Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: HUPqtlV7tFAAN1rTvszfEoNbm4aJF4e08bdCbmP7ASA=
Subject key identifier: 4F:A2:64:46:A0:5D:A5:4B:27:DF:BD:3A:95:00:EA:F5:40:3A:93:CB
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 0197B8FD5E4129948450A0A596D0C62FFF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 00:01:41 +0000
Manifest this update: Sun 29 Jun 2025 00:01:41 +0000
Manifest next update: Mon 30 Jun 2025 00:01:41 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: 4Cl9AlXdNorgiFy5E+WAZ93KAwGQ4rCRR74sr1VEIk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:5e:41:29:94:84:50:a0:a5:96:d0:c6:2f:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Jun 29 00:01:41 2025 GMT
Not After : Jun 30 00:01:41 2025 GMT
Subject: CN=4fa26446a05da54b27dfbd3a9500eaf5403a93cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:60:f8:0c:23:17:6b:89:7b:3b:83:ff:34:
bb:dc:9f:1d:01:d5:e0:89:d7:6e:b0:cd:92:62:f6:
61:7f:0d:48:b3:67:a6:bf:c3:50:90:cd:81:d3:ec:
48:ef:9a:88:db:d4:ac:b4:89:18:a0:1d:3a:5b:86:
98:19:5f:68:0a:fd:c3:5e:d9:7f:3f:bd:f5:b3:cf:
87:70:63:64:d7:d6:38:ef:50:cc:31:25:f6:ff:5d:
80:57:19:38:82:72:c2:14:bd:24:fc:a7:04:8b:ba:
98:f7:cb:98:df:05:94:f3:89:e1:ee:ec:10:10:a9:
68:de:a4:ee:f3:88:e1:8a:b0:87:d5:2a:89:78:c5:
b6:46:e8:63:df:8e:a6:74:f2:89:3b:93:01:2d:7b:
6f:b1:fb:13:9e:0e:59:34:ba:51:cd:8c:51:b1:24:
6a:33:2f:c0:cb:4d:97:bf:35:91:13:2c:a5:a4:4a:
ad:e7:fd:47:85:d6:89:df:c5:dc:2b:21:f5:d8:0a:
91:03:ed:52:e6:a1:ff:d8:cf:20:41:81:62:c9:9b:
5a:66:bd:fe:b8:bf:01:68:79:4c:fd:bd:2a:70:46:
9c:ed:27:17:e2:8f:c6:a5:5b:b0:45:1b:7f:aa:7a:
29:0f:74:ab:1c:09:94:78:85:57:aa:e8:7d:a0:1c:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:64:46:A0:5D:A5:4B:27:DF:BD:3A:95:00:EA:F5:40:3A:93:CB
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:81:e2:a7:db:ed:ba:c6:f2:da:a3:47:5d:ac:e7:12:e6:f2:
82:48:70:a7:8c:c6:27:26:72:b0:ed:89:4c:fc:ec:4a:ff:0f:
87:b7:f7:54:43:66:51:5e:ec:82:e4:55:e9:42:41:4f:c7:98:
10:55:82:77:e5:d9:24:30:8a:5f:46:0e:53:82:67:46:b1:13:
7e:3d:fd:48:54:5f:ce:f9:12:4d:f1:c5:3c:6c:ec:26:3e:8c:
91:f2:9e:09:66:4e:11:66:bc:4e:5f:e8:d1:1c:70:5f:70:58:
c3:33:f3:c9:75:50:61:02:a1:c4:98:b4:f3:ee:d9:5a:e2:b5:
be:29:1b:56:de:a5:f6:36:33:80:a3:fb:0d:42:5c:8e:9f:22:
af:bc:92:6d:0b:62:d2:5b:90:a8:17:f1:fe:cc:14:48:fb:8c:
ee:57:c3:54:57:74:6e:55:0f:49:2e:b7:e5:2c:b7:ad:77:77:
31:81:83:f4:58:3a:5d:b3:4f:4f:c5:1e:9f:a7:b2:85:96:cb:
f6:5a:fa:bc:aa:6a:66:d2:bb:c8:30:b1:04:b6:0f:ba:6f:c8:
70:87:9e:6c:29:9c:a8:8d:a3:d3:ce:16:eb:78:27:12:92:e8:
95:29:39:11:71:f5:23:7f:57:42:db:25:7d:fb:2f:27:47:a0:
52:25:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:25:19 2025 by rpki-client