Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: CnxaCZ8RwPH7TKs8tLLOuyDQQ9bg/Hq4hyKtc1p1l+E=
Subject key identifier: 61:04:1F:F0:59:65:7F:59:22:78:F5:90:26:94:C8:52:50:62:2C:D7
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 0198892248F70B64015F0366095BEE86DAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 10:03:02 +0000
Manifest this update: Fri 08 Aug 2025 10:03:02 +0000
Manifest next update: Sat 09 Aug 2025 10:03:02 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: /cnfcyIwo310C6NnPkGwTdlXFEWNhCgUOyOYcaAtt8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:22:48:f7:0b:64:01:5f:03:66:09:5b:ee:86:da:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Aug 8 10:03:02 2025 GMT
Not After : Aug 9 10:03:02 2025 GMT
Subject: CN=61041ff059657f592278f5902694c85250622cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:13:6f:b0:8b:00:b8:ce:18:cf:98:34:0e:
b8:19:94:a8:95:bd:7c:bb:54:5f:12:fa:2a:b0:36:
f2:87:8e:8d:5e:fe:a6:b6:33:92:b5:62:b5:8e:f5:
09:95:a3:71:13:e2:d3:86:36:24:f1:1c:db:2c:9b:
21:ec:ec:3e:ec:f3:0d:c7:d0:5b:d9:68:c1:8d:1c:
02:a2:87:5d:b5:c1:a2:9c:cf:3e:2e:b7:39:1b:23:
50:41:d4:37:af:f8:d2:f1:8c:99:24:c2:12:93:d2:
07:e2:31:f8:1d:92:6f:8a:ca:e5:68:65:eb:a4:97:
b5:fd:5c:52:ca:cd:b0:13:17:67:ae:c2:6b:32:b6:
32:97:5c:ad:a1:94:4e:f6:af:d7:45:d6:71:d4:0b:
92:dd:74:77:48:b9:f5:82:24:8b:28:3e:45:25:dd:
00:a7:d6:89:e5:72:db:f4:c8:a8:cc:e8:36:25:b5:
2e:4b:d1:d8:22:03:f8:3e:10:ba:9f:8d:ef:57:61:
21:f7:cf:89:58:88:7f:38:5c:ea:09:ba:c4:ab:4d:
2b:9f:19:73:15:52:38:1d:1e:fb:29:64:69:f3:6b:
98:be:10:14:1f:31:66:af:f1:be:4f:2b:a1:34:4a:
22:cb:6c:f2:78:d9:4c:db:d0:6e:4a:7f:03:f5:cc:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:1F:F0:59:65:7F:59:22:78:F5:90:26:94:C8:52:50:62:2C:D7
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ac:45:87:c0:f3:f3:6d:04:d1:53:c3:64:a3:f4:74:c9:76:
ad:5c:2a:38:22:58:2c:8f:2b:b0:f9:d9:fd:7d:4f:14:bd:06:
c9:8c:c5:c8:3d:58:93:38:d6:0f:f2:6b:23:90:7e:1e:d2:1a:
e3:6f:37:17:6e:24:1a:8d:a7:5f:c4:95:2c:9e:04:db:df:b9:
aa:b8:5d:74:83:0a:af:cd:5a:7d:57:a0:6b:c1:f7:5a:a4:1e:
a7:33:54:68:e5:96:9e:6c:c4:dd:a2:97:0c:5c:16:b9:14:6b:
b2:e4:3d:9f:d5:d2:33:34:9e:f3:03:d9:d9:79:b0:15:69:79:
a8:8d:42:3b:42:29:aa:a9:a5:84:e0:a3:2f:a1:17:09:b7:d3:
4c:cf:69:e3:18:61:bb:b3:d2:70:ff:8e:3c:9c:83:1f:90:4c:
b6:ad:b6:5d:06:59:19:93:f4:ed:44:64:c6:94:49:07:c4:f8:
1d:4b:71:24:a3:60:65:10:b6:ca:6b:84:ba:01:de:b6:0a:3b:
f6:a0:d0:33:74:d1:a8:34:86:9e:cf:70:65:33:dc:23:ac:87:
fb:0a:88:1a:ef:47:f1:1c:52:8f:98:ac:28:4d:61:0f:a0:8a:
62:60:6d:61:61:42:40:50:06:77:9a:e5:55:80:b6:59:07:da:
20:f9:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:36 2025 by rpki-client