Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: TKaPjDL1Iznq/Zrz/sTj2U1nvUJ+tC9G/Ut0lFlk0WE=
Subject key identifier: 76:F0:D1:7A:CA:FA:EF:86:D9:3A:44:08:DE:AE:E9:5B:C9:5F:F6:63
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 01974AE92D03AC9FB4EB08A36609BD55C9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 1294
Signing time: Sat 07 Jun 2025 15:01:24 +0000
Manifest this update: Sat 07 Jun 2025 15:01:24 +0000
Manifest next update: Sun 08 Jun 2025 15:01:24 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: YWn8PNIAdF/PVfHY9INUfPE07NBNCK+X0Tzdb2bRxKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:2d:03:ac:9f:b4:eb:08:a3:66:09:bd:55:c9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Jun 7 15:01:24 2025 GMT
Not After : Jun 8 15:01:24 2025 GMT
Subject: CN=76f0d17acafaef86d93a4408deaee95bc95ff663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:d4:d0:e9:2b:92:a5:5b:7c:7e:5e:1e:a4:
d5:95:2d:27:b2:84:d3:b1:52:69:79:bc:d0:79:21:
36:59:3e:98:6a:52:bf:17:3d:f0:33:9f:0f:0d:72:
8b:8f:03:e1:63:6f:56:7f:72:4d:43:66:6e:95:f2:
cf:79:5a:c7:85:5c:00:d7:ca:dd:63:4d:46:96:ec:
c6:b7:12:96:29:fe:87:89:37:38:4d:b9:d9:40:c6:
6f:93:81:c0:6c:65:95:45:f3:e0:44:0d:e2:64:98:
3e:9f:6e:ed:2e:1f:02:af:96:2c:b9:fe:a0:9c:7b:
a7:c0:6f:61:be:94:91:08:4f:d9:4a:39:b2:a7:23:
c2:1f:df:e3:fc:25:72:75:8a:ab:2a:b9:6e:85:36:
65:7f:91:51:2b:1e:60:88:37:30:fe:16:65:63:a0:
f9:3a:55:87:84:67:e3:e1:b5:0b:27:93:c1:dd:f3:
8a:c1:de:91:ab:83:b4:a2:10:cb:b7:fe:44:b5:8d:
74:5f:01:f9:6e:41:47:52:ae:3a:ae:38:9e:c6:93:
67:3d:27:b1:4f:fb:a9:59:25:a5:9b:48:24:2a:05:
df:4d:4b:d5:a9:47:e0:5a:cb:49:4c:d2:d6:62:f6:
a9:6a:1a:be:bc:15:8b:57:0a:6b:09:43:f8:9a:17:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:D1:7A:CA:FA:EF:86:D9:3A:44:08:DE:AE:E9:5B:C9:5F:F6:63
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:46:15:4a:56:ee:cb:0c:e9:a8:72:2e:f3:4e:bc:de:aa:
9b:12:ce:cd:ad:09:54:ab:73:d5:97:d4:97:f0:6b:98:b9:81:
59:fe:03:93:b5:54:0f:1b:0e:3a:d6:dc:57:35:9d:ad:af:4d:
05:58:04:d3:94:90:f6:7e:5e:7d:cc:67:c2:19:92:3d:38:f3:
1e:94:35:ae:1b:4f:74:68:96:46:1d:89:fc:de:9c:55:63:fa:
07:67:af:4a:5c:b7:92:2d:3f:ec:46:d7:ad:27:1e:94:09:59:
84:ce:bf:f5:e6:88:f9:9e:5f:a5:28:fd:46:31:44:0c:c0:57:
dd:d1:1d:9e:a6:14:be:e2:73:16:bd:bb:04:b1:74:6f:eb:14:
cc:c4:02:36:f1:9b:39:88:65:4e:0a:93:68:1b:20:83:aa:d2:
b4:69:57:e3:3a:ff:96:f2:ff:08:c4:c4:a5:7a:46:f3:40:2f:
a1:f3:40:e4:6f:80:50:bf:a1:42:a7:07:99:1a:b6:e9:9a:46:
fe:7c:c4:7f:0b:48:5e:cd:01:d0:9e:63:dc:40:a6:d5:d1:59:
b7:88:b3:54:1d:13:52:78:12:87:cb:d6:14:eb:46:9f:8f:28:
ce:ca:00:8b:a3:b7:67:ff:60:1d:9e:cb:02:f0:88:7a:c3:fd:
a6:4f:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:19 2025 by rpki-client