Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: k4QGIHuslqXYMY+6h45y5eEpLHRXdA3/xwbbqGnQDNk=
Subject key identifier: 6F:C3:81:B4:BF:92:A4:B6:4E:57:E9:18:62:91:A0:37:D9:B5:83:21
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0197B70E8989D5EA8EAFB4A74ABF9DD288B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 020E
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: Iui0ZEEYWA3CQcr0i+4awqgricflMgxWQAwVuYvq1J8=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:89:89:d5:ea:8e:af:b4:a7:4a:bf:9d:d2:88:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=6fc381b4bf92a4b64e57e9186291a037d9b58321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:f0:56:7a:94:bf:92:f6:41:ff:cc:c9:63:
05:ac:16:50:7a:b0:8b:e3:29:77:69:d4:e5:48:43:
9f:56:91:15:31:25:7f:ae:a9:03:64:2c:60:29:fd:
9b:38:6c:fc:f6:7e:fd:0d:1d:9c:e8:30:5a:f3:89:
65:c4:34:4c:c2:be:42:8d:a5:20:34:7d:3f:2a:b2:
02:33:42:41:14:e6:43:8b:9c:ba:fd:e8:4c:b2:a0:
27:af:d9:7e:1d:2e:6d:45:90:d8:33:d5:3d:af:73:
8e:10:d3:97:38:37:a5:cc:8d:89:a1:f8:24:d2:69:
64:76:27:76:be:5f:73:b8:84:80:b6:57:a4:d2:d1:
cb:4f:3e:29:0f:36:2e:48:29:a8:35:e8:c1:c5:0c:
46:a4:19:e8:51:64:71:46:4e:8a:86:db:df:20:78:
1a:a6:41:d0:d9:e5:92:ea:da:60:71:94:23:6b:69:
80:41:33:59:62:9e:bf:20:e3:ca:71:ff:6e:55:6a:
eb:b7:b0:cd:c8:b9:2e:81:3a:5d:ba:4e:ad:c4:6f:
f1:37:d8:dc:7f:2b:e6:e1:19:94:98:5c:85:67:9e:
0e:b2:aa:fe:ba:b6:85:df:3c:e2:36:c9:28:fd:28:
80:e7:cf:04:4f:0d:4c:e7:a1:40:ae:f3:75:e4:ba:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C3:81:B4:BF:92:A4:B6:4E:57:E9:18:62:91:A0:37:D9:B5:83:21
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:47:0a:2b:f6:b3:72:da:80:ee:b3:a4:21:02:1b:5b:b9:
3d:e6:57:65:e5:52:5c:cc:3c:0f:54:27:38:40:43:0c:39:ae:
a6:82:db:7e:61:b7:6a:b3:db:1e:09:cc:51:07:7a:94:95:c2:
ae:4d:5a:0a:d8:1e:ae:0e:60:e4:71:0c:79:b2:cc:2f:82:6a:
68:f1:e7:fc:4c:09:1a:d4:6a:64:dd:e1:de:a9:15:cc:b8:eb:
3e:89:9f:2f:34:8c:fc:da:45:e4:3f:4f:24:e3:a3:b0:3c:49:
dc:0b:bc:7f:f1:bd:28:0f:d9:d3:1c:9b:32:6d:9e:33:3c:de:
44:8c:f0:a9:e1:3d:88:77:14:77:93:77:be:0d:4f:2f:a4:13:
11:62:1d:1b:6a:a8:05:7e:78:b3:75:ed:eb:77:68:2e:c4:91:
d5:7d:13:d5:75:17:44:8c:d4:10:a0:49:20:61:b1:d9:a7:b5:
9e:05:8e:36:01:e2:ae:9b:7b:d7:84:04:c0:8a:4e:95:7b:67:
86:21:b6:5f:4b:19:36:55:75:28:e0:93:58:bf:13:fc:3f:6f:
30:22:45:45:52:27:ac:44:ee:a5:5b:ad:b7:2f:33:fc:f2:b5:
c5:bd:3e:b2:5f:4e:02:d3:7b:22:4e:c7:7f:6e:c9:e7:f7:f9:
51:61:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:46 2025 by rpki-client