Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: A0Y2PmyQ7YCKB5tpEqix36agbZOQkyxwUo6BlHDlRwU=
Subject key identifier: 24:92:65:C0:2E:B4:79:28:08:C9:68:EC:DD:CF:9E:30:01:30:BF:64
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 01974C68C55F7F8113D950897632F3DCE587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 22:00:24 +0000
Manifest this update: Sat 07 Jun 2025 22:00:24 +0000
Manifest next update: Sun 08 Jun 2025 22:00:24 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: LaOMA1sxCCftgrHTBrQcy1HzH4K82JG9LzSBsTAkFGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:c5:5f:7f:81:13:d9:50:89:76:32:f3:dc:e5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Jun 7 22:00:24 2025 GMT
Not After : Jun 8 22:00:24 2025 GMT
Subject: CN=249265c02eb4792808c968ecddcf9e300130bf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:b1:7e:b2:0d:da:25:f4:92:be:47:71:f4:
94:eb:51:90:6d:20:bc:bc:63:e6:51:be:16:33:80:
57:2d:01:28:d7:d4:a1:b1:be:f5:e8:36:76:10:68:
ad:fc:33:59:5e:0d:f3:98:9f:f4:dc:1f:4a:90:97:
88:87:ff:4b:09:09:55:05:d9:3a:07:1f:c5:f9:d6:
4d:5e:d3:23:6b:65:3f:43:f5:a9:f7:0f:0f:e9:99:
de:bb:8c:c2:41:b4:ee:78:ce:83:c8:2b:6a:5d:42:
3a:24:3c:ae:51:5d:20:6c:ea:cd:cc:62:1f:36:51:
8c:36:fb:9e:8d:97:ba:1f:a3:51:f3:e6:1b:61:7d:
cb:f3:35:af:af:6b:94:e6:2a:33:3b:a0:7f:d1:67:
49:9a:1c:1d:b5:16:75:a9:f5:22:36:91:99:a1:3b:
aa:9d:41:14:43:d8:fe:34:05:5b:55:1f:6b:cb:0f:
54:19:17:03:24:be:9a:5f:a9:50:6c:93:d6:ae:59:
c6:73:bb:2e:77:01:2c:e5:0d:1b:45:f9:ad:6c:71:
e8:36:75:23:53:fc:74:4d:b8:da:9a:aa:30:af:10:
03:66:ba:2c:a7:c7:a6:b4:89:1e:b7:56:cb:f4:89:
54:14:2f:46:d7:49:1a:94:3d:0f:a6:a6:7a:34:aa:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:65:C0:2E:B4:79:28:08:C9:68:EC:DD:CF:9E:30:01:30:BF:64
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:74:50:4b:96:8f:b6:ff:7f:88:94:4f:0f:0c:1f:2f:ac:6a:
ed:b4:13:10:71:ed:a1:45:ed:9d:90:71:fc:b5:7c:b7:4b:c2:
95:e4:6d:58:e2:20:31:c9:32:ce:b9:a2:b4:1c:d6:ad:2b:3e:
d4:a6:d4:63:39:aa:d9:5c:c5:4c:98:6b:db:29:08:db:a0:db:
d8:ca:bb:3c:20:3f:45:70:23:93:cc:92:48:23:db:8b:24:9e:
6d:3d:19:40:85:50:b6:4d:89:7e:81:51:fd:da:a3:c9:ae:a4:
a4:69:7a:7b:02:69:6c:6e:80:f0:91:fc:77:01:eb:4a:56:46:
66:99:ae:28:cc:42:74:b6:48:2a:24:56:f5:90:ec:09:ac:a6:
4c:7d:8b:98:09:44:d6:cb:66:3c:b8:00:22:94:32:2c:d8:b5:
7d:bf:25:34:b2:b7:1e:c8:65:6d:c3:ea:4b:7d:ba:2c:fa:41:
0a:8a:c6:21:32:cd:b6:aa:ca:c7:7d:6b:b1:7a:a1:e8:73:aa:
54:e6:2a:6c:fa:7c:8d:f9:c8:01:00:7b:91:1e:d8:09:7b:ab:
e4:99:79:cd:ed:f5:74:a0:b2:fc:ae:7f:45:4e:16:71:87:e0:
ac:ab:ac:77:ad:98:50:1a:5d:d1:07:51:dc:67:56:2c:03:14:
2f:3b:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:10:07 2025 by rpki-client