Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File: rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier: /jFzPysaPGnpMoanl+sIGS56sCQDNx4jN/0EJKt9iOo=
Subject key identifier: 23:4E:51:74:41:3D:40:FC:CD:C0:45:F3:BA:75:92:2B:EA:25:BD:59
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer: /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial: 0198A04DC3BABF11351ACA8541E1FD4D8627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number: 15FA
Signing time: Tue 12 Aug 2025 22:01:47 +0000
Manifest this update: Tue 12 Aug 2025 22:01:47 +0000
Manifest next update: Wed 13 Aug 2025 22:01:47 +0000
Files and hashes: 1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: hqCQFWop9TdlgRAYt83xrhQUWbHA9M4d9Rd264z6OV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:c3:ba:bf:11:35:1a:ca:85:41:e1:fd:4d:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Validity
Not Before: Aug 12 22:01:47 2025 GMT
Not After : Aug 13 22:01:47 2025 GMT
Subject: CN=234e5174413d40fccdc045f3ba75922bea25bd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:b3:9a:18:d1:a4:da:3b:3e:64:dc:fb:5d:
34:10:a4:28:ab:89:37:c4:99:71:ad:97:ea:77:e4:
bf:60:04:cc:3d:cb:ae:90:14:5c:42:14:ab:71:08:
7f:64:68:db:10:e5:b9:89:7a:32:38:81:9f:7d:a3:
ae:f1:18:06:2b:71:69:d5:26:52:30:14:1e:2b:06:
f4:cc:10:81:89:cb:bb:85:ef:33:3b:3b:f7:57:dc:
30:71:23:90:ac:9a:8c:0b:30:70:8a:75:0a:96:84:
99:9d:0f:9d:5f:69:b7:0f:3a:93:7c:5d:28:b3:64:
35:1e:10:f5:70:ec:55:2f:28:e4:52:99:3b:52:45:
99:c1:6b:45:db:0d:a5:01:e0:8c:42:1a:d7:6a:28:
85:48:3f:b5:a6:a8:dd:cd:67:18:6c:60:f9:15:6d:
0d:6c:6d:96:be:f8:58:06:b7:27:ed:1d:38:ba:e7:
22:3e:68:a4:83:4e:b7:9f:ff:5b:96:f5:ca:15:97:
49:d5:24:7f:2a:0e:49:52:1a:41:a5:7c:35:aa:67:
95:9c:1d:d2:ae:2e:9a:de:aa:ef:e7:d3:11:9c:8e:
e3:cb:06:46:b8:ec:e6:55:f9:fa:cd:f6:9f:39:8a:
f9:62:0e:38:46:c7:1f:2a:02:90:6e:fe:ee:e2:1e:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4E:51:74:41:3D:40:FC:CD:C0:45:F3:BA:75:92:2B:EA:25:BD:59
X509v3 Authority Key Identifier:
keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:b2:9f:3b:10:85:46:82:95:b5:29:68:c6:f7:d6:76:75:
4a:d8:69:38:a6:8a:fa:92:21:c9:7b:b8:9e:ee:40:7a:2a:4e:
9f:b3:71:b7:fc:03:5f:dc:71:da:3f:13:fc:83:ec:f2:98:b9:
ae:5e:a7:67:8a:8f:2c:1c:90:99:2c:67:2e:2b:fe:a8:b5:35:
a8:47:25:ce:57:4a:50:ca:b3:43:2a:e0:29:b0:15:96:12:e6:
e9:d6:f3:de:41:54:c4:66:4d:c9:eb:db:bb:25:8f:72:a1:48:
1d:cd:3d:18:c4:16:68:54:f8:9b:44:61:9e:15:bf:89:0e:48:
d0:b1:ef:d0:1a:46:10:e5:5f:2a:17:ff:58:b7:b1:d8:39:be:
23:46:ff:f9:43:75:06:d1:dd:2b:c9:a8:8d:0b:08:0d:86:87:
e5:ea:2c:40:49:9b:c3:33:bb:f5:6f:7f:54:c5:54:c7:76:8e:
99:6f:cb:77:b9:1b:12:a5:7b:45:86:f1:68:3b:d0:f6:3b:14:
4a:f2:44:f8:6d:d9:43:94:0e:43:5a:82:f5:8a:3c:6b:7e:0b:
67:79:05:51:38:b9:8f:0c:49:2c:94:1e:bd:af:1d:97:76:25:
91:77:1c:7c:2f:b7:ac:50:d0:9d:94:80:6f:14:ab:a1:7a:98:
32:89:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:27 2025 by rpki-client