Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: lJ6nAN/j2NbmtP50WLxAC7JLYJBWRtsrINCvx/sKMsA=
Subject key identifier: 53:6E:AD:BE:69:8F:83:49:B0:1B:7E:BA:40:57:3E:91:AC:31:2E:04
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 0197B5FC84D50E03ECE8F45DD0635915DF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 0B3F
Signing time: Sat 28 Jun 2025 10:01:54 +0000
Manifest this update: Sat 28 Jun 2025 10:01:54 +0000
Manifest next update: Sun 29 Jun 2025 10:01:54 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: NaUGnjTuGKMoY/bHSBWkI3D8DrGs2vQVqicXcu0wLO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:84:d5:0e:03:ec:e8:f4:5d:d0:63:59:15:df:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Jun 28 10:01:54 2025 GMT
Not After : Jun 29 10:01:54 2025 GMT
Subject: CN=536eadbe698f8349b01b7eba40573e91ac312e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:05:b3:39:f1:36:c4:06:16:3e:67:35:be:
b7:1f:e7:bc:6f:dc:72:51:38:cd:91:c1:79:96:bb:
b4:23:89:15:80:b4:6d:09:cb:e0:5a:54:d8:76:1d:
91:55:97:2d:a4:97:29:d2:94:a6:fa:94:7a:48:9a:
24:10:9c:8b:0d:a8:0b:bc:ee:6d:48:fc:0c:02:a5:
29:2a:39:62:e5:6b:e1:a7:3d:d5:35:e4:83:55:bd:
64:b1:7e:83:e2:cd:2e:2b:d2:74:f1:02:c6:18:41:
07:4b:dd:cc:b7:3e:43:b2:ec:17:a0:99:76:1a:00:
a3:6c:77:6f:8a:ac:3a:97:d7:97:e6:df:fd:cc:69:
36:c2:10:97:58:53:9e:9d:82:3d:37:ce:d3:43:45:
76:9e:44:39:25:b0:98:ee:8f:f6:1f:2b:29:ad:e0:
49:2e:e3:df:bb:12:ed:76:65:48:49:56:41:ab:c2:
cc:86:ec:3d:59:79:7f:54:29:6a:8a:a6:af:25:09:
0e:09:fc:34:00:6f:13:a8:b7:a4:42:53:d8:13:72:
36:5b:f2:79:19:31:70:cd:29:a1:bc:6f:d9:c6:21:
fb:65:66:d6:b2:33:d3:be:5b:33:48:22:e2:24:e1:
6b:95:85:1b:06:04:0a:28:a3:1e:c9:43:09:ca:ec:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:AD:BE:69:8F:83:49:B0:1B:7E:BA:40:57:3E:91:AC:31:2E:04
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:55:6e:99:ab:ed:b8:db:34:b7:ee:96:b7:8e:5c:9c:e2:fa:
c0:ad:34:df:7d:4d:1e:24:b1:01:b4:1e:45:68:6b:6c:de:c7:
cb:06:0a:89:35:3d:fb:26:53:92:c3:62:02:81:6d:6f:12:74:
66:0b:ce:91:40:7b:c6:6a:66:db:2a:49:fa:c0:81:e9:38:a7:
e4:a0:22:be:8f:78:a7:b4:0f:4b:79:15:1e:6a:93:34:31:64:
30:79:1f:ac:f1:b0:ff:a7:64:14:44:3f:7f:93:1d:75:8c:33:
6b:7e:4d:fb:04:aa:98:83:ae:26:50:a4:d4:6f:1c:da:6d:cc:
df:40:86:2d:e1:c4:5f:63:46:c1:a4:86:d6:c3:6d:b0:63:34:
bd:c7:df:8a:21:0a:51:81:43:35:0d:85:79:15:ad:2d:63:9c:
21:f6:8f:8b:98:1a:bb:e7:96:21:b4:aa:94:10:ff:0a:65:bf:
59:ff:9f:a7:15:66:21:8f:7f:c5:71:e2:a9:c4:49:82:aa:55:
3a:7d:0d:3b:04:ca:3c:56:be:f5:8b:b7:d4:0a:f1:d3:7b:2a:
b9:9c:db:c5:f8:39:9d:1a:fc:d1:4f:5d:d3:ac:c2:54:66:19:
0d:4b:5e:03:6f:aa:dd:a5:70:f4:05:f7:7a:08:7e:2f:60:81:
e5:bb:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:13 2025 by rpki-client