Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: /uvxw1f31Ohrib1tlCIKhPWNRJfr53OkbIw3Jg+yWsI=
Subject key identifier: 49:9D:19:E0:C2:53:2B:49:B7:E0:A7:AD:D1:2A:34:FA:00:EB:2B:61
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 0196B3D8CD4A7A8E1465132A95FC51183513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 07:00:52 +0000
Manifest this update: Fri 09 May 2025 07:00:52 +0000
Manifest next update: Sat 10 May 2025 07:00:52 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: izomFLDNPmxTARpESrHh47TYLn4IYB0KR8B2BOITRXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:cd:4a:7a:8e:14:65:13:2a:95:fc:51:18:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: May 9 07:00:52 2025 GMT
Not After : May 10 07:00:52 2025 GMT
Subject: CN=499d19e0c2532b49b7e0a7add12a34fa00eb2b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:aa:dd:fc:e9:3a:6b:fa:0e:2b:4a:e1:0f:
aa:e0:ff:a4:c9:d9:c8:a1:e6:b8:80:cd:50:07:3b:
04:5c:7e:9f:3a:7e:15:0c:56:8d:e2:ac:4c:65:3a:
46:8b:fb:6e:d5:ea:fc:02:ec:71:68:82:73:5c:ae:
cf:13:72:21:bf:05:75:2e:42:7d:31:5e:76:c9:a3:
fe:b0:5d:98:97:46:42:c3:51:24:a3:ae:d9:56:09:
08:1b:df:fc:fa:07:56:0f:b1:bf:ab:50:7f:cd:58:
e4:e5:fb:48:42:24:cb:fe:14:c8:7b:5e:85:46:c7:
e5:40:a8:e7:b4:5a:bd:8b:8b:36:76:bf:34:25:5c:
54:85:ad:24:b1:4d:d8:dd:ca:69:d6:2b:cd:be:97:
36:4e:bd:9c:13:c5:3a:5e:22:06:f8:2c:94:bb:a2:
98:ef:28:9a:1f:1e:8e:bb:5e:06:ed:1f:21:23:f0:
af:3c:2b:54:9c:50:bd:61:c5:64:15:f5:b9:8e:19:
3c:a8:fd:48:6f:bd:09:70:45:40:f2:d3:8e:ce:53:
77:b4:bd:1d:3b:4a:49:13:80:05:c2:d9:50:62:d1:
b2:16:94:ef:a4:0f:5f:bd:48:4a:49:16:d1:a8:8b:
94:93:e1:bf:18:89:65:15:d9:1e:32:14:f9:b7:63:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:19:E0:C2:53:2B:49:B7:E0:A7:AD:D1:2A:34:FA:00:EB:2B:61
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:35:91:ee:4c:06:2b:3d:b4:d9:c2:33:86:cf:c5:eb:70:
7f:44:0b:90:c3:97:af:ab:6c:8a:8e:01:c7:6f:51:19:27:d1:
76:5b:52:48:f7:3d:50:fc:f9:71:7b:63:47:18:6a:68:84:80:
3d:06:d3:2e:60:cc:4d:10:c0:20:79:24:d7:58:b3:b9:17:60:
16:2b:33:34:b4:ec:40:d0:5e:c5:ad:b2:db:e4:c0:c6:c5:19:
ad:28:1d:7f:79:68:84:31:38:3b:41:7c:78:f5:61:69:fd:c2:
fd:5a:ec:20:2c:44:5e:d5:5e:a4:3c:d0:36:f5:22:8c:97:90:
3f:04:13:da:e7:bb:b4:e0:42:18:89:39:65:19:93:b8:98:18:
50:10:34:7b:3b:4a:33:16:90:63:0f:91:48:17:33:3e:8b:1b:
76:ce:cc:a6:ef:6a:2c:65:5e:d4:3b:8d:01:77:f9:5e:d5:98:
12:e1:11:ab:78:98:aa:f1:67:fb:89:fb:2d:33:89:c6:13:4a:
67:ae:b7:cf:1a:63:ec:e4:54:53:99:cd:17:38:66:e5:00:c6:
57:a0:c9:4c:db:6a:8d:f3:79:f0:28:2a:9f:47:e9:5c:6d:03:
38:71:ec:da:a1:e8:ce:7b:c1:4a:ad:ca:65:35:64:2e:99:74:
de:cb:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:42:38 2025 by rpki-client