Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: xHDUWNI83N7Y/vtsy41O2vZ8DBuYQFa0UWAo5zpX13E=
Subject key identifier: 7E:EA:6C:BF:8B:E1:38:35:D9:88:7A:44:7E:B6:AA:6A:F4:5C:84:DC
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 01969183FC59B0BDBB43C9A4625ADADD28E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0CFC
Signing time: Fri 02 May 2025 15:01:08 +0000
Manifest this update: Fri 02 May 2025 15:01:08 +0000
Manifest next update: Sat 03 May 2025 15:01:08 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: WH83YpuOzTiigcLNy1946bymbTT4DuNR27i+jZ86154=)
2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:fc:59:b0:bd:bb:43:c9:a4:62:5a:da:dd:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: May 2 15:01:08 2025 GMT
Not After : May 3 15:01:08 2025 GMT
Subject: CN=7eea6cbf8be13835d9887a447eb6aa6af45c84dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:7f:71:55:fc:02:8a:3f:7f:e4:aa:7e:a1:
d3:02:2d:6f:ed:7d:e7:b3:72:86:e2:f1:07:b3:9c:
f9:c3:68:ea:39:c3:73:40:f8:8e:dd:d1:d4:06:5b:
d6:64:d7:7c:54:9f:3d:5f:93:a7:16:41:be:a5:81:
45:2d:7f:f3:19:8e:d2:e7:78:d1:19:18:ba:d1:e7:
19:6f:80:49:c1:53:91:3a:c6:f1:35:59:65:4b:f5:
59:a0:d3:35:35:77:8d:f7:69:95:6a:ed:5f:f2:ad:
60:a1:2d:c6:4c:c4:f3:18:44:6e:23:ba:45:09:63:
8b:f5:d8:3b:f7:fa:13:4f:d0:2e:52:2b:b3:be:81:
be:94:4a:b3:12:96:d4:23:5d:b0:ff:1e:b2:47:78:
2b:f6:7a:d8:dc:56:12:bd:ea:ef:ba:1e:07:b7:4f:
f9:2a:ce:87:91:b2:9d:53:08:5f:3b:66:52:2a:36:
51:4c:64:18:ec:f8:60:91:a9:78:a4:b3:92:86:8e:
38:2f:31:5a:5e:e1:2e:fe:89:2e:07:09:a9:70:ba:
82:c4:b4:e4:cd:4e:9b:7f:a7:87:1c:20:66:f4:1e:
e4:02:0b:05:29:55:10:fe:06:2c:ae:65:6d:24:0a:
14:54:ca:5e:15:35:ff:a1:95:1c:35:c9:1d:72:dc:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:6C:BF:8B:E1:38:35:D9:88:7A:44:7E:B6:AA:6A:F4:5C:84:DC
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5c:83:ab:54:57:8c:b3:e8:f5:c6:f8:22:ba:1e:3c:21:45:
bc:f9:4d:4c:e3:ff:69:31:90:25:d3:4e:20:80:74:c1:12:b7:
be:ac:79:41:c4:ac:a2:94:03:d5:d5:72:e7:ae:ec:2f:a4:9d:
bf:ab:76:24:49:34:17:cb:7b:88:bb:ee:12:eb:65:1c:7b:e6:
f0:ba:ab:ea:2d:67:55:1a:29:d4:41:4d:37:e2:04:84:35:3d:
90:f1:94:9a:41:80:02:ce:4f:34:b4:47:c1:a0:99:d9:67:e6:
df:03:28:25:66:0f:be:77:d6:6d:e7:4a:d9:35:d4:bf:3d:0d:
f2:10:0a:69:a2:61:b5:ae:be:bc:b2:80:78:7f:e8:07:e5:58:
ca:28:a5:cd:74:71:4a:49:16:2f:d4:70:ec:e7:84:74:72:f4:
8a:eb:cf:8d:06:a9:01:78:90:22:95:24:37:35:4f:cb:9c:1d:
19:38:bf:fa:34:99:aa:d5:0b:f6:2a:a5:2b:ff:d9:5d:ea:9f:
70:e1:d7:10:20:70:38:58:39:94:8a:49:ae:f4:e2:93:f9:66:
b2:f3:89:6f:72:f9:cf:28:2f:f6:7e:ed:f3:1f:47:dc:6a:d8:
07:4e:1d:ae:b4:01:60:32:76:f9:6a:82:93:1f:db:6a:48:05:
ba:ba:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:54:30 2025 by rpki-client