Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: Oj234Eta7ELBde62QepUT8hGy0Z9+G66wpnmlqoeCz0=
Subject key identifier: 0D:80:FC:52:EA:D5:FD:1F:18:27:CB:C9:F6:09:EA:53:6D:06:FE:23
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 0198744FAE9CA8FE0676B6F85462FC99B294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 132E
Signing time: Mon 04 Aug 2025 09:00:35 +0000
Manifest this update: Mon 04 Aug 2025 09:00:35 +0000
Manifest next update: Tue 05 Aug 2025 09:00:35 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: Yvk9Il9+Sh1QN+QdBDtOEP05oBkwSYzTt2DkTWl5+h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ae:9c:a8:fe:06:76:b6:f8:54:62:fc:99:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Aug 4 09:00:35 2025 GMT
Not After : Aug 5 09:00:35 2025 GMT
Subject: CN=0d80fc52ead5fd1f1827cbc9f609ea536d06fe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:2c:43:af:73:a7:e5:00:be:e3:86:ce:90:
4c:40:dd:3c:84:0d:9d:00:b4:94:cb:b4:2c:70:4b:
b0:fd:38:03:fc:82:59:ba:06:cb:03:be:71:e0:68:
ef:48:4d:62:24:d6:c2:f0:b1:f9:ee:fc:4b:c9:a8:
39:74:2b:28:1a:7e:d0:90:b1:16:eb:11:da:8e:dd:
03:cf:0e:d9:1d:76:27:6e:7d:22:a2:00:3d:02:fd:
b3:26:fd:85:bd:4f:d1:76:2a:f2:83:82:f3:ae:30:
c2:9e:b2:93:6f:3a:30:f3:e9:1e:66:2e:ca:81:ff:
65:5c:1e:0b:64:7e:5d:8c:5e:60:8f:a7:48:0c:4f:
53:94:4a:89:7c:e3:15:c0:3d:0a:b7:51:36:c6:cb:
bf:54:5f:5a:4f:3c:5b:4a:7a:0e:86:c8:c3:53:b6:
d0:97:a2:35:1f:fc:58:be:7f:78:c5:3f:3c:d1:9b:
91:1c:cd:0c:53:d6:0a:85:7e:76:24:6e:a3:06:56:
12:ea:cc:78:e2:ff:23:82:44:79:ca:43:8c:61:f8:
cc:4c:7e:04:fa:95:3a:d6:6a:65:82:64:f1:9a:a7:
08:75:f6:80:0b:c1:47:cd:1f:73:21:3c:f4:f3:68:
34:98:73:4f:c2:4f:6f:3d:59:57:aa:3c:d6:0d:64:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:FC:52:EA:D5:FD:1F:18:27:CB:C9:F6:09:EA:53:6D:06:FE:23
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:90:f4:eb:4e:b3:25:ad:b4:56:2a:1b:aa:87:90:b6:41:
dd:7e:0f:51:65:b1:48:0b:16:f2:3f:75:89:28:36:f4:aa:1e:
93:7f:91:10:47:1d:8f:f6:14:fc:aa:6d:01:d7:20:d2:d9:cc:
dc:71:6f:0a:f5:a7:4f:2e:3d:b7:4d:5a:8a:ef:14:41:00:d3:
19:70:36:10:c2:47:1a:cc:11:2c:c6:48:f8:85:fe:49:c8:47:
4d:64:d5:50:3a:14:8a:b0:fe:79:34:7e:a4:4f:7a:c4:57:b1:
d3:e9:68:ab:fe:02:7f:72:b3:18:5c:d4:89:74:cc:5e:49:6f:
79:44:fe:fc:12:88:5a:36:fb:bd:84:a2:3c:eb:ce:a1:d6:49:
58:a4:1b:fc:46:a2:6d:e0:f6:84:ad:6e:82:8c:02:8c:a1:37:
67:a5:92:e7:e1:41:51:19:e5:e8:66:d0:c5:44:3f:ab:07:01:
0a:37:07:5b:af:d6:22:85:0a:ed:c4:2b:46:94:94:29:37:a9:
7a:05:8d:d9:0b:51:ed:43:1a:db:86:d2:b3:fc:07:c1:d7:c8:
e9:bc:2e:c6:4e:ed:92:ab:db:6a:e9:6a:77:8d:e3:17:86:21:
a2:dd:5e:7c:77:bc:44:75:39:24:53:ee:b2:0b:26:0d:f7:60:
56:35:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:37 2025 by rpki-client