Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: Z9aXxdwU8D8TSU26yqOrSTi9kzj82qMDbiPFcUbfOBI=
Subject key identifier: 32:5A:FE:2E:31:57:41:AF:45:4D:C7:AD:E8:C6:D0:24:14:A4:13:D0
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 01969F085F5A74BA2D229614C56ECEDC3903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 017D
Signing time: Mon 05 May 2025 06:00:48 +0000
Manifest this update: Mon 05 May 2025 06:00:48 +0000
Manifest next update: Tue 06 May 2025 06:00:48 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: crp8r9W++zjF4qRXIV3i/8K++gevFE029Hi+JCKAvIA=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:5f:5a:74:ba:2d:22:96:14:c5:6e:ce:dc:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: May 5 06:00:48 2025 GMT
Not After : May 6 06:00:48 2025 GMT
Subject: CN=325afe2e315741af454dc7ade8c6d02414a413d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:1d:b7:de:3e:99:af:36:bb:64:a6:36:6e:
61:56:23:3e:19:43:00:81:1c:f3:91:29:9f:cf:eb:
06:97:ac:a1:cb:b7:f8:b9:e0:66:35:b7:2d:7e:69:
0d:fd:ca:37:70:de:0b:00:a4:31:35:be:14:7a:21:
76:90:0a:71:f2:ca:e5:85:0c:ed:f4:2a:ee:78:aa:
b8:f0:7a:1b:f1:03:6b:b0:a4:62:ec:90:a5:e4:46:
f9:03:ee:be:05:72:fa:f2:62:b6:2f:ee:80:41:24:
02:7b:a9:23:8b:45:7e:3f:42:1c:60:1e:aa:ac:0a:
20:0b:70:04:0b:25:1c:44:74:18:61:cc:dd:25:b7:
fa:3e:66:ca:c0:86:57:62:0b:88:88:5e:ae:3f:eb:
9f:f5:9e:cf:bd:90:aa:52:a9:02:fc:97:09:72:58:
1a:18:11:3b:fc:d0:1c:c9:c1:f5:b0:5a:1d:b6:45:
8e:3b:b5:53:a6:29:8e:e4:d4:98:9e:3e:a7:71:90:
f4:db:c0:43:15:82:f5:be:1f:ef:b1:ab:d5:c6:e8:
1b:e6:d2:51:6e:a3:72:44:c5:20:7c:a7:72:75:dd:
3f:89:02:bc:86:cb:e7:2d:7c:a2:6f:f4:c5:0c:c9:
82:46:cd:11:19:73:ba:07:a2:b9:4b:7a:fa:37:af:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:FE:2E:31:57:41:AF:45:4D:C7:AD:E8:C6:D0:24:14:A4:13:D0
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:63:96:11:26:d4:45:6f:99:11:f2:28:5d:e6:56:9e:5a:
88:c0:15:d2:b7:71:ae:77:92:98:62:8a:1c:09:d8:e4:a1:a3:
c9:d5:87:9e:05:cd:57:c9:f4:9d:49:8f:f9:18:59:5d:7b:43:
62:af:2d:c7:5a:15:aa:ec:67:80:eb:1f:eb:7f:4b:9a:c8:77:
fc:13:f0:82:fa:bd:0c:56:cf:32:31:d2:d8:24:bc:37:8a:43:
38:1e:1a:a4:7a:55:5c:4b:51:50:5d:c8:ea:d4:ee:e0:f7:ad:
8e:41:de:51:e2:7a:95:a5:b7:0a:01:14:0f:51:92:fc:13:84:
2e:bc:47:51:9a:3e:d8:bf:88:4d:44:30:10:1e:0f:6e:dd:ae:
21:b8:a2:f2:e1:a3:50:32:60:67:d8:db:07:b3:04:fb:1f:2a:
40:26:c8:45:4e:f4:ee:d3:21:88:5f:37:0b:c5:71:8c:ff:39:
76:c2:f6:23:d2:a6:46:00:40:42:4d:f2:92:f9:57:b8:da:f4:
1d:5a:c2:19:f3:e9:2a:30:bd:8c:b3:96:0e:b7:78:4b:22:b6:
01:61:4e:5e:1f:3c:50:f6:20:05:83:06:ba:ff:1e:f3:82:ee:
93:8f:e0:7b:be:9f:fd:3d:af:52:a7:b0:f1:3e:6d:f3:a9:6c:
21:92:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:56:21 2025 by rpki-client