Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: 2JP9IwVf6EMACNZOphKrf4H74Vt228A4LJ+lmswuBjs=
Subject key identifier: A0:CE:86:5A:16:18:3F:51:26:65:A6:8C:E1:0C:41:62:8A:45:C5:60
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 01974B564D8D5B52EA4C9D9159947534F544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0E7E
Signing time: Sat 07 Jun 2025 17:00:36 +0000
Manifest this update: Sat 07 Jun 2025 17:00:36 +0000
Manifest next update: Sun 08 Jun 2025 17:00:36 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: 2ApHPsW+KjL3AkHkIFafKT8OlO5POfEPcZjlORYDsEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:4d:8d:5b:52:ea:4c:9d:91:59:94:75:34:f5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jun 7 17:00:36 2025 GMT
Not After : Jun 8 17:00:36 2025 GMT
Subject: CN=a0ce865a16183f512665a68ce10c41628a45c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:f2:6f:28:5f:66:74:c6:4e:d1:66:e3:7e:
d2:e5:fb:b5:2b:4c:bc:03:f6:61:50:10:b2:d6:23:
ff:2d:18:f1:a1:9c:0c:81:4f:f2:cd:0b:08:74:d9:
3b:46:4c:08:16:20:78:05:5f:35:ff:a3:6c:4b:64:
29:ef:10:8f:72:cc:a7:cf:fc:5a:78:55:e2:a9:48:
f1:b2:7f:76:3b:57:d5:a8:ba:12:09:39:a6:74:0f:
32:3a:c9:87:c2:ae:9f:40:37:87:59:4c:95:b7:04:
d5:5c:7c:93:24:ae:b4:80:7c:a6:9d:55:53:cb:25:
13:f7:14:b2:8b:54:b9:d4:a7:b7:da:56:8b:db:b7:
65:f7:d7:6d:b6:3a:b3:07:9c:b8:69:23:72:44:3a:
67:20:2c:b5:7f:7b:f6:53:d1:5f:ac:df:e5:63:07:
22:84:ce:57:32:b5:40:67:73:76:bc:73:58:e5:74:
c1:ca:48:67:8f:86:ca:32:2f:4b:bb:6d:5f:4f:1f:
33:5a:4d:7a:49:ee:cb:dd:7d:12:22:bb:d8:d2:cd:
19:26:8e:f5:f6:c8:b6:92:c1:7e:9c:92:0f:95:8b:
f9:cf:78:4d:a1:f8:98:ba:78:b3:eb:ac:8d:8c:8a:
f2:6d:aa:fb:0b:39:71:1c:66:a5:c5:41:dd:c5:5f:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:86:5A:16:18:3F:51:26:65:A6:8C:E1:0C:41:62:8A:45:C5:60
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:aa:b4:29:9b:21:37:73:2a:dc:8c:cd:0f:16:49:c9:30:ef:
f4:a6:b9:2c:7d:7c:29:c2:30:5c:0d:ec:22:00:68:40:c4:fb:
76:4d:9a:db:8c:fb:f8:6e:8e:84:69:a0:a1:c9:d1:bf:05:f3:
45:b9:b9:26:f2:50:a8:2e:9a:02:38:ed:ad:65:c7:45:75:60:
2e:3a:10:fc:51:dd:0b:c3:03:62:eb:3b:62:88:56:00:5e:fd:
5a:60:e6:ed:68:aa:0d:f3:06:d9:af:f1:e0:21:88:28:18:28:
79:22:72:80:e0:3c:61:1f:01:30:fa:68:8c:24:db:52:7d:4a:
22:33:63:8b:8b:fe:86:75:52:18:6f:42:fc:df:0d:10:ed:aa:
a2:62:13:e8:5b:15:2c:a7:11:cb:3a:5e:c0:c9:57:f2:9f:7f:
fd:d7:68:91:ef:b7:ba:67:fd:07:7a:de:40:11:a2:41:6c:02:
9f:14:47:26:94:14:dc:27:ca:48:36:1f:d7:06:b8:8f:90:5a:
77:7f:25:bd:29:26:1f:fd:42:83:56:c3:d5:58:2a:84:37:7a:
1f:f0:be:16:bc:38:b3:63:7e:3f:d5:3d:c1:21:25:d8:6b:35:
3e:b2:d6:33:bf:18:e1:69:06:11:77:f0:3d:02:08:e7:f1:2a:
23:e7:ed:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:55 2025 by rpki-client