f8:59:65:
f8:16:89:1f:d8:00:6a:6a:97:ac:b7:21:30:46:07:a5:ce:b5:
02:c3:42:ea:3e:9d:66:66:44:aa:b2:98:94:59:77:0f:f7:6a:
99:a8:4b:6f:b1:be:af:5c:84:96:ae:26:ae:0f:eb:79:44:ef:
8b:f9:86:d6:78:11:f6:24:36:66:f0:0c:3f:20:93:ce:0d:48:
d8:f3:5c:de:6c:48:59:5a:be:c1:51:da:f4:d9:79:15:ac:52:
89:fd:ad:42:d2:37:39:96:c5:ba:f4:c8:74:a4:cb:05:31:34:
5a:9b:b7:02:56:cf:0c:13:d3:d4:f1:91:f9:73:70:8b:68:c7:
6c:82:a7:77:c9:16:93:d5:fe:cd:9f:14:8f:32:c1:37:1f:45:
7b:13:f3:64:68:a6:61:3c:27:9f:f7:26:6e:e4:14:9f:e9:84:
5a:26:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:27:13 2025 by rpki-client