Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: f3M20idBHEJqrw+ebY8pCmfESf916zmuczuEV0X/5Bo=
Subject key identifier: 0A:41:E1:61:4C:BF:3C:E0:8D:E6:66:F4:83:F2:CA:65:36:2A:C7:09
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 0198D5BB9B951DD7DC6BE29FE399A62BEDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 0BD4
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: sozeWjSdEOHJd95iTXMBcUtPkgnzd8gALLiPt91WmMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9b:95:1d:d7:dc:6b:e2:9f:e3:99:a6:2b:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=0a41e1614cbf3ce08de666f483f2ca65362ac709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:7d:ab:02:4c:36:3d:f1:06:d2:9d:1a:c1:
8f:14:76:6f:35:64:53:5c:92:53:1e:c8:e1:e6:f7:
1e:7a:40:4c:f6:71:b9:0a:d9:5a:8b:ae:4a:d0:2c:
0d:64:a5:a8:10:5e:f8:7c:76:c3:42:f3:10:22:1c:
d3:b9:b0:4d:27:0f:01:d2:70:e6:45:5d:3f:20:3d:
98:08:51:a4:24:e6:ad:0a:56:40:35:a9:f2:dd:8d:
28:3d:11:e3:7a:a3:bf:fe:c8:5c:48:70:20:39:21:
14:d6:64:37:24:34:5a:37:9d:0e:91:85:93:d8:49:
4c:50:33:89:6b:a6:8e:cc:41:e6:21:b4:b2:45:bd:
68:a9:0c:6e:8d:bb:25:62:1d:1e:20:5c:97:02:da:
b4:6c:d7:a0:bb:86:64:ea:71:2c:01:49:2d:d5:ab:
67:10:5f:e6:af:d3:7b:47:9e:1b:b3:d8:a1:b3:aa:
b4:03:a0:98:d6:32:ea:1f:29:45:90:59:ba:00:e3:
05:e6:e3:af:cf:ec:00:8e:0f:9f:db:03:12:88:e9:
f3:72:59:64:54:db:5d:cb:0a:19:db:c0:88:e3:9c:
65:01:8f:26:00:e3:4d:92:5b:bb:9c:1b:63:68:4d:
3e:0e:86:09:df:7f:54:a3:7c:0b:c4:a0:c6:7e:ec:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:E1:61:4C:BF:3C:E0:8D:E6:66:F4:83:F2:CA:65:36:2A:C7:09
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:ff:76:79:da:29:fc:c8:b7:a1:24:fe:96:29:66:1e:7a:
eb:98:c0:e7:d2:49:58:c8:c9:59:ef:82:ab:b7:23:df:90:46:
c8:e2:78:0e:98:3e:79:86:0e:f1:51:05:c4:09:99:b5:13:aa:
e2:d5:2f:89:70:cb:f0:a1:e9:f7:79:e7:23:1a:b1:f2:86:46:
28:17:66:76:ab:2b:2d:7d:95:0a:54:c6:84:ef:9d:92:90:ba:
14:95:39:36:94:a3:b3:1a:c0:0e:da:ba:58:92:52:18:88:fd:
e5:65:9a:7d:b5:72:d1:d7:37:92:9e:81:1f:57:36:79:e2:5f:
b4:a0:7d:69:d3:c6:a8:b3:cb:a6:9e:09:ec:66:63:bd:5c:d9:
30:eb:d0:a4:d3:b7:4a:1e:d2:91:33:3a:2d:1d:3e:49:89:bc:
b2:54:35:03:25:8a:28:92:8c:6a:66:37:6a:07:60:b7:ba:3a:
09:f4:80:f0:65:ce:d1:85:10:a1:c1:34:95:dd:b2:51:a3:68:
c4:7a:9a:23:66:46:cf:55:97:f3:c7:17:f7:f0:3c:57:78:fe:
7c:a3:28:84:08:7c:bc:da:f9:9a:e6:0e:f6:eb:ba:fa:de:64:
1a:05:62:97:4f:c5:3a:fb:df:6a:70:0c:a9:9f:7f:43:b9:89:
00:59:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:09 2025 by rpki-client