Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: 4F4vbDtnK3W4a7T13f9j7I2LI/XnhQF6X5u7DJlNyJU=
Subject key identifier: F9:F9:D7:8D:2D:2C:08:EC:1A:D6:75:CF:64:49:EF:E6:67:CB:EA:C6
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0196C53ABCF43BFDC5F27510CBA77EDD86FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 1504
Signing time: Mon 12 May 2025 16:01:23 +0000
Manifest this update: Mon 12 May 2025 16:01:23 +0000
Manifest next update: Tue 13 May 2025 16:01:23 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: FZMACh+fZWykx034U1b0UdUHAt23nahcKSB4v2aZ5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:bc:f4:3b:fd:c5:f2:75:10:cb:a7:7e:dd:86:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: May 12 16:01:23 2025 GMT
Not After : May 13 16:01:23 2025 GMT
Subject: CN=f9f9d78d2d2c08ec1ad675cf6449efe667cbeac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:9b:02:19:83:c0:8d:a6:7c:64:59:0c:9e:
23:80:ac:bb:25:13:a8:05:a6:41:f6:11:51:eb:ae:
2d:25:50:1d:a4:4b:4a:7a:43:e3:04:64:5a:4b:97:
5a:3a:e9:b9:ed:36:57:e4:e3:7a:36:a8:a5:b3:11:
49:2c:12:28:ad:4b:43:4c:0f:20:27:b0:be:d6:62:
58:fb:a3:11:d3:2c:c8:e7:82:1f:0b:da:84:89:ea:
b9:aa:68:a1:f8:88:ed:01:24:fc:3e:80:b9:87:17:
df:dd:d1:7c:f1:4d:50:2f:e8:c8:2f:b4:ec:eb:4b:
9e:a9:28:16:43:e5:1a:30:63:0f:5f:7d:a1:1e:4f:
5f:90:b7:01:a5:6a:18:99:7c:12:6e:69:0a:04:38:
24:30:51:f1:31:3b:b8:44:66:36:ee:09:7f:83:7b:
3d:cc:81:ba:f5:9c:a4:20:4d:94:05:4a:9c:df:ce:
a6:c0:ae:09:96:87:ad:db:26:ae:4b:d8:38:aa:96:
6f:dd:f3:26:b1:71:42:25:27:b2:dc:1f:81:dd:6c:
33:14:4b:2f:79:fd:9f:16:7b:7a:90:c5:a3:b4:c3:
bd:42:df:b4:35:de:cd:e6:da:16:8b:22:8c:ed:c4:
eb:8d:c1:c6:97:8a:81:73:78:ab:14:aa:00:a0:73:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:D7:8D:2D:2C:08:EC:1A:D6:75:CF:64:49:EF:E6:67:CB:EA:C6
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:62:49:59:81:08:66:27:33:62:2e:96:ff:c1:9c:30:9c:
c9:8d:41:23:67:4f:3a:ca:71:e4:c4:9d:78:91:8f:a9:62:ab:
6e:4e:9f:01:57:92:42:b7:85:55:30:3c:a8:bd:6e:db:c8:66:
a4:db:26:bb:7f:e7:fc:1d:8e:27:28:08:08:04:4a:13:27:38:
4d:c3:00:14:f4:84:f4:ee:38:3f:be:f7:3e:a5:6f:a6:d5:29:
c3:f5:70:aa:44:ba:be:9e:2e:3f:fd:66:3c:8c:92:67:56:54:
41:ab:42:7d:b3:1d:0a:48:b1:a5:eb:ba:2b:77:e8:28:b5:17:
f8:0c:9e:5d:f0:71:b5:1d:0b:5b:77:d3:66:9a:18:3a:d9:dc:
26:d3:7e:90:64:ea:9e:01:13:1a:a6:35:c4:59:61:aa:75:f0:
9e:b3:f0:77:0f:93:c1:e6:54:65:21:58:ad:40:ac:9e:a1:68:
57:18:13:d5:13:3e:bc:5a:3b:71:26:eb:a8:45:7e:d7:5a:e4:
6d:cb:34:1f:9f:29:cc:0f:71:92:3f:46:51:ab:29:30:d6:2c:
b4:16:d8:fd:73:10:dc:dd:5a:c0:79:5a:1b:66:e1:fd:7f:2b:
ee:bc:43:94:b6:c3:9b:77:cd:57:a6:48:fc:4c:1c:21:5b:63:
f9:7f:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:14:21 2025 by rpki-client