Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: qCIu8mhljq7GIgsJ1DlVakkTywrcUDLDnA/eoMk32eY=
Subject key identifier: 2F:D9:70:FC:05:7A:05:53:1D:75:EB:BF:B7:D8:A2:3E:74:F8:4A:34
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019788B4AB8E6939A79C9E0CEE1D8BF8400C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0D7C
Signing time: Thu 19 Jun 2025 15:00:31 +0000
Manifest this update: Thu 19 Jun 2025 15:00:31 +0000
Manifest next update: Fri 20 Jun 2025 15:00:31 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: k5Sx9+d9f5bdKa/3hhk5IE9qSPQ36bhhsymUAXdpkYc=)
2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:ab:8e:69:39:a7:9c:9e:0c:ee:1d:8b:f8:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Jun 19 15:00:31 2025 GMT
Not After : Jun 20 15:00:31 2025 GMT
Subject: CN=2fd970fc057a05531d75ebbfb7d8a23e74f84a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:dd:fa:6d:c8:11:ed:a6:da:4b:4f:ec:53:
9d:57:ab:a3:64:8c:e4:fb:02:c8:e4:10:bc:25:95:
c9:51:79:09:51:cd:b8:d6:03:b8:ec:24:91:91:b6:
ed:d1:ca:70:cd:89:1c:46:d0:52:15:5c:eb:fb:cd:
63:ff:f5:de:3b:38:4e:12:1e:30:9b:69:2d:42:a5:
30:7f:96:3c:6f:3a:5b:3f:f3:b3:ce:34:93:3f:7c:
c7:1d:50:c9:fb:65:a3:68:40:d7:3d:a7:15:73:93:
12:14:fd:23:51:76:ea:b0:b4:86:dc:1e:4b:1c:0d:
a8:c9:34:9e:f9:1f:86:c2:76:42:8c:ed:c2:f7:eb:
d6:fa:0a:8f:71:0d:d2:7d:e3:c8:53:87:57:4d:21:
8b:59:30:3d:a0:fe:3e:51:25:b8:a3:c2:60:e2:58:
23:a1:ab:03:cd:f1:78:c0:c5:03:4a:18:fc:28:0a:
9d:bf:eb:6a:94:c2:26:0c:be:99:8f:8f:81:ef:38:
9a:92:6a:ae:87:20:9d:bc:c9:b5:4d:c9:fa:c1:f7:
e2:f2:8f:66:b1:59:ce:be:87:5a:b3:76:f5:16:4b:
0b:b1:4a:01:2d:f4:8b:cb:8f:e2:7a:f4:12:dc:a7:
9a:4b:4b:28:5f:1b:1d:ca:26:03:9a:b0:08:e1:1c:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:70:FC:05:7A:05:53:1D:75:EB:BF:B7:D8:A2:3E:74:F8:4A:34
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:23:b7:d1:f6:ce:a2:53:19:c9:c3:38:9d:05:bc:8f:2c:db:
1b:fb:4b:d3:92:72:87:81:f5:41:cc:30:67:d4:eb:1a:0c:94:
75:68:6c:42:2e:fd:c0:dd:f2:71:63:0d:4f:49:89:87:af:fa:
de:21:8e:e4:9a:e3:d5:3a:14:af:17:a2:8b:75:db:53:24:68:
66:5f:85:47:94:ac:6c:22:af:e8:53:ab:94:2f:f2:22:66:46:
42:aa:31:9b:8a:3d:84:c3:b9:af:64:1b:e7:d1:3e:86:8c:c9:
b7:a8:6e:fa:fa:ea:ed:d1:b6:e1:f5:b3:47:60:b9:a7:da:98:
43:c9:9a:99:63:c7:8a:c2:a6:6a:30:78:1b:65:be:bb:8e:8e:
b6:11:96:9f:c7:d5:0a:05:ed:07:1e:11:1c:f2:1e:1a:86:89:
8a:b8:ec:76:cc:47:26:11:d8:f7:de:3f:3b:a8:7d:8c:b7:c4:
b6:5a:ed:6f:85:88:97:e2:20:95:8f:2e:d4:36:c8:a6:5b:0e:
32:38:e5:6c:d3:76:36:88:57:84:31:c7:fb:c1:97:98:46:47:
0a:35:10:9d:27:c4:e3:3e:cd:04:a4:41:57:2b:7a:37:a7:90:
d4:38:8c:9f:a3:a6:ea:92:e4:54:2f:2c:73:23:a5:08:f9:c1:
8b:9d:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:07:08 2025 by rpki-client