Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: hWTk0LcGdsZkLivwQg4rWaSugykq8vtFQxYdvc2qkvU=
Subject key identifier: E8:16:44:E7:71:FC:A9:FB:A1:8E:D9:5C:5A:AD:02:07:D0:B4:77:18
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0199239F1A523D44D20FD5F7E1DF2F768C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 163E
Signing time: Sun 07 Sep 2025 10:00:53 +0000
Manifest this update: Sun 07 Sep 2025 10:00:53 +0000
Manifest next update: Mon 08 Sep 2025 10:00:53 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: cl/44zUZEs0Fzeg09gDmE/JlGG/aVzei1L9379rig4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:1a:52:3d:44:d2:0f:d5:f7:e1:df:2f:76:8c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Sep 7 10:00:53 2025 GMT
Not After : Sep 8 10:00:53 2025 GMT
Subject: CN=e81644e771fca9fba18ed95c5aad0207d0b47718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:64:68:28:51:cd:38:40:03:db:b3:e9:9c:
99:9c:a3:8d:c6:20:13:3c:12:67:e7:4c:5b:2d:b4:
39:38:7c:05:a5:65:6f:bf:c7:ee:75:5f:7f:f5:7a:
3d:43:2b:44:f4:9e:71:cf:32:e5:2f:70:46:64:69:
3a:eb:1c:97:2a:c7:b8:9d:c3:dd:26:08:dd:63:c7:
bc:da:0f:fc:59:f5:7d:60:16:ab:f6:68:cf:b5:56:
06:9c:86:ec:29:44:3c:48:5f:24:15:0c:92:d3:d3:
41:4d:98:20:4a:86:e5:13:ea:28:db:b9:28:04:42:
71:08:d0:51:df:a9:58:75:00:d3:af:fc:11:61:69:
fc:f3:5e:ad:b5:42:13:da:99:1a:1c:8a:4f:fe:10:
13:2a:af:48:55:1d:3c:43:c8:9c:d0:7b:79:84:a4:
ff:40:8d:54:1e:d8:63:cf:5d:b6:2b:c1:10:e9:0f:
a6:12:ff:f5:37:31:64:78:71:ae:37:2e:76:aa:95:
67:93:e2:e8:3e:6e:e3:d0:17:0b:e6:f8:d4:49:c4:
93:9a:10:42:89:83:a7:b5:c9:7a:93:79:e1:a0:7d:
11:de:b1:f1:53:02:f4:cb:a1:1d:63:b5:e0:17:8d:
67:a0:de:3c:e6:77:4f:5c:02:17:e9:95:2b:bc:f8:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:44:E7:71:FC:A9:FB:A1:8E:D9:5C:5A:AD:02:07:D0:B4:77:18
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e6:68:40:14:1a:bb:6e:e2:d7:55:25:33:75:1a:7b:63:2a:
31:fb:b1:55:65:2a:b1:3c:75:c1:2d:36:1f:b2:92:5c:d7:24:
17:1a:34:b8:e3:ea:fa:94:eb:d8:ce:be:78:9a:cf:08:6e:39:
41:1f:63:75:33:5f:6c:0b:59:71:25:ce:7e:35:3a:76:2e:86:
47:57:c7:ee:33:3f:45:62:46:c0:7a:2f:33:84:db:77:fe:bf:
6c:5d:f0:bf:d2:10:1e:d0:11:88:4d:37:02:be:69:49:2f:ff:
6d:e4:c7:64:64:1b:a9:24:26:a4:7c:fe:43:2d:bd:93:a0:17:
86:fa:3c:c7:36:c9:d4:11:b5:7d:c3:54:e8:0f:cd:3b:7c:8a:
6d:a9:34:10:24:45:23:e4:0a:f6:eb:48:f2:61:59:aa:66:80:
3d:63:7e:5a:e2:f8:5f:e7:40:00:03:72:61:9c:07:e3:70:d9:
29:0e:32:7b:b0:4c:48:2d:3d:44:04:07:9a:d2:63:5e:77:7d:
82:49:aa:7f:c5:b0:17:2b:a3:12:d3:e6:21:8b:76:ac:b0:ec:
83:4a:33:7d:fc:e9:d2:9e:82:c3:a6:33:e0:1d:48:d7:47:0d:
9b:d0:42:57:36:a0:f4:5c:16:14:40:45:2c:5c:b1:ef:d2:b6:
e4:b1:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:05 2025 by rpki-client