Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json)
Hash identifier: oMmfArOGZx2CT7bzYQUQsgvApUD/ZTT0zGAWPxh6cq8=
Subject key identifier: FE:C2:B8:4A:59:DA:32:39:37:B3:C9:18:0F:E5:9B:C6:7B:55:78:40
Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Certificate serial: 019748552F8A386A4FCA60B21413333F7305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
Manifest number: 35
Signing time: Sat 07 Jun 2025 03:00:31 +0000
Manifest this update: Sat 07 Jun 2025 03:00:31 +0000
Manifest next update: Sun 08 Jun 2025 03:00:31 +0000
Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: PJ27aprP237jjsIMakMt4N6+ku+varub5DMO2TxpPd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:2f:8a:38:6a:4f:ca:60:b2:14:13:33:3f:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e
Validity
Not Before: Jun 7 03:00:31 2025 GMT
Not After : Jun 8 03:00:31 2025 GMT
Subject: CN=fec2b84a59da323937b3c9180fe59bc67b557840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:a0:e8:8a:fd:ca:d6:e2:78:5d:f5:6f:7a:
35:89:6a:06:7f:5b:9d:95:9d:32:58:6d:70:50:c4:
ef:c8:11:bd:5d:e5:27:a8:47:9b:1c:75:8f:f3:97:
77:10:2d:40:8c:93:30:57:32:60:43:49:02:8a:79:
23:20:3e:93:cd:56:92:22:72:33:5d:8a:74:15:f7:
31:bf:24:96:82:12:09:11:00:eb:07:43:f4:47:1b:
a9:30:98:64:8a:4b:4f:0a:67:e9:60:aa:3d:cf:04:
4a:b1:10:e5:48:9c:96:fd:60:fc:97:d0:a7:f5:80:
a0:88:94:5a:68:ce:85:4b:a4:fb:85:20:c0:1e:20:
4f:c9:2a:e5:ae:d5:44:68:6b:d0:5c:1f:ab:6e:bc:
89:a9:7d:62:5c:c7:90:f1:bf:98:95:11:88:47:b4:
11:ca:1e:6f:f8:40:53:a8:79:57:26:d1:44:b0:71:
1f:1e:33:9b:2c:27:ef:c0:51:f1:40:17:b7:9e:69:
97:9f:77:d2:75:ea:5f:69:3d:76:bb:66:fb:08:64:
92:61:ab:a7:15:d0:66:4b:a5:c2:7d:bd:d3:60:71:
bd:39:c5:a0:99:6d:75:9e:43:8e:76:8d:4e:c1:61:
f6:7c:0f:4e:32:3f:dc:f5:76:21:03:52:fe:6d:98:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:B8:4A:59:DA:32:39:37:B3:C9:18:0F:E5:9B:C6:7B:55:78:40
X509v3 Authority Key Identifier:
keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:77:c2:3e:33:a8:4b:f7:93:f9:ce:d5:44:d6:fb:06:ab:b5:
e0:0f:39:fe:d5:65:0f:4e:c6:e6:82:13:1d:82:6b:d8:ef:0a:
02:bf:16:83:f5:ad:64:07:14:ac:22:f6:6c:39:65:b2:99:a4:
da:17:6d:64:d2:00:b8:ad:dc:c9:75:f2:54:35:81:c8:3b:be:
2e:1a:5d:8d:57:b1:4c:cf:fe:4f:71:6f:8b:43:94:dd:65:fa:
8c:ef:92:01:cf:18:ea:c2:9e:d8:eb:63:b4:c3:bf:43:82:14:
70:26:d3:6d:f5:07:29:ec:86:b2:e7:f4:3d:60:89:d1:07:9a:
0e:8b:39:46:ac:09:45:c2:f8:a7:fc:c5:96:40:84:27:66:e1:
5c:1e:c3:75:89:cf:90:3c:ad:1e:5e:5e:16:16:d6:aa:bc:1f:
04:93:1d:35:b7:aa:04:24:a7:15:33:22:4a:6b:ef:ee:59:22:
f8:e5:ef:45:36:b0:8f:2d:5a:47:15:e3:63:72:c4:a5:08:98:
23:77:ac:e3:49:86:9b:e2:2a:bf:bf:30:9a:0f:27:33:3a:4b:
41:85:ce:8c:5a:63:01:6a:2b:96:9c:f8:e6:50:30:c5:5d:ab:
d4:c9:5a:a6:a1:91:33:48:8a:ea:43:d9:4b:38:70:83:63:ba:
81:88:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:39 2025 by rpki-client