Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: qmFNRSxdZ9ps+Xnlu0gqCcsLcgpLXwH7nANdq8QUwZ4=
Subject key identifier: 95:5D:5E:BB:00:B7:67:99:A5:3B:00:AD:B2:36:09:9D:2A:03:E3:0F
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 0197469DBBBC991E585B0ECD38F20281E254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 04FA
Signing time: Fri 06 Jun 2025 19:00:31 +0000
Manifest this update: Fri 06 Jun 2025 19:00:31 +0000
Manifest next update: Sat 07 Jun 2025 19:00:31 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: GN9QjxrEgJJxetFxLiAU0+WfMulb4CRLEQYVpsFSrDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:bb:bc:99:1e:58:5b:0e:cd:38:f2:02:81:e2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Jun 6 19:00:31 2025 GMT
Not After : Jun 7 19:00:31 2025 GMT
Subject: CN=955d5ebb00b76799a53b00adb236099d2a03e30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:f8:49:a8:8e:fa:62:00:b3:27:04:97:f6:
ce:0e:84:af:86:6a:a6:62:4a:25:de:6c:8a:e0:75:
d7:dc:a4:63:7c:3e:ef:ff:cc:e7:c8:81:3f:f9:13:
09:d3:e3:ad:ba:c0:7f:3a:2e:aa:de:09:28:d9:90:
ff:64:4f:55:51:09:ed:81:42:d4:b4:7e:8f:35:e4:
5f:ae:f6:79:65:75:03:ef:50:5f:f2:da:cb:06:25:
f4:58:dc:df:43:76:1e:a7:7a:c3:6e:ae:21:34:3b:
fa:e5:2a:43:e6:5a:d2:db:71:c3:44:24:90:8e:88:
15:a8:f2:35:11:69:52:17:78:fa:c6:f6:72:04:8f:
9f:c7:c7:5f:2b:35:e5:d9:1b:98:f4:b3:a2:de:9a:
82:65:9b:c9:64:85:32:94:10:29:0c:ad:a6:c7:e3:
66:d6:93:89:bf:c6:a1:3b:c2:68:b3:96:ca:bc:7d:
23:5f:84:10:f7:01:5d:5f:fb:08:13:83:70:b3:aa:
87:72:6a:27:96:3b:53:f5:9e:d3:06:a2:af:0e:bf:
79:7f:be:46:7d:78:0b:10:a8:4d:13:91:5d:93:5c:
82:83:bc:1e:aa:81:59:3c:72:05:25:b2:aa:b0:39:
17:fb:41:25:9a:e2:0f:d1:7b:82:03:80:9a:81:4a:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:5E:BB:00:B7:67:99:A5:3B:00:AD:B2:36:09:9D:2A:03:E3:0F
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:ea:a9:fe:5f:79:84:94:ff:b9:b1:ee:b0:d9:b1:fb:cd:
a3:ae:49:46:5f:9b:54:25:69:20:0c:83:c0:11:c9:b1:2b:d2:
b8:38:7a:0b:76:27:a7:b0:d5:70:3a:3d:7a:c1:4d:27:d9:18:
de:61:c4:aa:96:e7:c6:db:4c:01:28:b9:82:a0:b7:23:f9:6c:
55:eb:9e:44:9d:10:dd:0c:31:33:7b:6f:e2:5e:42:3b:71:4c:
44:9f:d7:4c:63:80:ad:42:b9:da:44:2e:f9:5f:2f:2f:ed:8f:
86:c7:58:92:61:e5:cf:bf:20:a1:c5:dd:1f:a6:d4:65:c2:60:
92:f3:94:7d:b4:ab:62:0b:58:7a:e4:97:1e:b0:f0:40:9c:a9:
ae:37:75:bd:a5:cf:63:dc:38:3b:ce:18:ee:a2:7d:fd:9b:18:
97:25:f7:89:3e:05:9c:10:55:b1:57:a2:b0:b5:41:b6:14:3c:
ab:56:cb:f2:9c:2a:e2:c1:1c:95:1a:c2:25:a3:a3:d6:bb:d8:
67:d6:44:2a:2a:c7:95:2c:6d:c6:58:5b:18:a7:90:5d:05:be:
de:cc:00:2d:7a:30:99:40:98:1e:d4:d7:09:14:f0:c4:3e:38:
e0:13:ac:0a:75:64:9f:a3:46:75:92:a8:6e:52:17:bb:d2:0f:
05:84:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:14 2025 by rpki-client