Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: UhFF3eXm6nBo+iC4tOHP0mFoxoh8CrVNYcSeAZPSilg=
Subject key identifier: FD:6D:D4:82:76:56:C8:95:A5:5E:15:9D:43:B4:DE:2E:6E:76:1A:95
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 0196B8FF060E4A8B443814CE50C826C85091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0EB2
Signing time: Sat 10 May 2025 07:00:43 +0000
Manifest this update: Sat 10 May 2025 07:00:43 +0000
Manifest next update: Sun 11 May 2025 07:00:43 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: 8XutiT10bvsWvHP9EIIVBpBImcA47CFXrzWeWLloC0s=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:06:0e:4a:8b:44:38:14:ce:50:c8:26:c8:50:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: May 10 07:00:43 2025 GMT
Not After : May 11 07:00:43 2025 GMT
Subject: CN=fd6dd4827656c895a55e159d43b4de2e6e761a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:cc:a4:b7:a8:8a:57:12:2d:73:8f:87:32:
78:4a:f0:34:3f:bd:b0:63:cf:75:15:16:e2:28:48:
14:d5:02:ab:74:88:57:50:d1:bf:45:d0:14:13:9c:
c9:da:0a:71:5a:e5:f6:96:1b:08:e2:9a:a3:b0:4d:
32:a6:e8:4d:dc:8f:34:6d:39:85:f1:b2:29:5f:d4:
d1:c9:6b:88:b3:11:c9:cc:d3:95:8d:7c:f3:77:9a:
bc:f4:0f:4f:9f:f7:a6:14:02:0e:43:69:c5:40:6b:
9e:bb:c2:30:41:7a:6f:3f:04:eb:0c:15:30:b5:17:
61:6d:40:c3:f9:15:ac:06:76:a8:ab:3c:c7:22:27:
f2:e7:89:1c:3b:56:54:e4:5b:5c:6f:14:8f:9c:11:
39:eb:80:99:b6:33:d9:c4:88:f1:da:8c:b2:dd:51:
3b:a4:db:41:f3:84:af:f8:16:cd:25:08:69:39:aa:
96:f8:c0:ef:7d:5e:85:be:76:92:bb:3d:5f:2f:b8:
15:5e:39:a0:0e:a4:ac:b2:54:3f:22:ca:e2:23:b9:
98:da:4e:92:32:ad:c6:76:17:10:ae:34:77:b8:43:
91:4e:09:37:41:65:9f:e6:9d:31:11:0d:0a:48:1d:
cc:bf:c2:c1:b8:e4:9e:f8:c2:5d:47:4f:94:84:52:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:D4:82:76:56:C8:95:A5:5E:15:9D:43:B4:DE:2E:6E:76:1A:95
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:5b:5c:86:06:70:26:33:da:7c:2d:6c:9f:2a:45:18:da:
26:19:fb:77:71:29:3f:e0:f2:b9:27:9d:cf:04:c4:af:5d:84:
2d:68:e2:b3:41:c7:e5:6c:46:d8:ee:52:a3:93:d6:b5:fa:32:
53:f7:bf:5f:3f:84:96:f9:48:be:62:d1:f8:eb:b2:91:dd:e4:
2c:5b:bd:59:2c:6e:e4:77:b7:9c:dd:14:37:66:e0:97:09:a2:
ef:f6:53:c3:7f:17:22:75:b5:a5:c1:7d:30:05:ac:4e:d4:09:
af:2f:30:6a:16:2b:f2:22:74:1b:8b:8e:ab:e9:cd:08:c0:f3:
5f:36:4b:96:db:94:38:bd:45:89:10:5c:8d:ee:bc:51:e4:86:
5d:73:4b:4e:93:50:53:5d:32:c3:73:6b:9e:88:c4:1d:21:b3:
6a:ef:11:55:b9:91:a9:c2:5a:27:eb:af:e7:30:b0:5a:3f:53:
74:0b:62:b2:db:da:5a:08:0a:16:08:a2:be:40:a5:57:30:14:
03:5b:81:63:22:71:20:6c:78:0f:32:c8:22:9d:d0:27:51:24:
fa:43:21:27:5d:f3:a4:f3:e6:4a:50:53:2c:05:d9:d1:09:69:
04:0f:3c:b8:a8:0a:a1:f9:49:8c:3d:66:5a:0d:cd:fe:a1:fb:
6a:12:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:17:42 2025 by rpki-client