Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: 3RWUJJ/VmzUyCtFf8ypIRmJ5797zRYIItt+utjIjzYs=
Subject key identifier: E9:F3:8F:0C:D4:27:E6:7E:06:D3:6A:67:6C:84:1A:10:69:1B:96:AA
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019676B12441957EB2FC46F4709CB195A6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 103B
Signing time: Sun 27 Apr 2025 10:00:42 +0000
Manifest this update: Sun 27 Apr 2025 10:00:42 +0000
Manifest next update: Mon 28 Apr 2025 10:00:42 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: fEXhBc1Spzx1tZhcpUE3tws3w/jp0BfrkkMAmY4qTf0=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:24:41:95:7e:b2:fc:46:f4:70:9c:b1:95:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Apr 27 10:00:42 2025 GMT
Not After : Apr 28 10:00:42 2025 GMT
Subject: CN=e9f38f0cd427e67e06d36a676c841a10691b96aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:f9:3e:d6:0c:0d:8a:14:9c:44:fa:8b:a6:
86:83:85:f7:0f:07:c6:89:13:df:e2:7c:1b:9f:09:
0d:84:cc:37:b4:59:54:22:c4:35:41:25:a2:e4:a0:
e5:dc:68:c0:fd:52:80:1b:3d:d4:f2:e7:28:33:24:
d6:3f:da:49:66:46:75:1d:8d:d2:c9:8a:1f:f4:a1:
4f:93:f4:07:41:6f:82:fd:2e:8e:6d:1b:1b:1d:bd:
5a:4a:6b:fc:60:a2:1e:e8:ab:f4:77:01:37:ef:ef:
41:e1:f4:65:53:96:d4:d4:77:f3:28:7f:c5:16:7a:
bf:1f:c8:f3:6a:ee:29:b8:bd:00:cc:a1:d6:1b:f3:
b0:6f:58:29:d2:9a:86:4f:6d:36:1b:10:65:16:8d:
ae:54:ba:27:1f:48:6a:c5:d3:46:81:f3:6e:df:1b:
99:23:df:1b:7c:0e:4d:3f:3d:eb:fb:d0:47:ad:a5:
3d:ce:59:a5:44:c1:ee:1b:36:66:08:9b:31:1f:be:
2c:d4:26:c3:d6:b6:50:ee:32:97:2f:e1:45:7c:72:
32:17:10:ed:ff:83:76:d9:aa:3c:28:ff:f7:93:c1:
45:b7:45:0f:d1:35:4d:3c:58:96:6b:a1:71:3a:26:
3a:03:fe:09:de:a1:c7:c9:fe:ef:2c:2b:2b:2f:da:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:8F:0C:D4:27:E6:7E:06:D3:6A:67:6C:84:1A:10:69:1B:96:AA
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:58:69:38:f8:4d:bd:11:01:bd:44:44:e8:4c:79:9a:bf:c9:
34:e9:f2:d4:63:de:fe:79:ed:fe:6f:3c:cd:72:bb:60:88:10:
0b:fe:65:a7:d1:db:a1:f2:85:47:6f:8a:b0:a2:79:82:7e:ca:
6d:a2:25:45:70:17:7a:52:c6:b4:c2:5c:a5:fb:eb:54:98:17:
6f:42:05:ae:e5:38:5c:2b:e3:d4:7b:4a:c5:92:28:71:df:4e:
0c:3f:d3:83:ff:c5:81:aa:99:66:c4:76:10:e7:fd:56:bb:0b:
04:0d:05:f9:ce:8b:4f:23:b3:9b:5f:c3:f7:cb:c7:1f:60:a7:
25:9d:d9:3d:a5:27:c5:94:6c:04:7a:b0:1b:6d:18:95:df:bc:
60:dd:68:c7:cf:6a:27:51:a6:59:90:04:71:c0:94:06:3a:c7:
75:63:3a:79:44:e2:25:f2:6f:3f:16:1c:42:ce:ae:b4:22:cc:
98:cc:91:01:a9:23:11:b6:72:36:14:48:bf:95:01:52:bd:64:
25:67:19:b6:06:98:a7:e5:2d:fe:f4:5f:a9:f0:6a:0a:a1:49:
28:a8:24:3f:e3:52:d8:68:c2:b7:73:75:de:66:85:34:4f:02:
b3:1d:49:c5:09:be:46:5c:3e:3d:83:66:a1:7c:05:2d:5d:36:
b3:0f:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:52:04 2025 by rpki-client