Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: Z9A3eIndtcXCAXAOEE9/9Vpelezg3irNDoAt+B1MbcA=
Subject key identifier: E6:03:EF:91:3D:A4:1B:52:35:C9:CC:81:12:59:56:5C:22:9E:E5:6A
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019748FA97626B3BBAECC9C3B83F533E6FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0D76
Signing time: Sat 07 Jun 2025 06:01:11 +0000
Manifest this update: Sat 07 Jun 2025 06:01:11 +0000
Manifest next update: Sun 08 Jun 2025 06:01:11 +0000
Files and hashes: 1: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
2: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 83z8ElUTt2ksnCei6N8Cxn+GhWbyXS0hA4VUPDtMvTk=)
3: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:97:62:6b:3b:ba:ec:c9:c3:b8:3f:53:3e:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jun 7 06:01:11 2025 GMT
Not After : Jun 8 06:01:11 2025 GMT
Subject: CN=e603ef913da41b5235c9cc811259565c229ee56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:f6:b6:64:0d:9e:99:24:b8:74:19:d8:88:
73:f5:8f:98:86:25:c4:f1:52:aa:12:60:9f:b9:77:
f2:3f:f7:b5:28:77:f2:04:56:6b:f5:63:e5:c1:85:
7c:b2:f2:0f:12:73:2d:f7:d8:12:7c:63:76:2a:f2:
a6:90:7f:17:0a:a1:28:d3:76:1b:07:e7:bc:4f:23:
f4:24:4d:87:8f:fc:f8:a9:2f:cf:58:6d:3d:da:9b:
8b:cd:d0:95:b4:ab:7a:d4:65:74:d9:c1:ed:d1:e3:
1d:d3:68:34:17:17:c8:b6:75:a2:15:d6:bd:58:b0:
c7:1f:59:a7:9d:9d:37:3a:41:49:80:96:fd:58:b5:
e6:5d:48:b6:86:9d:27:7c:e7:01:d7:b9:41:b1:32:
01:b7:e2:7d:b1:ff:43:53:db:31:a0:a7:8c:47:ca:
bf:6c:69:28:6b:60:b0:74:99:af:07:68:42:fc:ef:
eb:3a:e0:b8:ac:70:9c:90:94:34:37:33:37:a2:76:
18:c8:34:41:6e:be:9c:a0:91:c0:92:9c:a1:c9:62:
66:f5:f0:5d:57:5f:69:ed:4e:09:c8:77:f2:a8:f2:
75:6b:fe:32:58:f3:de:c1:8b:74:f1:fd:05:16:14:
37:cb:8a:98:ce:8f:44:e1:d1:78:29:00:ae:39:88:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:03:EF:91:3D:A4:1B:52:35:C9:CC:81:12:59:56:5C:22:9E:E5:6A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6e:7b:ca:c7:e1:c1:1c:c1:5a:b6:aa:b1:56:6d:50:f1:31:
af:b5:77:2c:87:b4:ed:d3:37:75:25:bb:42:26:66:a9:62:e6:
e6:32:1c:a0:2d:19:af:58:35:59:6e:af:e7:4b:f1:a3:af:6b:
cf:c9:93:06:79:0f:e1:1f:e0:39:8b:6b:d9:de:58:73:61:f3:
4e:8b:31:0c:71:97:82:70:8f:0a:fc:c0:92:d9:e3:2f:b1:a6:
23:96:b3:ee:fa:76:a1:aa:6e:c4:af:e2:81:f2:41:6b:0a:d0:
0d:fe:4c:15:5c:0a:49:d1:ef:b7:d6:78:ab:77:2c:42:a9:52:
5a:28:6a:09:fa:5a:e0:81:00:50:02:5d:df:ed:fe:6d:e4:8b:
4a:c5:26:09:72:60:b7:38:0e:95:1e:15:c6:8a:7d:ae:5d:9c:
0e:40:54:c4:21:1b:6f:57:6f:b4:5c:70:0f:1b:0b:a4:bf:39:
e4:db:ac:53:b0:29:c6:d1:9e:37:ff:bc:8a:c8:4e:86:22:8f:
6a:65:73:21:ef:84:d9:81:4c:3d:00:85:f7:8a:92:d8:62:64:
94:c1:90:e5:91:d6:2b:f0:02:a0:0d:7d:72:d7:b0:ab:0d:06:
10:53:92:77:8b:7e:59:83:c6:d5:58:52:83:86:13:95:35:77:
e2:15:e0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:39 2025 by rpki-client