Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: 8flwy/YqoKhjgv42hRRKJIHxRuv2L/8cEdAkjbP2Sek=
Subject key identifier: 45:1A:0C:94:B9:85:EA:DC:BE:E2:5B:24:3D:7F:F6:20:05:D9:01:6A
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 01967FB3D3506403E3BD34265574B810CF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 14E0
Signing time: Tue 29 Apr 2025 04:00:13 +0000
Manifest this update: Tue 29 Apr 2025 04:00:13 +0000
Manifest next update: Wed 30 Apr 2025 04:00:13 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: jWUvbYgHq4lnMYMmnmXBsHfrZS15wOn9cbKwRBv7J58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:d3:50:64:03:e3:bd:34:26:55:74:b8:10:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Apr 29 04:00:13 2025 GMT
Not After : Apr 30 04:00:13 2025 GMT
Subject: CN=451a0c94b985eadcbee25b243d7ff62005d9016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:af:43:83:07:6e:3a:8c:30:ef:20:e7:9b:
8b:7e:60:1c:7b:ab:53:c1:4e:b2:40:de:fa:fb:e9:
73:3f:e6:a3:20:22:8c:cc:b8:62:0a:ca:37:12:16:
b5:ee:5f:98:cc:aa:00:e1:58:02:75:fd:24:a7:cc:
0b:73:dc:03:76:e5:22:32:e2:c6:77:c5:70:ee:e4:
4d:93:08:25:5a:cd:1b:be:d0:3c:51:61:32:43:d3:
34:90:94:c5:0d:1d:6d:e4:c2:9e:96:f8:92:4b:d5:
a6:d0:37:f5:76:a0:41:d2:24:a2:fc:c4:ed:45:a6:
06:e2:3d:c8:ef:fa:e1:b4:62:ba:c4:10:6f:7c:b8:
09:43:fd:53:aa:7f:7b:18:98:36:b1:42:ab:16:f6:
f6:31:b2:9b:84:13:5d:23:26:d8:5a:35:ce:1d:85:
13:4d:b9:5b:2c:b5:ab:8d:e1:49:76:75:42:ff:70:
be:56:84:1d:ea:0b:71:d1:2f:1c:04:e2:45:6b:7c:
a2:a1:08:80:2e:75:af:fd:d5:42:a7:af:12:6a:ce:
f6:6a:e0:b7:8f:89:81:61:a1:38:59:cd:7e:ee:f7:
e3:f1:bc:9f:9c:f3:d9:fd:68:f7:a7:7f:83:be:26:
27:d0:c4:c8:cb:f7:d1:a2:77:28:ec:8c:01:33:0d:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:0C:94:B9:85:EA:DC:BE:E2:5B:24:3D:7F:F6:20:05:D9:01:6A
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:41:b0:a2:37:b2:ed:3f:ba:9e:06:31:34:43:13:c1:d4:67:
94:71:8c:10:0c:82:74:49:fb:f5:7b:e0:ee:90:22:78:92:55:
2c:57:f3:2b:a0:cb:a3:69:10:e6:76:2d:74:a4:af:65:e0:d9:
4e:55:cc:e1:93:a6:34:97:ca:8c:29:d9:4b:9f:51:5b:70:80:
f4:57:53:5b:e1:a7:28:ae:ad:b6:70:27:19:10:e9:41:65:cc:
d9:06:e2:7d:64:39:2d:d3:43:62:d0:5c:59:83:e2:67:91:fd:
01:12:a6:2c:2e:d4:0b:e9:07:49:4b:9d:90:39:65:5d:88:86:
82:bc:0e:c4:e2:cf:4e:24:db:23:d5:c8:c7:61:62:02:66:d4:
1c:3b:9e:10:c6:50:21:94:2d:ac:ee:ac:97:0d:ea:d9:12:8e:
c5:fb:c1:84:7d:8f:7c:99:f7:8a:6d:99:81:50:7b:ae:38:28:
76:29:5e:28:c8:0a:5a:60:98:ff:ef:9b:e7:38:d8:74:7a:5b:
8a:cf:31:5c:7b:a2:85:88:1f:3e:eb:c6:4e:43:c4:be:15:96:
65:c4:6b:a1:55:15:e3:3b:da:b7:bb:e9:52:c7:f8:e1:ca:1b:
34:d9:32:ad:f5:98:1d:6e:ff:6b:e1:3a:d5:69:50:26:f0:3c:
03:bc:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:50:09 2025 by rpki-client