Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: tW4t8/gisQB7Q0we75vqczxERr1XqLQi/H7xNhz8lps=
Subject key identifier: A8:D1:42:29:FF:D1:F4:96:61:F3:65:93:8B:CB:8A:23:49:40:58:B5
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 01974AE900C29F7C6A86FB79E946075C8213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 15:01:13 +0000
Manifest this update: Sat 07 Jun 2025 15:01:13 +0000
Manifest next update: Sun 08 Jun 2025 15:01:13 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: nvOxD89GPu2K6D8GkG1nVeBYyq7FE43NhEOVYRDtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:00:c2:9f:7c:6a:86:fb:79:e9:46:07:5c:82:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Jun 7 15:01:13 2025 GMT
Not After : Jun 8 15:01:13 2025 GMT
Subject: CN=a8d14229ffd1f49661f365938bcb8a23494058b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:22:95:3d:5e:2f:9b:c8:85:c1:a0:cf:a0:
46:b8:1f:fc:61:fc:5f:18:4d:ad:f9:de:b0:67:82:
20:c4:c5:0a:f0:bb:00:f0:3c:f4:ba:64:88:db:d9:
3d:02:ec:a1:84:47:05:6a:72:e6:71:e1:d9:82:a3:
cc:77:84:8d:6f:94:c2:e5:2f:33:b6:7c:dd:ac:da:
f5:11:e5:aa:3f:f5:67:06:23:a8:8c:4b:33:72:31:
0a:4d:fd:e9:2e:0d:22:da:79:e7:47:df:8a:02:79:
42:61:80:7f:9b:bc:f2:24:bd:63:87:ec:27:2e:c5:
38:45:19:d6:75:8b:79:95:2c:4b:f0:3e:8b:fd:a0:
ae:2f:54:82:06:c2:a9:00:d7:15:c0:ea:1e:d4:65:
98:8b:e8:15:40:05:2e:cc:6d:2e:61:74:56:24:99:
ad:05:bd:58:4a:6f:26:73:b2:24:22:1c:cc:f0:83:
37:c6:11:fe:cb:f7:8a:52:9c:b1:32:d9:8a:2d:dc:
2b:a4:19:5b:db:11:bd:f8:fc:b7:d6:c2:cf:2f:fb:
32:41:52:61:e5:3d:26:0f:fa:6b:24:62:57:b0:76:
16:79:d6:be:a3:4a:4c:b6:37:26:86:f5:a4:78:5e:
57:c0:7f:fe:d4:83:60:95:6e:22:6e:0c:1a:69:74:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:42:29:FF:D1:F4:96:61:F3:65:93:8B:CB:8A:23:49:40:58:B5
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:69:bd:a8:13:b1:53:93:fd:a9:34:40:ba:85:9a:41:72:
cc:cf:92:93:ca:80:4a:a7:03:02:05:23:32:06:f7:b3:bb:28:
7c:cb:22:8e:dc:bd:05:2c:43:7e:2b:7b:fc:01:1f:0f:f8:a1:
4b:3e:14:7f:41:12:6b:cb:a2:60:17:d2:6f:4c:d6:54:d2:c4:
e1:5d:59:07:d5:1d:c5:d0:54:98:02:4a:f0:fd:35:8b:db:28:
7b:ae:6e:f1:ab:82:7d:1c:c8:8a:15:11:c6:75:39:95:d8:90:
7d:02:d4:05:7e:cc:fc:6b:8e:5f:a9:c7:97:20:2f:ea:cb:90:
2b:d7:80:9e:31:87:08:e6:58:bb:e7:42:55:e4:27:84:2b:14:
57:12:ff:a4:8e:83:ed:c4:08:e6:f6:3c:56:76:07:e1:4a:31:
1d:66:d3:b3:17:a6:39:37:2f:3d:b2:05:cc:9a:98:2c:15:32:
40:31:94:a2:bb:44:67:e3:da:93:72:b5:df:a1:bf:59:b3:a8:
44:8e:ca:6f:c7:8b:28:aa:09:5b:dc:c7:eb:a7:fb:01:7c:3a:
6b:9e:da:ea:2a:0f:99:39:98:3e:ba:c1:b1:fd:a2:4f:3c:03:
75:ed:a4:f6:fd:b7:ce:d7:9c:19:6b:ae:83:cc:be:fd:4e:94:
2a:22:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:38 2025 by rpki-client