Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: GEW0WZNwjsR/CfKZErpm3z+E2C3kO5Wd3aRErIjYDLM=
Subject key identifier: C3:2A:4F:61:69:49:C2:50:3F:3B:57:A1:AF:77:E0:B3:40:18:34:E6
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 0196CBAA3D78BA310778388423BB0C83D41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 1067
Signing time: Tue 13 May 2025 22:00:53 +0000
Manifest this update: Tue 13 May 2025 22:00:53 +0000
Manifest next update: Wed 14 May 2025 22:00:53 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: 24+rNERriaxgN17MQrTrRv+OwnD/GobTGoAb/bNTl2Y=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:3d:78:ba:31:07:78:38:84:23:bb:0c:83:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: May 13 22:00:53 2025 GMT
Not After : May 14 22:00:53 2025 GMT
Subject: CN=c32a4f616949c2503f3b57a1af77e0b3401834e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:79:09:dc:52:ac:1f:12:60:aa:21:11:31:
a6:37:f2:77:55:67:87:b6:10:e7:32:e6:e6:76:47:
c5:23:24:46:52:32:df:5a:84:ae:d2:e5:ac:60:4b:
88:5c:48:80:25:ec:16:68:72:49:e5:46:90:ad:ba:
8a:85:7f:fd:ca:ab:3d:ad:b9:e0:35:6d:3d:0d:64:
17:33:b4:99:a3:cb:1b:7c:e9:d7:ad:15:2b:16:fe:
06:2a:6a:a6:a4:1b:77:42:2f:7a:9d:22:73:92:2d:
47:1f:60:1e:9a:f7:35:b2:18:1c:c5:9a:89:99:a0:
c5:46:20:e6:b2:a0:04:3c:ef:a3:56:44:c8:8d:eb:
79:84:56:49:6d:bb:8e:c6:a4:7a:9b:43:f8:9f:e5:
5a:1a:a3:d1:a3:92:2e:2b:14:16:0a:e4:a9:42:75:
29:0e:da:d2:ef:2b:8d:33:9f:37:c4:a8:f2:58:55:
e7:b3:20:7d:a1:9f:53:e1:ac:6a:70:e4:06:56:94:
05:50:a2:e4:9c:f6:83:6d:1d:50:5e:90:18:fa:62:
7b:c7:a1:ce:3d:c8:cb:17:60:d0:f7:ab:32:15:fd:
23:c5:72:bc:ce:9d:3b:e1:94:3a:3a:ee:48:30:fe:
b4:ac:fd:68:27:51:3f:3a:6a:b4:e5:0b:19:09:ef:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:4F:61:69:49:C2:50:3F:3B:57:A1:AF:77:E0:B3:40:18:34:E6
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:68:9b:4e:53:33:da:e2:a2:6c:92:6d:e8:45:c7:00:57:07:
b9:c3:59:44:07:fd:6c:74:ce:eb:f8:93:50:f5:ff:1c:ad:94:
59:b5:a0:02:a2:62:db:ef:eb:95:82:e7:99:3c:77:19:a5:97:
94:7f:2d:28:fb:dc:f6:76:36:d4:28:c2:e7:32:0a:4f:0e:67:
78:c2:4f:2e:f0:48:10:49:a4:82:27:a9:14:41:da:77:be:a8:
75:85:7f:b3:05:e0:1c:ff:b8:52:c8:f3:58:93:50:94:b0:39:
5c:55:28:1c:ce:4a:ba:ed:84:22:f5:b1:dd:65:3c:7f:bd:d6:
8f:67:af:07:bc:ee:47:e4:ff:1e:de:4d:b6:10:a7:53:19:3b:
e4:90:2e:51:90:99:6a:e6:73:76:4e:23:23:0b:ab:27:6d:b5:
b0:10:49:97:7f:69:b3:6f:12:62:19:73:88:4d:71:69:da:de:
49:8c:76:91:89:18:4a:60:0b:a2:26:e8:61:43:ae:bd:6b:c3:
46:5b:6f:7f:a4:9d:a6:87:c7:f7:c2:f4:75:84:ab:bd:0a:d5:
3b:23:2f:ce:ee:aa:c6:2b:0f:db:fe:ce:45:7a:47:a0:e6:45:
65:07:cb:89:e4:5d:02:ba:81:24:01:f7:fd:27:25:22:90:e0:
77:55:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:42:58 2025 by rpki-client