Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: z++cmpkMYdw4njmSt+lXAM9Ctt1ueReIeBQ24Qaouk4=
Subject key identifier: E5:B7:8E:3A:77:9B:5E:19:2C:62:54:64:F3:87:1B:C1:81:D3:3D:ED
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 0196AB79DFDAB67BB48DEA92BDE355580B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 0AB5
Signing time: Wed 07 May 2025 16:00:13 +0000
Manifest this update: Wed 07 May 2025 16:00:13 +0000
Manifest next update: Thu 08 May 2025 16:00:13 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: StMiB3UibQtgRbVGSB4Wo+gIN2c6A17GGLj+0Wtilp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:79:df:da:b6:7b:b4:8d:ea:92:bd:e3:55:58:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: May 7 16:00:13 2025 GMT
Not After : May 8 16:00:13 2025 GMT
Subject: CN=e5b78e3a779b5e192c625464f3871bc181d33ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:58:94:32:bd:9e:6e:28:c4:fc:5f:60:4f:
c2:5b:36:f4:5a:37:30:7f:09:01:ad:d1:2c:05:be:
c4:40:4c:02:f2:a9:5b:55:dc:d0:8d:99:01:a1:6f:
f6:21:d8:8b:8d:f9:50:be:b3:6c:68:1e:7d:ee:ca:
07:2f:00:f6:21:1d:bf:08:41:a9:51:7f:16:9c:b1:
53:c9:07:de:bc:45:59:df:df:a4:ae:f2:1c:11:94:
98:98:3c:e4:36:08:bd:08:80:b2:45:84:9a:60:9d:
7a:07:3f:48:31:59:21:be:75:37:26:38:3f:1f:ae:
ec:91:9f:ae:ab:86:b7:e0:de:4d:30:80:fb:64:56:
e3:b3:9a:b7:51:1d:bc:c6:90:c1:f6:77:52:f1:14:
67:e3:f5:ad:74:23:0b:31:52:b2:1e:4d:97:42:c6:
e0:cc:d9:c9:5b:fa:f8:4f:59:64:4d:fb:cd:d5:b9:
ab:01:11:5c:c7:86:a5:36:fd:53:f6:b6:3d:25:34:
04:5c:af:9f:46:4d:3a:99:7e:a1:64:3b:a8:2a:50:
94:42:ca:db:1b:2d:5b:58:fd:12:1f:40:5d:d3:6e:
47:02:a0:fd:cb:9c:5e:4e:cb:77:a4:9e:d4:ab:27:
e4:91:61:3f:f1:06:30:a0:f0:b1:e1:1e:92:bd:78:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:8E:3A:77:9B:5E:19:2C:62:54:64:F3:87:1B:C1:81:D3:3D:ED
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:12:94:14:27:6b:b1:94:c4:1c:5c:3a:52:90:71:a7:9e:
d7:3e:22:de:e1:4f:73:a0:06:df:75:f4:78:f7:23:63:48:86:
5b:ce:3f:a4:fe:69:44:7e:41:e8:aa:38:5a:e5:35:91:9f:09:
73:00:4e:3f:b1:66:bc:a5:11:e3:67:cc:43:b7:8d:04:68:db:
68:8f:53:d6:fe:41:fb:eb:f1:ef:db:0c:5c:6a:1b:65:b4:c2:
c4:1f:79:25:e5:ce:ac:62:3c:26:6f:4b:e7:c5:31:6f:dd:3c:
6f:15:e7:b6:92:d8:97:74:8e:05:ee:c4:ca:4c:3c:e5:5e:94:
b4:dc:a8:d5:12:0f:7f:d2:c5:14:84:15:0c:46:eb:a9:28:2b:
50:12:fc:9a:1b:a4:dd:a9:b5:9c:f7:16:ba:5f:e2:18:94:e3:
71:b8:35:e8:ae:e6:4f:f7:d9:bd:20:b3:9a:76:b2:bf:af:7c:
d2:67:a7:34:2d:98:d4:70:6d:5d:70:d4:1f:ab:ac:e6:48:71:
55:62:0d:7a:af:c5:aa:79:74:9a:ea:44:98:8c:f1:b1:11:24:
31:4f:af:ca:d8:c1:22:2a:1a:d6:30:bc:bf:eb:0c:35:48:17:
af:d5:f8:4e:fc:9c:91:13:d5:e3:bb:72:37:aa:df:15:15:e1:
9d:35:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:05:40 2025 by rpki-client