Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: TXVzsn9oZky+YzNVpbT05zIjrSdSY/5DnfOfW7EGx7Q=
Subject key identifier: 5A:13:15:9A:D7:13:6C:97:17:E3:2A:05:51:5D:9A:68:7C:FA:40:5E
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0199FBEB28A5B3E936B969922FCD9839CC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 16AE
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: 05Y79PyAhvC9FZpxMOzYvE63y/IZ0c5Dw8PZXhPiDsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:28:a5:b3:e9:36:b9:69:92:2f:cd:98:39:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=5a13159ad7136c9717e32a05515d9a687cfa405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:61:4d:3f:60:81:96:e2:25:a7:24:61:a4:
bd:a3:f5:7b:25:81:ea:cf:cd:1c:ec:f0:04:d2:fb:
71:a9:05:a5:e8:f7:30:9b:92:a3:73:21:bd:11:88:
24:e7:b2:e4:0c:ad:f8:00:ae:2b:9a:20:99:34:73:
75:65:36:4a:df:df:95:92:0f:c4:6b:a4:d6:4b:e2:
97:11:62:49:27:37:db:b7:5a:b0:6b:6a:60:85:9e:
5e:7e:8a:06:bb:af:c6:73:2b:88:0e:70:35:9e:33:
5c:52:cb:47:7f:e9:56:2c:bc:35:56:25:e9:10:db:
20:76:d2:53:82:86:c7:cc:75:ca:26:21:d2:24:88:
30:ea:65:75:18:3d:2a:bd:28:e1:d2:ec:ee:41:ec:
0d:cf:43:b5:4d:3c:f8:a8:57:0c:43:86:5e:1e:ff:
b0:96:ed:8a:8b:b6:a0:72:fe:7b:9d:5a:02:57:ee:
13:b3:bb:31:d6:01:71:4c:2a:1b:2d:b5:05:10:f5:
ad:31:f1:52:35:8d:15:e0:10:90:ef:d8:d2:7a:4e:
82:9e:75:80:96:35:8b:7f:d4:99:f4:5b:5a:37:03:
89:75:cb:6c:2a:e8:18:82:44:b6:6a:26:32:a4:66:
ce:90:af:d6:f5:83:ea:d6:62:e0:f4:79:bc:ae:67:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:15:9A:D7:13:6C:97:17:E3:2A:05:51:5D:9A:68:7C:FA:40:5E
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0c:9a:e8:e2:bd:e2:bc:31:42:01:11:ba:1a:b6:27:ee:6e:
11:84:17:49:ae:7b:45:93:f7:69:b3:18:bc:96:2f:ab:4e:f2:
b9:32:d8:e4:13:be:83:a0:fb:01:e2:f0:9d:ab:f7:d4:f2:35:
bf:b6:68:b0:6f:21:78:1a:f5:a1:95:04:40:27:ca:26:54:99:
f4:ed:98:c9:cd:72:bd:37:52:e7:ae:92:20:87:15:93:01:d1:
68:e1:79:13:cd:7b:27:84:a0:1d:0d:52:e6:28:3d:47:82:11:
26:7b:97:96:c0:04:5d:7b:2c:0a:8f:99:a3:b9:33:0b:c3:11:
1b:f0:2d:d9:dc:d9:7d:aa:1e:e6:34:67:cc:40:6e:eb:37:e7:
c1:c3:94:cb:fe:a6:3a:2b:99:d9:98:4d:99:b5:10:5e:7d:c3:
60:d3:98:25:35:80:a3:5e:cd:d9:9d:53:c4:5b:a1:63:f5:b7:
14:df:ee:a8:d8:18:f6:93:67:ce:9f:e7:01:d5:08:15:5c:dc:
f4:4f:2a:82:38:b2:ef:08:12:c5:40:02:0b:61:e1:9f:87:2a:
43:70:ab:86:96:0f:5c:82:3d:ae:cf:2f:64:10:fb:74:24:4c:
5f:37:3e:b3:aa:ff:46:79:b6:51:c5:0e:04:06:6a:83:7b:fb:
fd:99:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:21 2025 by rpki-client