Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: SlWdCl+MCghMNoCxfIsUBOVl0LEaOxRMXxM+TZtoM3M=
Subject key identifier: 5C:13:77:9A:4C:4A:D4:AF:CD:44:95:5E:91:5B:E1:77:9A:FD:B6:0D
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 0196B22131C911260424E525B1354F67EFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0D27
Signing time: Thu 08 May 2025 23:00:41 +0000
Manifest this update: Thu 08 May 2025 23:00:41 +0000
Manifest next update: Fri 09 May 2025 23:00:41 +0000
Files and hashes: 1: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: QJUkz5sPhMimmWpKS/m11EBuTZwhv2PImQnap5TfAtM=)
2: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:31:c9:11:26:04:24:e5:25:b1:35:4f:67:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: May 8 23:00:41 2025 GMT
Not After : May 9 23:00:41 2025 GMT
Subject: CN=5c13779a4c4ad4afcd44955e915be1779afdb60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:ca:4f:3e:7b:dc:dd:ce:1f:d6:31:17:dc:
88:23:e7:c4:63:48:ca:98:59:85:f9:ea:53:1f:ed:
9d:e0:37:b5:1c:18:0b:f7:e2:4c:5f:d0:42:b7:15:
b5:1a:40:86:1b:77:e4:6f:4f:d2:07:6d:4f:29:47:
93:27:97:b2:76:8f:12:a8:60:08:fb:0c:7e:ed:88:
63:a3:b8:e7:c3:3a:9f:fa:2d:c1:f2:c2:fc:41:03:
b5:9c:d5:95:93:e9:83:31:92:e3:a4:a4:45:1a:c5:
3d:1f:3d:d3:4d:e3:d3:78:8a:92:ba:0b:31:fc:1a:
f5:cd:5f:9d:4f:cd:78:a1:ed:24:82:cf:6e:73:84:
79:7b:97:69:0b:cb:3b:21:11:33:cf:44:20:89:ff:
12:12:7b:33:95:1b:46:56:2e:11:ea:08:39:17:c9:
ee:76:df:88:d2:87:9b:5b:69:1e:21:78:c3:a7:d9:
90:35:a0:dc:01:03:cb:7a:5e:d8:06:a8:80:04:a5:
52:c7:71:a7:59:65:10:f3:19:62:22:b2:6f:63:aa:
19:e1:37:1e:d9:e5:35:a0:1f:d9:25:89:80:8e:96:
00:07:ce:1e:da:1e:a4:24:c0:cc:02:dc:ec:2d:66:
e0:81:a7:80:b1:bd:fa:c4:6d:3f:06:99:8d:67:29:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:13:77:9A:4C:4A:D4:AF:CD:44:95:5E:91:5B:E1:77:9A:FD:B6:0D
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:13:81:e8:15:42:1b:2f:e0:6d:32:c4:9a:0f:39:fe:29:
bc:2b:9d:56:dc:0f:54:e2:89:5f:aa:df:3d:5f:fb:83:f6:54:
8f:b3:71:b4:07:01:86:d6:fd:8c:7f:13:90:e2:85:cf:43:40:
96:da:6e:28:d1:d9:ac:02:77:e7:dc:54:83:97:a5:03:d6:2b:
e2:f9:f6:c4:97:8c:49:5d:74:95:c1:d3:a1:aa:89:ab:4d:08:
15:c6:79:67:f6:3e:26:ab:d6:72:a0:46:b6:a8:e7:d9:a8:0e:
4d:98:f4:60:15:33:ec:b7:4f:0b:39:68:73:e6:4c:dd:1a:c5:
d4:ee:4c:c9:9f:1c:44:45:2b:86:01:76:cd:7b:59:b5:33:af:
7c:dd:7f:ab:47:58:79:c3:5b:ba:37:a2:98:0d:d5:cd:0d:35:
79:35:d4:a2:af:4d:70:78:39:8b:8b:ab:15:e4:e6:e8:c7:b0:
b9:c3:bb:e4:87:77:f2:59:7f:cb:ae:8d:b8:99:29:c2:9e:37:
e7:6c:b8:7e:a9:60:87:68:18:3e:11:f2:e8:c4:32:97:ce:e7:
08:e8:52:5a:79:c3:e1:ae:35:57:15:a7:cb:7c:7f:a3:6e:c0:
1f:17:6d:87:c6:a7:e3:a0:4c:04:93:cf:48:d2:6c:f9:81:50:
21:55:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:34:26 2025 by rpki-client