Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: cYZTOs5kk2kE48wYliil3PzxtuX85icPqnW93lOfpdg=
Subject key identifier: 4C:31:E8:5B:E9:36:6F:A8:98:E6:E4:43:79:A5:93:B9:F4:8E:1D:1C
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 0196A9F9D47CFD65A8B70C6A8CE7990DCE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 09:00:44 +0000
Manifest this update: Wed 07 May 2025 09:00:44 +0000
Manifest next update: Thu 08 May 2025 09:00:44 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: AE4s8F5vaoEvuvZcssGkW+sTbd74gKdx+6lDTSqSQDg=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:d4:7c:fd:65:a8:b7:0c:6a:8c:e7:99:0d:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: May 7 09:00:44 2025 GMT
Not After : May 8 09:00:44 2025 GMT
Subject: CN=4c31e85be9366fa898e6e44379a593b9f48e1d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:0f:7e:17:95:73:25:d1:68:c9:9f:8e:d2:
ce:49:d0:7c:53:36:15:9c:59:0a:66:86:a4:7f:45:
59:2c:62:37:a8:b9:b8:8d:2c:f5:fd:5f:b3:03:a9:
46:42:90:94:b4:0a:9b:1e:0b:26:09:4a:aa:13:ac:
6c:82:c2:16:c7:1c:81:3b:5a:ea:d1:00:77:b8:b9:
2c:c3:b1:72:34:b0:9b:45:ff:fa:f0:de:3e:07:ac:
81:95:d7:36:8a:ff:c6:9f:87:05:43:f0:08:53:c3:
89:14:14:b5:c8:c0:87:28:9a:c7:70:9c:d2:ec:2f:
39:4c:21:a8:02:ba:e2:39:3d:ee:51:9d:21:2e:26:
3b:6b:f5:d8:3d:6e:62:2b:3a:d1:34:d4:a2:48:1c:
e8:a9:24:89:c3:09:db:5f:69:4e:3f:14:53:82:c1:
92:d0:fc:63:c6:ee:aa:95:bb:41:64:da:5f:21:e3:
f7:e2:a4:1c:99:b4:84:9c:75:83:d2:6a:f3:8e:11:
a1:90:96:2a:1a:9f:38:99:b4:ff:93:8d:6c:90:25:
be:50:d1:71:35:ae:12:da:50:2e:e4:f3:b8:28:91:
b8:4e:cb:bd:da:94:e4:0b:27:c2:91:09:bb:02:55:
e9:dd:71:60:8e:72:f8:5d:1f:1c:eb:e7:f2:45:e0:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:E8:5B:E9:36:6F:A8:98:E6:E4:43:79:A5:93:B9:F4:8E:1D:1C
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:48:ba:76:4d:58:6f:89:da:66:e8:82:2b:7e:1f:fc:53:f3:
2e:65:4d:5f:b3:e0:2d:f1:1e:27:74:a6:4a:e2:5c:9a:08:e7:
a1:80:ff:48:90:4f:05:3d:96:9f:91:92:8b:c2:42:a3:f3:f0:
1f:8b:d4:2c:9c:59:03:84:30:31:bf:7a:36:c2:ee:6a:01:1a:
38:e6:93:db:c7:cf:b2:17:d0:d0:e3:fc:ab:89:e8:18:71:a7:
a1:c3:5e:15:2a:b2:d2:80:dc:b8:e7:7b:9b:4b:6c:51:09:a9:
d8:7f:04:4d:60:27:be:ca:18:b5:2a:a8:a3:86:6f:50:99:b7:
90:f8:dc:44:91:58:9e:f8:2f:9c:36:2f:f3:52:80:e2:0f:5f:
07:da:ca:23:60:cc:58:2b:3b:21:b9:3c:be:c0:9a:50:67:63:
2a:8f:08:a7:6a:ee:8b:ec:db:ff:e9:d2:8f:31:a6:7d:a6:3f:
57:a5:b9:04:d1:e2:66:c2:6b:b0:d5:24:4e:05:9b:3b:08:76:
3e:c5:42:59:5f:c7:3d:c8:8c:a5:d8:40:7e:02:1e:be:0f:29:
13:cf:fb:d2:8a:61:9b:97:40:5a:27:7d:da:d8:e9:ca:72:2f:
f7:70:69:43:62:cb:34:9f:fb:06:5a:65:54:f4:2a:6e:74:b9:
b0:f0:5c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZap+dR8/WWotwxqjOeZDc4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzIzNTA2NzE4ZGZjZjJhOGJkMTc2ZDRlYTI0ZTI3NTMy
MmZjZmIwHhcNMjUwNTA3MDkwMDQ0WhcNMjUwNTA4MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg0YzMxZTg1YmU5MzY2ZmE4OThlNmU0NDM3OWE1OTNiOWY0OGUxZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnIPfheVcyXRaMmfjtLOSdB8UzYV
nFkKZoakf0VZLGI3qLm4jSz1/V+zA6lGQpCUtAqbHgsmCUqqE6xsgsIWxxyBO1rq
0QB3uLksw7FyNLCbRf/68N4+B6yBldc2iv/Gn4cFQ/AIU8OJFBS1yMCHKJrHcJzS
7C85TCGoArriOT3uUZ0hLiY7a/XYPW5iKzrRNNSiSBzoqSSJwwnbX2lOPxRTgsGS
0Pxjxu6qlbtBZNpfIeP34qQcmbSEnHWD0mrzjhGhkJYqGp84mbT/k41skCW+UNFx
Na4S2lAu5PO4KJG4Tsu92pTkCyfCkQm7AlXp3XFgjnL4XR8c6+fyReD4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwx6FvpNm+omObkQ3mlk7n0jh0cMB8GA1UdIwQY
MBaAFAFyNQZxjfzyqL0XbU6iTidTIvz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEt
MDUzNzNiYTk0ODNkLzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEtMDUzNzNiYTk0ODNk
LzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0i6dk1Y
b4naZuiCK34f/FPzLmVNX7PgLfEeJ3SmSuJcmgjnoYD/SJBPBT2Wn5GSi8JCo/Pw
H4vULJxZA4QwMb96NsLuagEaOOaT28fPshfQ0OP8q4noGHGnocNeFSqy0oDcuOd7
m0tsUQmp2H8ETWAnvsoYtSqoo4ZvUJm3kPjcRJFYnvgvnDYv81KA4g9fB9rKI2DM
WCs7Ibk8vsCaUGdjKo8Ip2rui+zb/+nSjzGmfaY/V6W5BNHiZsJrsNUkTgWbOwh2
PsVCWV/HPciMpdhAfgIevg8pE8/70ophm5dAWid92tjpynIv93BpQ2LLNJ/7Blpl
VPQqbnS5sPBc5A==
-----END CERTIFICATE-----
Generated at Wed May 7 11:47:27 2025 by rpki-client