Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: q38gmCla3JuKsW0QBziECkeWza1Q0y56uj77lVeFpPQ=
Subject key identifier: AB:7F:46:CA:08:C0:D7:B9:E4:3E:AB:76:92:56:CD:B0:2C:CB:31:C9
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 0196767A92133ABFA2A9D0850564C6E678F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 1226
Signing time: Sun 27 Apr 2025 09:01:06 +0000
Manifest this update: Sun 27 Apr 2025 09:01:06 +0000
Manifest next update: Mon 28 Apr 2025 09:01:06 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: 9JFHBHF4jtjbqhZ96+zlGd70REV8k/t/LVB4a9Y14ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:92:13:3a:bf:a2:a9:d0:85:05:64:c6:e6:78:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Apr 27 09:01:06 2025 GMT
Not After : Apr 28 09:01:06 2025 GMT
Subject: CN=ab7f46ca08c0d7b9e43eab769256cdb02ccb31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:06:8c:51:03:18:39:e5:c4:56:c0:93:5d:
42:b6:ac:f7:82:2b:aa:98:a0:1d:8b:99:ea:b4:4c:
f0:e2:3f:c6:73:64:70:d0:a3:c7:04:87:cf:4c:9b:
bf:4b:42:fc:d4:fc:b8:29:22:15:b5:26:c4:bb:05:
b5:58:a4:3d:9c:64:c9:9c:78:1d:f8:ec:d5:ac:36:
a5:5f:23:ba:88:36:0d:25:c5:e3:88:5f:7d:be:a1:
27:ab:ec:8e:c6:e3:4d:a8:73:c5:9f:a9:b8:9d:da:
fb:e3:85:ca:f9:e7:02:d8:fb:96:e9:35:ce:51:56:
0b:40:0d:25:82:84:52:9a:d4:3a:8b:02:04:cb:25:
78:56:bc:65:2b:7f:ea:05:ed:e9:c2:42:74:7b:ce:
ca:bd:4f:f9:69:11:dd:10:b7:7b:91:8f:a7:0c:5c:
c7:d9:ca:7e:4f:f6:5f:3a:5b:e4:25:e7:26:4d:5b:
e8:ed:bd:45:16:17:12:93:2a:4b:74:19:1a:e6:4e:
dd:a8:ee:bb:f2:bf:73:8e:12:bd:a9:33:33:42:00:
10:31:39:39:ae:f5:da:f7:4b:17:3d:65:f9:4e:4c:
4f:32:3a:d1:04:80:ba:bf:5e:42:59:59:db:e0:d6:
87:78:b3:25:64:e2:e2:71:1a:9d:2b:ce:eb:9d:56:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:46:CA:08:C0:D7:B9:E4:3E:AB:76:92:56:CD:B0:2C:CB:31:C9
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:09:c4:8e:4a:ee:64:36:85:a3:d6:1f:06:eb:76:43:21:
6e:b0:c0:42:73:f5:17:d0:94:b7:f1:85:2e:26:5a:d5:46:98:
99:f4:1d:0d:d0:fb:91:93:95:3f:e6:a9:0c:1a:bc:b6:e2:fa:
f7:38:57:7b:af:31:5c:37:33:50:32:b7:1e:99:7f:64:83:1a:
1e:af:4b:27:dd:51:12:ad:9d:14:58:2a:d9:e6:69:67:a9:9a:
81:47:b1:5a:4f:94:83:ff:63:ad:47:15:74:91:34:25:2b:d7:
bf:81:9f:77:fe:9b:a6:4c:b1:62:ff:79:64:e7:96:73:43:b2:
fc:a0:38:9f:2e:0e:21:c2:4c:4f:f0:c2:94:48:59:eb:e7:f5:
03:86:c4:7e:b6:a0:3b:7f:6d:e5:39:ad:92:ba:bd:55:2b:b0:
8b:be:4d:3a:1e:9b:74:07:41:80:e2:13:08:43:d8:1e:52:70:
62:c7:3f:75:e3:f9:6f:a0:fc:03:1a:27:08:77:db:09:25:b0:
14:fa:68:7e:b8:a7:e9:0f:82:01:8c:f7:ac:6e:f7:d0:7b:53:
5e:04:6e:b0:e2:bf:a3:07:d3:2d:cd:78:c2:42:95:79:26:49:
3f:07:f3:2c:9c:78:30:ea:86:31:b2:02:07:8c:e2:6c:80:8e:
ae:22:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:32 2025 by rpki-client