Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: OfUCD0FjY8BHma/K5QnneWneQ4cVpsAq9JnSgRy8xck=
Subject key identifier: D8:45:66:92:10:F0:03:E7:C4:73:85:80:1C:C8:99:03:01:2C:F3:CD
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 0198D4731972B9DF34137FD685B66E0D3FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 05C8
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: 0mq3LtWVpgulmHFlABT8hlQ/9F866MpFYZ3uBNmEYLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:19:72:b9:df:34:13:7f:d6:85:b6:6e:0d:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=d845669210f003e7c47385801cc89903012cf3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:68:57:ec:01:b9:64:a2:03:c2:4c:bb:b2:
75:73:83:96:94:93:62:7c:47:72:7f:dc:cd:1a:52:
74:b6:50:db:f5:bf:3a:65:87:f0:7e:8d:a8:d9:50:
99:3a:0e:a9:76:5f:0a:53:f8:38:3e:70:60:35:bc:
8e:e5:2e:2c:f7:f8:1c:7b:aa:15:b0:6d:e4:14:86:
4f:e1:5c:b2:27:2b:fc:ae:e5:94:2c:ec:76:36:5a:
78:c6:46:a6:6c:df:3f:38:5d:c2:fc:9a:c6:f4:ae:
6b:a8:7f:14:81:48:c3:ec:f8:52:70:f5:96:29:5f:
8e:70:cf:44:b5:ca:7e:06:30:cc:13:df:d0:62:84:
87:f3:91:bd:df:18:1b:c9:b4:94:e5:8b:a9:82:d7:
68:45:fb:c2:93:37:e4:a3:2f:be:aa:09:e6:04:31:
25:1f:9f:f2:fc:20:a5:da:5f:5c:80:39:88:7c:64:
21:1a:3e:15:bc:5c:19:70:b4:3b:bf:a4:23:a4:9c:
20:7c:8c:b4:2d:0b:f1:c5:c4:fe:a0:e9:93:31:dd:
10:e2:3e:40:90:0d:62:91:32:1f:e6:ea:41:e5:0e:
f2:b1:9d:ab:44:23:bd:e5:cf:75:ec:fe:17:2b:ac:
fd:32:5c:da:78:1d:c0:06:11:0f:6a:3c:c0:65:78:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:66:92:10:F0:03:E7:C4:73:85:80:1C:C8:99:03:01:2C:F3:CD
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:dc:cf:d8:48:39:99:5c:49:cc:f6:c8:64:66:01:d8:64:51:
6d:45:1f:e9:12:45:92:6d:d1:64:1d:7d:27:76:0f:46:86:c5:
3d:07:87:b0:98:ad:e8:27:ed:e3:34:50:7c:e2:49:41:49:8f:
bd:a1:1e:5a:d3:5a:e6:3e:53:7c:24:59:0d:f1:ac:59:91:0d:
03:f5:28:3c:c9:f6:06:1e:a5:ed:7d:e4:f6:dd:dc:27:97:3b:
73:6d:c6:29:59:47:43:b8:e9:8c:07:13:3a:e4:e9:25:eb:41:
f2:51:5c:83:47:8d:30:cf:36:7c:65:70:84:e8:a7:ba:eb:fa:
59:16:fb:34:a6:ef:f2:90:aa:c7:29:81:b1:3a:69:ce:08:6d:
04:00:7e:7a:6e:91:69:c6:cb:fa:68:44:9f:c0:90:39:9e:80:
36:2e:04:3b:c2:a8:26:3d:68:9f:b2:61:85:23:ac:8e:5c:6d:
ff:01:31:08:99:07:7f:02:b4:28:5a:11:4e:87:ec:81:25:96:
fa:7f:aa:c7:06:21:68:f4:21:6b:13:e7:d2:35:f2:d8:68:53:
5e:dc:46:be:99:eb:f9:bb:33:3d:52:4b:3c:26:a4:8c:07:d9:
d8:f1:b2:07:8c:90:6d:05:2e:0e:1a:46:81:35:5a:ec:06:0d:
6f:dd:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:43 2025 by rpki-client