Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: 8IPoFbIuHWCFIjDzX5AQzf7CFXmA4a6nojzTVJQ5k5U=
Subject key identifier: F4:B7:D4:5F:29:10:15:46:5D:6C:24:57:73:52:BC:1C:DA:CA:96:EE
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01976D06C1E8FEF1E08158A8C2C4B3297A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 06:00:48 +0000
Manifest this update: Sat 14 Jun 2025 06:00:48 +0000
Manifest next update: Sun 15 Jun 2025 06:00:48 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: s3hem0mIokLrqgjRE2iAE+6kUUH95BAOJ+fc4GFZnHw=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:c1:e8:fe:f1:e0:81:58:a8:c2:c4:b3:29:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Jun 14 06:00:48 2025 GMT
Not After : Jun 15 06:00:48 2025 GMT
Subject: CN=f4b7d45f291015465d6c24577352bc1cdaca96ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:d2:7d:9c:63:f9:7a:42:2d:b3:8f:af:60:
27:d4:67:73:05:ef:30:e1:84:15:60:f7:80:d8:d3:
5f:e9:65:f8:e9:2b:35:6c:1d:68:dd:fd:80:bb:2a:
d0:56:38:f7:4b:1d:40:c6:ab:d6:23:9e:28:e5:d2:
7c:00:7f:bf:d4:40:5f:2d:cd:4f:0f:fe:54:73:85:
b5:26:f2:aa:f2:b2:63:f2:1e:a1:c1:22:fb:4c:ca:
b7:e4:e6:0d:ee:c1:f4:85:0e:4e:31:21:31:08:d9:
ad:f8:18:90:01:cd:58:a4:47:9b:fc:a0:22:61:83:
55:52:5a:85:b7:af:5c:08:2e:e0:c8:f9:c3:db:79:
a9:1a:9e:8a:e5:77:5d:91:9b:31:df:3b:5f:16:98:
10:9a:33:20:e3:11:ce:67:bf:74:c7:48:4b:9c:7d:
e5:fd:54:08:b1:51:61:7e:46:a6:72:23:f3:bb:4a:
65:cf:c2:24:91:78:42:40:43:cb:5e:5b:2b:75:b3:
98:6c:ee:69:26:7d:19:19:5d:a0:34:7c:3e:99:03:
d0:a2:66:b7:66:7d:60:fa:7b:1f:ed:a6:52:69:4a:
ad:c5:1d:ae:1a:f6:49:6e:b0:e6:57:ff:86:f4:aa:
b0:66:9b:ac:49:42:93:0a:9f:ff:c0:de:0f:3b:91:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B7:D4:5F:29:10:15:46:5D:6C:24:57:73:52:BC:1C:DA:CA:96:EE
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3d:34:e2:0c:68:8b:df:8c:93:af:4d:3a:a3:ef:4b:ba:cb:
b8:1b:da:b5:13:b2:43:b2:20:48:df:f2:36:6d:b7:53:51:4e:
03:aa:77:87:65:3f:27:36:1d:29:f5:39:4e:70:e5:9b:8c:de:
cd:51:d3:ec:6d:2d:2d:86:c6:ad:89:72:7b:89:63:ae:46:67:
c7:06:b5:57:1f:de:98:1f:67:02:98:75:5c:a2:17:73:e4:35:
9a:a6:31:13:54:48:53:a3:fc:56:5c:f9:4e:f8:d1:c2:4f:b5:
0a:6b:b2:5c:a6:c2:e1:9b:90:74:4b:c0:65:61:d6:08:37:a4:
85:d2:5a:a1:61:3c:34:9e:4a:5e:35:b3:e9:08:41:65:49:55:
06:48:8b:ea:10:2c:7d:dc:f5:ac:d9:c3:1b:7d:b5:c8:ee:61:
9c:00:f0:8d:6f:d8:70:5d:98:56:a4:99:b6:68:e7:c2:31:e4:
0d:13:9c:e1:07:8c:cb:45:de:4f:35:17:93:7a:f8:fb:f9:ef:
aa:6f:78:28:a4:66:c7:6d:fd:5b:e0:58:2c:d3:b7:d0:9e:65:
0f:fc:a3:e2:64:88:75:d4:16:d1:33:e8:68:12:44:47:98:e4:
51:dd:70:c1:87:31:f4:bf:3f:d7:9e:86:02:3d:38:ce:fb:47:
c2:9d:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:27 2025 by rpki-client