Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: 767ciXvLNNaRolZ6aGIDYxwWPDaenEmahVYNbEwpZEo=
Subject key identifier: DE:A8:8A:ED:B9:58:0C:3C:42:6D:76:E3:22:EB:65:14:4E:02:81:FA
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 0196A72FDAD95A5B8F6CBDF82EBA51A3C267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0E29
Signing time: Tue 06 May 2025 20:00:53 +0000
Manifest this update: Tue 06 May 2025 20:00:53 +0000
Manifest next update: Wed 07 May 2025 20:00:53 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: JsJJwur4v5CjhDRdvnM+9KqmD3lWSEW7z110PuR/9fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:da:d9:5a:5b:8f:6c:bd:f8:2e:ba:51:a3:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: May 6 20:00:53 2025 GMT
Not After : May 7 20:00:53 2025 GMT
Subject: CN=dea88aedb9580c3c426d76e322eb65144e0281fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:83:04:2e:58:3d:9c:51:d3:cd:c4:9a:9c:
96:a3:ba:e4:45:7d:b3:0a:1e:dc:15:00:3f:ad:9a:
c5:b7:df:95:f8:7f:c7:42:31:26:e5:c0:a7:21:40:
a5:ca:3d:38:1b:a3:4e:18:48:20:59:a5:83:52:08:
82:db:0a:31:19:e1:be:6b:6f:86:5e:7c:cf:39:83:
4e:d6:69:ce:29:94:97:de:83:db:50:ea:a1:03:db:
78:f0:9e:89:c9:a6:93:ca:12:74:92:b1:44:d5:83:
cb:21:33:45:a9:c0:c9:42:9f:9d:79:99:a3:9b:87:
8e:5b:ed:07:bc:6d:ce:0e:8c:48:94:ee:29:a9:6e:
65:f8:f5:81:8f:26:c0:a7:ee:21:52:fa:ef:9a:03:
de:8e:a8:78:9b:54:c9:c5:95:4c:b9:63:de:17:a6:
fa:7b:51:3b:e4:43:c7:13:85:dc:66:63:c6:fb:a9:
27:28:88:19:53:85:11:0f:89:ba:f2:9b:18:e3:19:
49:4e:f2:d2:70:66:f0:cc:d3:f2:06:91:7b:2d:f4:
31:21:63:56:69:49:b4:fc:05:85:6d:d5:1e:dc:c0:
ff:56:8c:e2:c7:ee:dd:41:cf:81:f8:0c:33:30:84:
65:ee:9f:54:af:62:06:fa:10:8c:bd:91:65:78:34:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A8:8A:ED:B9:58:0C:3C:42:6D:76:E3:22:EB:65:14:4E:02:81:FA
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a4:51:01:78:bf:e1:8c:98:6e:d9:4e:5c:b7:99:bc:c3:d0:
61:19:84:22:64:d5:aa:70:f1:55:67:c6:6b:3c:6c:45:06:b1:
48:2e:71:cf:06:f0:1c:42:d2:92:9d:8e:fc:22:3a:06:35:cf:
60:60:c1:23:88:bc:a9:3e:95:c3:4f:3d:10:51:8b:1a:11:e6:
1c:11:4f:5c:98:76:c3:27:c6:e4:23:9c:85:5c:dc:a6:38:21:
e8:07:e4:eb:52:1d:9a:45:86:16:d6:58:d1:2c:68:c6:3f:a0:
c0:1b:82:2b:bd:33:f3:9e:b5:eb:e7:1c:eb:39:84:bf:c0:c7:
1e:2d:43:f0:19:5e:f2:5c:d1:11:be:70:47:bf:01:6f:94:69:
28:38:5c:5d:ac:72:a9:35:05:b9:04:54:99:29:f7:f3:d9:72:
66:42:fd:ed:e8:bb:9d:e3:cd:20:ed:42:4b:02:c5:ab:4c:9c:
63:4e:32:19:28:fb:ea:34:97:ea:05:f5:3d:e8:5a:36:81:88:
e4:79:06:e3:0d:7a:bc:c2:1e:7f:7c:07:8d:af:b8:76:5a:46:
e5:70:be:d2:5f:a8:5f:2a:90:8f:5a:c7:02:ba:0b:e6:f2:52:
99:a9:d2:7d:14:f5:f8:93:07:01:74:13:7d:67:94:40:fd:19:
b5:88:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:42:14 2025 by rpki-client