Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: WtIIwnTkRTNIFeqlUoyfkZCwNAsUtmfkflcLyWe3nJE=
Subject key identifier: 88:CC:61:4D:73:C2:6B:96:18:11:F5:96:18:EB:DD:23:C6:C1:38:DA
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 0197B6A0EC624E64C5EE067117A68E237E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 0534
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: b+P2ZaFW4iTR5sufdz635mdOdKCvauVIjXvwVFkDW6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ec:62:4e:64:c5:ee:06:71:17:a6:8e:23:7e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=88cc614d73c26b961811f59618ebdd23c6c138da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:5c:45:a7:50:dd:39:63:b7:d0:7d:61:bc:
10:af:cb:cf:0d:fb:04:be:02:88:d0:19:57:5b:6b:
2e:f9:75:4a:06:d0:e0:c3:f3:1b:02:f0:58:8e:19:
76:d1:cd:4b:82:03:a3:52:22:05:15:4b:71:e3:78:
4a:34:17:59:ec:b9:e2:d8:4a:a9:1c:08:40:c9:28:
86:42:da:f7:d6:65:83:02:f2:ae:7d:b5:c3:0c:e1:
49:27:0f:d0:84:8e:86:9f:87:e2:da:30:bb:1d:d7:
bd:61:cd:7c:35:7e:9a:3a:7f:ff:a3:94:99:11:36:
27:6f:a7:41:6c:65:7a:84:72:17:76:e6:77:2c:87:
ef:67:5a:94:f7:76:67:a7:db:db:30:57:ec:e7:b7:
af:93:d5:37:0c:f3:3d:cd:93:0e:8d:3a:79:84:73:
00:b2:c0:21:f9:87:17:99:7e:75:06:7d:af:cc:cf:
c0:d4:eb:44:40:06:cd:d4:f6:2a:78:d3:3d:7e:53:
e7:14:74:13:ff:99:48:a2:43:55:15:36:37:ef:0c:
ca:56:24:27:15:ce:4a:78:3b:7a:43:99:5f:2a:24:
00:78:c9:1b:1c:61:84:29:93:04:0c:33:bd:f4:e1:
dd:e7:fb:14:c7:ed:42:f8:17:c5:37:ba:35:fd:df:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:61:4D:73:C2:6B:96:18:11:F5:96:18:EB:DD:23:C6:C1:38:DA
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:f7:f0:81:23:ec:4f:34:2e:7f:04:48:a8:ff:09:b6:97:
90:0e:98:54:ff:f0:ac:5c:a8:ba:aa:7a:b7:40:ff:d3:5d:04:
06:4f:bb:45:e2:66:6f:24:1d:7f:01:de:92:57:b4:82:40:9e:
26:01:d9:37:83:b2:0c:49:5d:e1:7d:77:16:3c:e8:62:7a:bd:
5d:db:16:fd:5d:cc:64:da:c9:35:fa:a7:28:f7:db:18:31:20:
07:2e:3c:d9:fb:50:0a:05:61:a4:4a:0c:45:b8:d9:d7:c3:14:
f8:38:99:a5:c7:d3:10:8f:5f:f6:40:ee:cf:76:61:5a:46:f6:
25:93:4f:3d:04:e1:87:12:74:44:2f:1f:88:c7:b0:61:5b:08:
55:bb:f5:57:e1:dc:9e:92:39:6f:87:23:7c:cc:c8:d3:87:b0:
5c:c9:27:53:21:47:19:54:bd:61:0b:9c:1a:60:e5:aa:19:75:
98:bb:0f:db:ca:20:63:c3:3b:79:15:3b:b6:e4:8f:44:a9:16:
64:68:e2:f1:6d:e7:66:7a:ac:a7:32:21:04:0a:b0:8e:8f:a3:
9c:8b:ba:50:35:a9:04:4e:fd:c3:51:0c:dc:4a:b0:93:e4:22:
46:03:08:1b:5d:5a:5b:64:77:e3:3f:bb:61:34:af:83:02:86:
b0:37:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:13 2025 by rpki-client