Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: HGOn4YJb3zuMkB7CJorAm3pWD2IFC+vQmJWjZDVOiGs=
Subject key identifier: 76:79:FD:8E:4B:B9:A0:7C:9E:F5:0F:6C:D3:9A:D1:3D:4E:09:33:1C
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 01974AE92FC260DE0EF579674333E662F03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 01D6
Signing time: Sat 07 Jun 2025 15:01:25 +0000
Manifest this update: Sat 07 Jun 2025 15:01:25 +0000
Manifest next update: Sun 08 Jun 2025 15:01:25 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: +/cOLJaW80of4v8c/QU+sPsl7PvWhWGYP8A62xA/laE=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:2f:c2:60:de:0e:f5:79:67:43:33:e6:62:f0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Jun 7 15:01:25 2025 GMT
Not After : Jun 8 15:01:25 2025 GMT
Subject: CN=7679fd8e4bb9a07c9ef50f6cd39ad13d4e09331c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:7c:c0:3a:8f:7e:b9:08:a6:9e:6b:96:43:
d9:24:f0:73:34:58:9e:bb:9e:c5:5d:f8:18:50:01:
f3:40:48:56:26:a3:74:5f:f5:0a:a0:f6:96:14:bf:
e5:d9:2c:25:23:68:85:3f:97:af:95:df:26:ab:26:
9f:08:e6:62:35:03:04:ca:b9:17:37:21:ed:c9:e5:
fe:38:d4:00:67:16:01:17:82:76:13:79:51:a1:9b:
9e:18:69:58:8b:c9:4e:8a:6d:5e:b9:46:d4:c1:ec:
87:e8:77:4a:bd:f7:dc:d6:62:98:26:bc:a0:78:f9:
39:56:d2:c7:c6:32:b7:5d:e6:4a:e1:91:43:8d:28:
3a:c6:41:2e:66:e2:a9:f4:b0:c6:60:3d:5f:55:fd:
c2:8e:4c:6b:7c:50:14:7c:c5:e3:14:c1:c3:30:b6:
f7:33:e0:90:df:ab:68:28:36:47:bb:81:16:4e:42:
2a:3b:cf:2a:f5:c5:2c:e5:ca:3c:61:d1:86:ee:a3:
73:1f:c6:b9:f9:64:b2:fa:43:83:c0:66:b2:96:39:
1e:3b:ab:ba:7a:d7:66:3b:f5:21:3e:20:71:74:e1:
cc:23:de:a3:d1:01:99:b5:79:5d:7c:54:d7:57:22:
4b:83:a4:ae:5f:e8:67:32:40:58:22:6e:dc:4c:b4:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:FD:8E:4B:B9:A0:7C:9E:F5:0F:6C:D3:9A:D1:3D:4E:09:33:1C
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3e:47:13:20:60:ca:87:9e:a8:a1:b2:d1:a5:2c:05:c0:87:
05:af:0a:d6:b9:32:93:b6:40:c4:67:0b:a1:b2:31:04:49:db:
91:f1:f7:2e:8d:c6:16:13:2f:2e:9d:2e:43:c6:4c:b1:83:18:
24:19:e8:e6:82:d1:bb:96:ba:f4:d5:c8:09:e5:61:57:f6:74:
c2:93:09:9a:a3:1e:ea:fd:1b:fa:ee:9d:db:e7:df:64:a5:14:
4b:e9:b6:e2:e5:40:bc:56:00:0a:6d:ad:d8:54:07:d0:4a:5d:
a0:5c:bc:f1:6c:d4:81:3f:8f:7f:f7:11:80:4e:ea:a0:53:b1:
ee:a8:b3:7f:9d:4f:4b:77:e1:44:18:c5:97:ea:70:54:8e:5b:
2e:00:dd:4e:cb:18:e3:b4:31:d1:84:45:73:94:b3:58:0e:b9:
24:67:39:6d:d3:d5:d6:ae:d8:00:d7:99:a9:e2:49:d5:81:62:
55:7e:fc:34:31:30:6b:8c:07:74:a6:9b:de:25:19:bd:40:60:
b5:bb:84:81:3d:5b:3e:6f:89:6a:b5:9b:fd:ec:bd:6b:4d:f6:
ba:f8:4f:ea:26:77:70:dd:4c:d5:57:95:ca:46:ca:ae:7c:09:
fa:3e:81:e5:6e:89:30:15:7d:94:a4:fb:8b:bc:b4:23:91:bd:
ee:7d:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:54 2025 by rpki-client