Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: XXIp9O2s9QcrbAxQrOSZz+gvscHiGZESWRtqSqmbRMA=
Subject key identifier: 79:1C:2E:CC:C6:2F:34:14:CD:00:BE:3C:80:5C:2F:92:1A:D2:3C:FC
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 0196A509ED6026FA1D6BB47CDFD69F832682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 131C
Signing time: Tue 06 May 2025 10:00:13 +0000
Manifest this update: Tue 06 May 2025 10:00:13 +0000
Manifest next update: Wed 07 May 2025 10:00:13 +0000
Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: mCJWSyxsSdN+dsVx0hqmeyr+MvmFrcEPFB0ySJTH+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:09:ed:60:26:fa:1d:6b:b4:7c:df:d6:9f:83:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: May 6 10:00:13 2025 GMT
Not After : May 7 10:00:13 2025 GMT
Subject: CN=791c2eccc62f3414cd00be3c805c2f921ad23cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:4b:f1:18:dd:62:3e:fd:7b:bf:6d:a5:f2:
33:c5:aa:de:13:12:32:9c:75:41:2d:9e:1e:7b:f4:
be:02:c5:f9:b0:53:16:d4:39:ef:32:d9:fb:96:fe:
81:64:e7:69:58:53:69:fb:f8:6f:34:77:a1:a0:30:
b3:04:f1:e4:58:b6:4f:f6:1e:d0:6e:c5:fc:c9:7c:
9f:8c:b4:a6:3a:3d:fc:99:49:32:47:94:df:f3:b7:
ce:40:f4:19:c9:c0:28:a0:31:02:3b:b9:d3:97:51:
a1:e4:6d:70:e0:47:ee:9d:be:2b:27:2b:88:cb:dc:
d3:0c:56:7c:e6:73:97:9d:39:be:af:c5:6c:6e:8b:
6d:f9:11:e9:17:ee:c8:0c:2f:51:60:ff:99:16:a4:
83:84:6e:44:ea:3a:1e:2b:c7:52:1d:c6:4a:0a:2e:
39:24:12:3d:53:fb:42:05:29:ae:2d:e8:d5:06:40:
9f:4c:95:88:9e:ba:f8:79:84:c9:25:1a:85:65:9d:
13:45:84:19:70:e1:d0:b0:14:28:31:20:90:0a:0c:
53:18:f9:a7:93:f9:88:58:0a:60:26:1a:80:aa:54:
5b:59:9b:62:52:47:fa:6e:78:12:cf:5f:a8:17:5d:
55:d6:d3:14:bc:0c:51:45:3c:48:c6:11:16:32:96:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:2E:CC:C6:2F:34:14:CD:00:BE:3C:80:5C:2F:92:1A:D2:3C:FC
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7b:05:5e:88:e6:72:95:bc:d2:95:d6:e4:35:07:df:bd:68:
04:32:04:ae:ea:4c:7e:d2:8c:38:85:9f:74:1b:72:86:ee:51:
4f:6d:8d:60:16:9c:fa:93:a9:03:ee:78:a4:a5:3f:c1:85:f3:
79:42:64:68:65:09:9e:74:e7:3c:86:ab:74:f3:cc:72:6d:57:
55:0f:ca:18:de:89:7c:c3:42:5f:c4:49:55:80:c9:d8:27:7f:
39:13:29:17:c3:53:df:19:b5:e2:42:13:9f:c4:f5:ba:51:d5:
dc:73:ac:dd:3d:51:f6:51:1b:12:7d:0f:49:6a:42:ff:60:c0:
63:ef:11:c3:28:aa:c7:42:bf:52:59:0f:14:1c:fd:56:9c:f0:
cc:4b:15:84:64:e3:4d:bf:8e:65:11:24:fe:20:c7:33:5c:89:
e5:44:65:92:b9:e2:a7:3c:98:83:24:73:d2:45:74:d5:76:a1:
b3:61:60:4a:3f:2b:b0:08:cd:c7:c6:77:0b:e0:43:a9:5f:ba:
ae:07:34:99:cd:58:ca:cd:e6:f2:89:9d:a4:d6:fb:35:a4:66:
8b:6f:bb:89:44:4e:3e:0e:06:95:3b:35:5f:03:d6:ce:cd:b7:
e0:93:d0:b9:a5:17:19:58:23:81:a2:e2:13:63:29:95:ac:d2:
50:0c:59:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalCe1gJvoda7R839afgyaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh
YjZiZDYwHhcNMjUwNTA2MTAwMDEzWhcNMjUwNTA3MTAwMDEzWjAzMTEwLwYDVQQD
Eyg3OTFjMmVjY2M2MmYzNDE0Y2QwMGJlM2M4MDVjMmY5MjFhZDIzY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhpL8RjdYj79e79tpfIzxareExIy
nHVBLZ4ee/S+AsX5sFMW1DnvMtn7lv6BZOdpWFNp+/hvNHehoDCzBPHkWLZP9h7Q
bsX8yXyfjLSmOj38mUkyR5Tf87fOQPQZycAooDECO7nTl1Gh5G1w4Efunb4rJyuI
y9zTDFZ85nOXnTm+r8Vsbott+RHpF+7IDC9RYP+ZFqSDhG5E6joeK8dSHcZKCi45
JBI9U/tCBSmuLejVBkCfTJWInrr4eYTJJRqFZZ0TRYQZcOHQsBQoMSCQCgxTGPmn
k/mIWApgJhqAqlRbWZtiUkf6bngSz1+oF11V1tMUvAxRRTxIxhEWMpYKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkcLszGLzQUzQC+PIBcL5Ia0jz8MB8GA1UdIwQY
MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt
YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy
LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3sFXojm
cpW80pXW5DUH371oBDIErupMftKMOIWfdBtyhu5RT22NYBac+pOpA+54pKU/wYXz
eUJkaGUJnnTnPIardPPMcm1XVQ/KGN6JfMNCX8RJVYDJ2Cd/ORMpF8NT3xm14kIT
n8T1ulHV3HOs3T1R9lEbEn0PSWpC/2DAY+8Rwyiqx0K/UlkPFBz9VpzwzEsVhGTj
Tb+OZREk/iDHM1yJ5URlkrnipzyYgyRz0kV01Xahs2FgSj8rsAjNx8Z3C+BDqV+6
rgc0mc1Yys3m8omdpNb7NaRmi2+7iUROPg4GlTs1XwPWzs234JPQuaUXGVgjgaLi
E2MplazSUAxZSw==
-----END CERTIFICATE-----
Generated at Tue May 6 12:59:45 2025 by rpki-client