Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: Tp8A2mKcdQfwNwcVQW+WJetaj4xTtk2cZNgmllsz+eM=
Subject key identifier: 6F:28:42:11:EB:AF:56:ED:73:3E:E5:3D:66:60:1F:3D:AB:04:EF:91
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 0197B70E8AD6A3717623EAE972270CB2678A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0DAF
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
2: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 92MIIxplYABznKtdDNJMUzWEtsbxyWfqP8aaGtYazXI=)
3: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8a:d6:a3:71:76:23:ea:e9:72:27:0c:b2:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=6f284211ebaf56ed733ee53d66601f3dab04ef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:d7:c1:56:5b:f2:85:e8:e4:6e:38:7d:1d:
2c:e8:d5:50:50:2a:dc:fa:0b:49:9e:a2:28:78:af:
9c:fc:4f:25:92:5e:08:03:ef:3a:6c:31:2f:66:f4:
31:06:c8:74:64:88:e4:2c:31:b3:9c:b5:59:b5:4a:
0c:98:69:52:b8:9f:38:ca:6b:7d:a5:56:92:94:13:
39:89:6b:7d:76:91:86:e2:f1:16:de:40:e2:d3:cd:
3b:1a:5b:16:b5:79:a6:11:b9:d7:8f:e1:09:07:36:
7d:c3:56:3f:86:8f:8c:4a:9c:33:37:ec:46:2f:95:
9f:3e:46:cd:39:7f:53:4b:af:9a:16:1d:2c:23:7f:
58:73:b5:cf:d8:22:8e:3c:28:97:7e:3e:6d:fd:14:
3e:93:94:11:b0:7d:87:29:12:ee:0c:af:8b:c0:59:
8a:42:b2:b3:ad:b2:fa:92:6d:ab:d4:78:a7:e9:ea:
fb:61:5b:e6:24:17:d0:71:34:c6:18:66:a8:73:af:
a6:7c:30:a3:af:59:f4:d8:9e:78:2f:aa:aa:7d:c7:
0e:bf:af:6a:1b:a9:2c:9f:fc:71:f7:48:1e:fc:00:
f4:80:11:5b:49:50:21:80:1b:95:d6:8c:6d:bc:82:
63:e4:c5:bd:da:a2:0d:3f:47:7f:df:78:a5:5c:34:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:42:11:EB:AF:56:ED:73:3E:E5:3D:66:60:1F:3D:AB:04:EF:91
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:96:93:d8:1d:7f:67:43:9a:7b:58:69:12:f9:86:f8:bc:64:
73:9f:d1:a9:30:0e:d4:30:6d:0d:4d:23:26:ba:83:33:63:56:
d0:9e:71:e1:c6:fc:a7:ad:4a:ea:ec:40:cd:42:ff:71:90:33:
11:3b:43:fe:b7:a1:56:3c:2f:18:d7:24:cb:39:71:bc:b3:e3:
ed:e4:ac:01:44:eb:ce:d9:ba:aa:2e:f7:59:15:8c:8b:68:5e:
b1:6f:f0:09:06:a7:d1:19:78:e5:f0:99:f2:d5:81:70:84:23:
f1:49:a9:74:f9:fb:97:a2:1a:ac:9c:ca:bb:8e:2a:fe:11:c9:
c2:7e:cc:e5:3c:f5:b7:b0:79:87:6f:f3:de:94:ec:2d:be:bb:
c2:9e:eb:71:4b:a1:08:2d:3e:9b:be:9c:ad:86:46:a7:ba:57:
0c:25:5c:3e:4a:5d:26:a4:e5:08:65:15:2b:5f:3d:76:9e:50:
9c:fe:d1:21:ae:44:ec:13:7d:af:e9:67:c7:1f:53:ae:73:4d:
38:89:88:42:c1:79:55:7a:ce:c4:41:09:fc:7f:ab:c3:e6:81:
8f:12:e4:93:06:56:f6:8b:92:80:57:9c:9b:ef:65:cb:9c:05:
0f:bc:ff:ab:fd:eb:c4:0e:49:68:20:99:5d:b2:f0:ed:af:4a:
ce:19:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:40 2025 by rpki-client