Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: 9bfTIYGxAPMP+1vNIDerivmS9wr1dSWyjRbV+BIQ2HU=
Subject key identifier: B8:45:EA:6B:35:11:8B:AE:CC:48:8C:1A:2B:B8:97:C0:D9:97:9D:00
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 0197B96B23BA5F5B3520DDF90BA9C3249A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0EB7
Signing time: Sun 29 Jun 2025 02:01:35 +0000
Manifest this update: Sun 29 Jun 2025 02:01:35 +0000
Manifest next update: Mon 30 Jun 2025 02:01:35 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: DhQkq9iTBNrnXtDpkvirhBRyD8/6kxIIg7tzPYLC+2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:23:ba:5f:5b:35:20:dd:f9:0b:a9:c3:24:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jun 29 02:01:35 2025 GMT
Not After : Jun 30 02:01:35 2025 GMT
Subject: CN=b845ea6b35118baecc488c1a2bb897c0d9979d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:47:1e:f9:cd:9c:a8:96:07:0d:66:4d:87:
21:ac:ce:1e:cc:8b:94:40:93:7c:99:f9:e5:b0:df:
e9:c4:27:39:26:3d:eb:ef:2c:36:03:b9:22:02:6f:
24:7d:09:3a:b1:a4:29:1e:65:4f:03:70:53:06:a0:
9f:50:f0:0e:72:1b:d7:62:91:05:67:e5:3c:74:3e:
f2:6d:ad:eb:db:f5:0a:56:2d:cd:3e:ac:15:c4:e4:
e1:4c:fa:c0:4f:9d:2f:e0:ae:2e:c3:13:28:77:08:
27:68:78:c9:99:de:37:96:86:c3:ac:8c:ce:79:fa:
da:73:86:1c:79:c2:24:38:8e:6f:61:c8:2c:0b:b2:
46:b6:e2:42:dd:06:49:55:40:a5:14:9e:33:44:2c:
bc:dc:60:78:45:7b:24:ca:27:ba:c8:34:d3:81:a1:
1f:6f:69:1e:91:6d:03:32:83:ef:5f:a7:ea:62:0d:
7d:6d:b0:3a:7e:a1:50:9f:9d:74:00:a8:a1:3b:85:
bf:aa:b1:7d:66:2d:ae:25:db:59:63:4e:ff:fc:a2:
8f:e0:d6:6b:0d:bc:ac:ea:20:93:3c:a7:00:02:a1:
9c:38:7c:09:7b:d9:43:e2:cf:70:05:82:4e:00:ce:
ed:9f:58:6a:57:99:5b:8b:65:82:2b:cb:67:79:f9:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:EA:6B:35:11:8B:AE:CC:48:8C:1A:2B:B8:97:C0:D9:97:9D:00
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ff:ec:8e:20:41:0d:01:5c:a5:46:a3:09:56:26:27:ec:b6:
81:13:e6:7c:2b:e2:2d:f4:01:25:d0:5c:84:b8:55:30:9a:5a:
0a:d6:52:fa:a5:29:6a:f4:83:7a:7f:7f:7a:b2:b4:b4:c6:7e:
99:d5:a8:07:31:f8:d2:da:78:cc:4b:05:aa:b7:39:51:8a:b4:
bd:6f:93:2e:cf:c8:0c:4d:92:86:b8:7e:fc:3d:ba:77:a5:7d:
12:d2:5a:f7:30:ab:36:7e:90:47:ac:30:a5:08:b3:7e:31:9a:
94:fd:6d:7d:09:ad:cc:46:d3:c7:32:90:eb:ee:c7:73:2d:45:
e8:12:8f:c4:cf:ae:55:7c:72:63:61:d0:44:2d:4d:36:d9:a6:
2e:0a:41:e9:42:31:bc:31:26:30:9d:90:8f:cc:c7:84:6e:40:
83:8b:9f:e0:3a:77:d1:ea:79:8d:27:90:be:44:47:67:c9:c4:
b5:08:7f:59:91:4a:aa:0d:fd:ff:26:c5:e8:2e:a2:70:38:03:
8c:48:7b:87:b5:6e:7d:b5:18:5a:64:7d:34:44:2a:4f:0e:0c:
7c:fe:5c:1d:cc:90:07:11:df:cc:bd:29:19:79:30:90:04:09:
95:ec:ae:d0:74:6a:da:0d:12:75:c7:fc:e6:a2:d5:73:eb:ce:
8a:ca:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:49 2025 by rpki-client