Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: DrzY4H90zHQv39DGvcI9rV2M3AAZ6RUC0nx7D4ra49I=
Subject key identifier: AF:51:54:7C:6B:12:21:40:7E:A8:16:23:DE:C8:0E:A3:DD:6E:D3:57
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0197C9F10D1C194AEBD3C8DDF19AC784ACA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 158B
Signing time: Wed 02 Jul 2025 07:01:47 +0000
Manifest this update: Wed 02 Jul 2025 07:01:47 +0000
Manifest next update: Thu 03 Jul 2025 07:01:47 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: 1+H+LFit5SDVnUs/2CtEMsVoNwnBvw5FqhY66DKss98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:0d:1c:19:4a:eb:d3:c8:dd:f1:9a:c7:84:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Jul 2 07:01:47 2025 GMT
Not After : Jul 3 07:01:47 2025 GMT
Subject: CN=af51547c6b1221407ea81623dec80ea3dd6ed357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:4f:5a:0e:1c:8b:43:3b:fb:88:0e:b3:04:
f0:73:ac:46:f5:bc:2f:d4:3c:84:c0:49:af:91:d3:
67:28:31:96:c1:6a:9f:59:e7:9f:ad:e9:5a:6d:b9:
74:ec:64:6e:69:aa:5b:f9:d4:b8:df:8a:eb:1d:eb:
6b:e3:cc:f2:cc:e6:c2:c6:09:db:62:01:d1:e6:d7:
b4:d6:33:5f:6a:a1:12:73:b9:f7:91:14:30:45:69:
4f:bc:da:fa:fd:01:5f:a8:d7:14:fe:54:41:8d:cc:
88:10:6c:d9:aa:3c:4b:f2:ea:e2:72:b3:9f:e7:09:
12:3a:d5:30:8e:14:30:35:a6:1f:04:d4:6c:f4:06:
06:49:91:b7:27:01:32:5f:4b:0f:06:8e:15:5f:20:
32:9f:84:cf:ed:15:21:98:b7:83:4f:56:72:ec:15:
e6:ff:33:58:b9:bb:87:1c:1e:d9:59:93:2b:b6:47:
a6:5a:ba:81:1f:75:86:22:51:d5:3f:c4:0a:60:b8:
78:6a:c7:70:d0:22:cc:a1:4c:48:8d:1f:37:f3:fc:
e9:a6:cd:9c:04:b5:23:c8:3c:d0:79:04:64:71:90:
ec:ee:4a:b7:cd:71:e0:b1:30:45:e5:a5:bd:74:91:
c3:c4:75:b6:40:e5:4d:9a:12:b0:30:bc:4d:91:7a:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:51:54:7C:6B:12:21:40:7E:A8:16:23:DE:C8:0E:A3:DD:6E:D3:57
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:21:61:7a:15:17:0e:0a:ac:3e:8c:2d:ad:0d:ad:2e:18:
51:7b:0e:ea:7c:85:79:65:08:07:b6:7b:8d:d5:89:a7:1a:1a:
f0:48:89:aa:30:cf:0d:ee:5f:b7:81:ce:ba:51:c7:a4:cb:35:
49:ec:35:bf:89:0b:9d:9c:27:ed:d8:5c:e8:26:fe:47:15:97:
59:8a:e3:f8:9b:06:84:76:4c:c9:cf:80:16:c4:62:af:3b:31:
16:aa:d9:b6:ca:13:7d:33:4a:5e:09:5c:7e:6e:9a:e6:ce:f0:
e5:8a:24:cc:75:72:c7:f9:db:8e:d7:54:85:bd:41:d2:1f:37:
e0:dd:35:95:8a:f9:af:7e:00:e3:a5:68:29:a9:8b:37:64:56:
f6:8f:2a:4c:12:49:2d:b3:e1:0c:dd:e2:c5:63:40:0b:9e:53:
29:f2:1a:f9:91:e5:ce:03:d7:9d:07:e3:57:f6:2c:6a:6a:d4:
18:a1:01:31:39:e1:84:7e:15:f3:1a:f4:42:09:29:f5:be:11:
5c:e1:a6:93:9f:29:51:0b:97:f8:6c:7a:10:7c:5c:85:40:63:
5d:c0:da:ad:79:23:b0:55:3f:d5:4a:df:80:f1:a9:b0:22:4b:
5b:21:90:81:b8:e2:c9:1e:c0:0e:ac:ba:1c:69:74:81:ae:30:
84:16:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:09:22 2025 by rpki-client