Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: axEJ+OKBrwhKGeLRXQlnIAI2tn9tKiHPDUPs+jPK4bg=
Subject key identifier: B9:88:D5:7D:C0:F5:44:A3:25:A7:23:0E:8C:D2:15:AA:C4:F9:1D:2A
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0198D473666CDCB1CE33AAE202A94515D1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 1615
Signing time: Sat 23 Aug 2025 01:03:09 +0000
Manifest this update: Sat 23 Aug 2025 01:03:09 +0000
Manifest next update: Sun 24 Aug 2025 01:03:09 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: rN+heKMuLztLIEc9RQVgzZ9o0uUA0MaE+XnPngwSjSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:66:6c:dc:b1:ce:33:aa:e2:02:a9:45:15:d1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Aug 23 01:03:09 2025 GMT
Not After : Aug 24 01:03:09 2025 GMT
Subject: CN=b988d57dc0f544a325a7230e8cd215aac4f91d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:9a:ec:eb:ac:5f:6d:4f:30:3b:c4:db:6a:
37:e1:52:80:31:91:ce:a7:cc:6d:f9:50:13:86:f5:
54:67:68:36:9c:f8:3d:0f:c0:29:e9:dd:70:d9:09:
1a:bd:b5:69:b2:0d:d2:f2:8b:5b:58:94:d3:86:21:
54:ee:7b:50:f6:dc:12:6f:08:47:c1:65:36:84:44:
7f:bc:f6:3f:55:53:cf:f6:92:76:6e:5b:49:ed:43:
fe:19:75:d3:99:ca:cd:5f:49:98:36:86:c1:d5:33:
9f:28:29:4e:ba:49:9a:81:13:af:41:b8:2b:65:6c:
1e:e9:ea:4e:f9:ca:42:42:1d:d7:ee:a2:38:08:74:
5e:b5:a0:53:61:c0:15:47:55:ce:a6:6b:4d:76:45:
b0:02:b0:60:c0:ff:2f:e0:38:8b:55:93:98:18:0b:
fc:1a:a0:22:94:4e:7f:4e:83:d7:29:02:7a:ba:a3:
ff:ff:c3:67:7b:1b:dc:7b:ac:87:5f:ea:09:c0:9a:
d3:da:71:a0:17:73:69:ac:9d:d0:0c:a8:d6:50:c6:
b8:aa:9a:c9:f7:c5:88:ec:4d:18:7d:97:0b:f3:0d:
cb:29:c7:d8:90:db:b2:e4:74:5f:b1:56:68:e2:f2:
a0:1a:48:4c:d8:d9:9a:96:10:3d:81:c8:16:47:26:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:D5:7D:C0:F5:44:A3:25:A7:23:0E:8C:D2:15:AA:C4:F9:1D:2A
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:ff:13:71:91:2b:19:68:e7:93:b7:69:67:33:11:69:fd:
f7:aa:c7:5e:a9:28:83:f2:35:8e:15:53:51:ad:f0:21:7a:f2:
73:6e:7a:1f:39:f2:3d:da:a0:a5:43:e4:50:1f:e1:b8:53:d5:
c8:c5:f4:0a:50:87:75:64:2e:ad:d5:90:78:ab:f9:c9:76:21:
2f:61:a1:98:b9:eb:eb:77:9c:2f:f1:1f:a6:28:87:6f:fc:38:
43:bf:50:b9:4e:a8:8a:19:9b:6c:91:7d:fc:46:17:4c:70:a3:
35:26:c9:05:03:b8:d0:07:b1:85:40:22:6d:23:f4:73:14:bc:
60:8b:86:ca:4d:37:5d:a8:68:31:ab:ec:84:be:dd:cf:55:81:
45:4e:e4:3a:f4:0d:05:99:26:b7:61:f4:28:ac:41:38:75:f2:
98:a9:3d:f9:1d:f3:d6:81:e6:01:be:c9:de:46:9f:a3:ae:fe:
a5:8b:50:83:b2:d0:94:4c:26:b7:04:40:82:a7:e0:cf:33:84:
b3:ce:d2:f2:92:14:3e:3a:20:63:54:c0:6d:63:58:9e:1c:6c:
f3:0a:5c:ff:6e:18:92:f5:27:0f:f6:06:62:fa:c8:08:20:08:
74:0a:31:c1:73:ee:a5:4d:19:9b:a9:4b:d7:7c:ba:10:13:d5:
44:2f:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:00 2025 by rpki-client