Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: GS07GqfCjmM2MLP3mshIxng0OXlzxtXXQxAq25/VW7k=
Subject key identifier: 0C:42:FD:75:60:62:FD:C4:AC:68:E3:DF:32:28:4A:3F:1F:F0:A9:B9
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 0199FB463152A2174AF9F005C88779B5F2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 0C6C
Signing time: Sun 19 Oct 2025 07:01:45 +0000
Manifest this update: Sun 19 Oct 2025 07:01:45 +0000
Manifest next update: Mon 20 Oct 2025 07:01:45 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: 2sFRIlGezjTzb4yUZfRSY3/T64C5kBbRfHvjjIiSi+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:31:52:a2:17:4a:f9:f0:05:c8:87:79:b5:f2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Oct 19 07:01:45 2025 GMT
Not After : Oct 20 07:01:45 2025 GMT
Subject: CN=0c42fd756062fdc4ac68e3df32284a3f1ff0a9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:62:0a:6d:03:39:0c:58:73:0e:e7:e1:76:
86:a4:24:6c:73:37:cd:1e:1e:d2:dd:68:3a:0b:3e:
77:b2:54:37:78:9a:02:0f:00:56:1c:58:29:72:0f:
b6:65:5a:1c:d3:93:60:bb:27:7e:67:03:ce:cb:33:
05:ac:f5:88:0b:c8:b5:d3:39:69:38:61:4f:6a:9c:
fb:66:98:17:69:ff:05:ad:97:55:3e:56:ce:8a:71:
73:48:f8:1c:21:10:80:fd:f8:a3:fc:7d:5c:7a:42:
6f:7c:a1:bb:b9:c2:64:84:d4:b7:d0:21:2d:8d:4d:
3e:2e:f6:e1:d0:2c:68:41:8b:22:ac:92:d6:7d:99:
a8:c6:ca:28:6e:2d:34:af:e7:f2:0b:4b:c4:da:87:
70:eb:52:0e:f5:71:60:d4:69:ef:a9:2e:e6:40:b4:
16:b2:69:18:93:45:2e:92:f1:6b:c3:68:d1:34:01:
6c:56:21:03:3c:01:b0:38:bd:24:32:27:a3:ee:d8:
13:e1:9d:1f:1a:53:87:54:1d:bf:52:fe:02:ba:2a:
08:76:df:a6:4b:e2:a0:82:ad:7f:70:fd:f1:74:dc:
d6:7b:07:63:bb:8c:b3:38:96:e5:ad:51:4a:48:f5:
b4:4f:8b:d1:16:67:d3:33:57:66:b9:20:c1:a9:58:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:FD:75:60:62:FD:C4:AC:68:E3:DF:32:28:4A:3F:1F:F0:A9:B9
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:96:1b:99:76:12:1a:19:29:ce:ff:75:d3:98:f6:6d:ca:
a5:df:4f:e5:d3:61:97:9b:2d:90:67:08:39:2b:8b:22:0f:c6:
87:26:14:8c:39:82:72:54:bb:c9:60:21:fe:2c:65:d5:5e:6c:
83:3c:26:10:90:3c:8e:88:ef:47:8e:cf:88:0d:a1:81:fd:1a:
77:1f:b0:b5:84:be:2d:1e:94:b4:ab:4f:48:aa:66:76:1f:ba:
f4:a7:65:ca:99:df:46:c7:c9:b5:ea:e5:61:13:c1:4f:2c:a3:
da:83:fa:0e:b9:e8:3f:3f:62:0d:9e:d4:62:31:ce:4e:8b:26:
5b:bc:7b:49:bc:02:c3:76:9d:20:4f:e9:78:ee:ed:d7:b9:cb:
ab:8a:0b:48:09:08:ce:67:4c:ac:39:d6:92:50:4f:9c:92:56:
18:0d:d5:92:38:36:c9:0a:87:22:6c:fe:66:41:06:ea:a1:d6:
ea:b7:db:86:4f:0f:69:bd:5c:fd:41:7b:6d:da:0a:f0:39:43:
d4:82:b1:9f:c1:ab:22:8e:d0:bc:c3:8e:35:41:ff:6b:4d:aa:
9c:48:10:04:2e:b8:61:9f:27:d8:2c:2b:f9:d3:d7:7e:6b:5e:
44:86:bf:0a:fb:1b:c3:dc:77:9c:e6:9d:e5:81:71:91:76:bc:
d8:66:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:08 2025 by rpki-client