Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: H9g40Gcz1AX8a0dDM4rkwsuQEHfORbZ9lG6roY787f0=
Subject key identifier: 75:3A:5B:BE:DB:8E:E6:64:19:90:AB:C7:6B:B6:F1:BF:61:48:52:80
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 0197B8FD3A3E44A7C5A83600C47F6077840B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 12CD
Signing time: Sun 29 Jun 2025 00:01:32 +0000
Manifest this update: Sun 29 Jun 2025 00:01:32 +0000
Manifest next update: Mon 30 Jun 2025 00:01:32 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: WOKfkQiJg5eILcC7O4N/7n+cDcxPVuh+mt+2HL5JjcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:3a:3e:44:a7:c5:a8:36:00:c4:7f:60:77:84:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Jun 29 00:01:32 2025 GMT
Not After : Jun 30 00:01:32 2025 GMT
Subject: CN=753a5bbedb8ee6641990abc76bb6f1bf61485280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:8f:15:ab:7d:31:af:32:af:14:2d:c2:71:
54:8a:f8:4c:0d:33:96:5f:88:03:05:9e:29:37:97:
56:3b:15:26:f6:36:61:db:1d:15:f4:0c:62:02:0e:
92:31:25:89:e6:5d:ff:b1:7e:84:f7:c4:19:ba:3b:
92:3f:62:73:c0:ba:94:f1:ab:0b:10:b8:6d:46:49:
01:a4:8e:89:d2:6c:45:b5:7e:27:31:c2:d9:99:55:
56:59:97:39:f5:0a:ca:51:ba:e8:6f:e3:03:27:d0:
96:68:54:a6:73:2c:d5:35:ac:5d:cc:60:e4:2c:5f:
03:4d:62:62:b8:e7:37:c0:c8:50:c5:97:e4:d0:1c:
25:96:6a:45:06:38:ab:4e:6d:e3:82:9a:f2:c6:b0:
e9:b2:ee:ad:01:be:5f:cd:4e:59:f7:ef:cc:e5:15:
ff:b2:68:2f:ed:07:85:94:7f:c4:40:77:59:3b:b1:
bd:bb:05:4e:4f:05:11:94:ba:0f:65:41:1f:0d:59:
4d:28:3b:bd:9c:8c:0b:a3:86:b9:4a:86:d2:3b:0b:
1b:d5:91:ec:35:e2:7c:8e:6e:34:10:de:55:da:3f:
58:44:64:9a:a1:e3:af:8c:6e:ac:58:cb:32:df:d3:
fc:c0:49:95:fa:12:ca:4e:ad:30:98:5b:88:83:58:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:5B:BE:DB:8E:E6:64:19:90:AB:C7:6B:B6:F1:BF:61:48:52:80
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:35:fe:b9:cf:14:11:cd:56:7c:9e:ca:16:e9:ae:6d:92:78:
be:7d:48:87:95:32:4f:b3:79:83:b9:2f:2f:62:fb:c2:cf:79:
2f:40:44:0a:36:4b:d8:8b:9e:5c:b4:b8:bc:8a:1f:63:07:f8:
dd:af:63:a0:e6:60:6c:ef:a9:9b:2d:dc:b9:58:63:e9:4d:9d:
42:ef:81:2d:a9:b6:9b:f7:f5:74:64:05:30:d7:4d:11:3c:aa:
9b:9d:9d:56:b5:20:80:18:bd:d0:d6:31:9c:05:1d:f8:fd:fd:
5d:44:98:f1:81:35:21:7c:99:89:48:46:ab:98:c6:02:ea:18:
bd:3f:d0:ba:92:16:f8:c0:5f:dc:3e:66:77:24:6b:29:78:ad:
aa:95:39:23:cd:cb:e8:29:74:cb:9c:7f:9d:38:e2:98:56:23:
96:c3:a6:cd:62:8a:60:06:4a:20:3a:de:00:53:f5:93:a0:86:
13:68:dc:c1:2e:95:21:8a:84:f0:d4:c0:19:ed:74:96:0d:02:
2d:3a:81:20:66:9c:3b:0e:9c:91:d1:d7:de:2b:b6:f2:b9:8d:
26:75:66:3b:25:cf:e7:1f:3b:eb:85:04:92:cf:5c:e1:22:0d:
bf:e3:a0:89:50:ec:03:c0:37:32:f0:ff:e0:11:13:02:6d:a9:
12:0a:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:25 2025 by rpki-client