Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: YRw3ShAc94UVeaGMhcVfslxf3jHgbdlJPg+RZ4dRJyA=
Subject key identifier: 16:5C:6F:EC:38:E7:3A:04:32:DB:61:6E:BF:9F:3A:B7:DD:A9:00:36
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 01976F99EFEB01573EE486846FB6D77BFC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 12A7
Signing time: Sat 14 Jun 2025 18:00:48 +0000
Manifest this update: Sat 14 Jun 2025 18:00:48 +0000
Manifest next update: Sun 15 Jun 2025 18:00:48 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: zNAZZW1SQD4przW27xLIK0zBIsbJUJP4WyaD9j7azdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ef:eb:01:57:3e:e4:86:84:6f:b6:d7:7b:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Jun 14 18:00:48 2025 GMT
Not After : Jun 15 18:00:48 2025 GMT
Subject: CN=165c6fec38e73a0432db616ebf9f3ab7dda90036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:0b:a8:ed:39:4b:34:5f:6d:4c:27:86:87:
80:b7:ab:3a:3b:67:0f:6f:b7:f7:5c:f0:a1:ed:e0:
56:6e:06:22:b6:dc:58:61:fd:5c:aa:15:11:b8:f8:
40:ef:31:f8:59:b1:91:99:43:7f:4c:c6:32:6f:ed:
fe:47:b1:0d:54:56:5c:4a:92:26:c2:f4:d2:ff:e2:
7b:73:01:1d:e4:d9:78:79:3e:dc:ca:dc:76:74:7b:
ec:56:d6:97:4d:52:75:60:5a:1d:17:0b:f3:3c:be:
9e:45:09:01:e3:1c:34:96:f1:60:61:1c:d7:38:31:
cc:7e:54:dc:24:fa:1e:23:aa:58:40:cd:4c:8b:74:
bf:a8:39:25:de:b5:00:7d:d0:f7:af:08:1a:02:9d:
95:b1:ef:36:05:82:83:95:d7:db:7e:f9:e1:93:a4:
ee:d0:91:14:78:d0:4d:e4:7c:f7:e4:3a:ce:05:84:
ca:17:34:fa:a7:3d:23:1b:b4:49:82:c1:4a:c4:e5:
77:17:a3:7a:ae:8e:65:f8:c4:dd:63:6f:67:b4:01:
16:54:33:42:ca:c1:d3:cf:18:1d:3b:da:92:0d:7e:
dd:ef:ce:f5:48:e8:0c:9d:81:c1:84:21:84:c6:91:
a6:c7:e5:17:c7:a5:c6:5b:84:95:33:6f:f9:eb:b3:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:6F:EC:38:E7:3A:04:32:DB:61:6E:BF:9F:3A:B7:DD:A9:00:36
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c0:5b:31:d3:91:27:4b:8f:a8:7f:67:ab:2a:60:4b:fa:17:
87:0c:87:77:1b:ae:1d:ec:08:49:8e:5f:5a:e8:e7:1e:33:22:
47:c2:f5:58:2e:98:bc:1d:4b:eb:47:39:9c:2e:e5:f1:e6:64:
4a:ba:0b:2f:5d:c1:1e:63:50:fc:57:52:05:bb:c8:bc:65:92:
f4:91:d2:18:e2:cd:29:5b:67:65:30:af:e2:21:82:7b:f0:cc:
95:b5:d6:83:3a:ce:49:66:59:b9:c8:3d:97:6d:27:0a:9f:2e:
08:6c:c9:73:0a:5e:83:c6:b3:59:63:95:a4:c5:58:86:44:36:
98:a8:b2:a7:06:6f:d6:03:3a:05:39:73:c5:c1:b3:0b:b8:cd:
fb:c5:6a:c0:5f:17:c6:43:7c:2c:0a:89:51:fc:2a:75:5f:37:
a2:45:b1:ee:36:11:7e:0c:6a:95:d2:00:24:d9:d9:d3:88:a2:
22:b3:23:5c:c4:48:f5:aa:8c:ac:da:81:08:0a:81:f0:47:db:
b7:f2:a0:0f:d0:e1:6c:00:07:aa:50:6d:05:60:cc:ba:d6:50:
06:13:88:0a:40:3b:eb:2c:b7:cb:ad:41:21:7d:ab:e2:c7:10:
a9:f6:e1:0f:32:65:b7:3d:18:53:f0:9f:71:4d:da:ac:2e:86:
08:05:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:33:26 2025 by rpki-client