Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: 5uRnrk09m+cpNq0cMLV0MkiCBMpkq153PDthevnFlQk=
Subject key identifier: 47:99:5D:37:89:C1:75:B3:3E:06:1F:AD:11:2A:D8:EC:C7:AC:09:FF
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 019675676FA5A932FDDB46880E4859C211B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0E8F
Signing time: Sun 27 Apr 2025 04:00:35 +0000
Manifest this update: Sun 27 Apr 2025 04:00:35 +0000
Manifest next update: Mon 28 Apr 2025 04:00:35 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: J5gxsnWDI3kVL1zTneV+bEOijwAdI9xt/mjmUF94ioE=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:6f:a5:a9:32:fd:db:46:88:0e:48:59:c2:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Apr 27 04:00:35 2025 GMT
Not After : Apr 28 04:00:35 2025 GMT
Subject: CN=47995d3789c175b33e061fad112ad8ecc7ac09ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:64:84:7f:19:e1:9b:b9:d7:06:f7:2a:b7:
71:6a:85:3d:c3:68:87:2c:3e:ee:c3:3d:00:57:ed:
d4:5f:8f:5d:91:08:a2:db:15:97:3f:4d:ef:7c:e0:
26:89:a2:d4:ad:5f:0e:34:dd:69:d9:6b:89:84:6b:
4f:58:42:27:5d:96:67:0a:73:86:2e:0b:7c:04:4d:
17:f5:1d:ed:7e:2b:3f:1c:04:7f:46:7e:01:54:4f:
d6:d8:ae:01:04:5f:30:74:b6:1a:4d:96:9f:cf:e8:
0f:16:b9:96:0f:9c:94:1c:fc:fb:90:2b:69:f7:19:
15:e8:6c:c5:ee:97:9f:8c:a6:b5:1e:55:ba:21:76:
1e:d7:ae:01:cd:c9:00:f4:d7:c7:f5:6c:85:82:47:
99:cf:f3:ab:f4:29:6f:55:a8:1d:3e:66:3a:ee:a6:
dc:98:ab:4a:01:a4:5b:4b:83:1e:a0:0e:72:8c:75:
6b:cd:7d:fd:82:24:86:67:34:d8:bc:ff:cf:68:83:
d5:59:a2:7c:ca:e4:8c:4b:00:df:7c:b5:71:5d:93:
5d:6c:92:9e:c8:5e:11:df:6a:7f:00:83:e8:b6:f4:
32:76:bd:d4:d6:88:b5:3f:d7:ee:7a:0f:a5:18:87:
f3:d2:ad:17:05:68:08:a9:9f:49:a4:b5:6d:45:77:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:5D:37:89:C1:75:B3:3E:06:1F:AD:11:2A:D8:EC:C7:AC:09:FF
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cc:a5:1f:91:fb:4c:14:71:dd:f4:16:16:4d:f7:ca:9b:db:
50:cd:67:58:a2:41:ca:05:cc:2b:54:81:90:cf:a4:50:52:a9:
9b:24:8a:ab:dd:44:3e:b3:cc:36:75:1c:f5:95:d2:dc:db:31:
34:07:aa:ba:ce:fe:ac:a9:53:c0:5d:bc:07:23:40:1a:cb:a6:
df:78:80:63:5a:1b:81:03:75:56:ec:82:27:9c:c7:b6:fe:29:
f2:d0:00:ee:41:46:80:ab:c0:99:ee:da:0f:c9:c2:c0:88:f4:
13:46:ed:74:52:00:bc:dc:ee:7f:7c:39:cb:7a:10:bb:d1:9e:
b8:57:50:63:a4:1c:bd:df:18:4c:3f:c4:ef:7c:34:3c:03:fa:
d0:9f:a4:bd:43:f2:cf:c9:e7:e9:71:28:b1:a2:b5:1c:e4:f0:
14:a6:eb:18:b7:7d:7f:e4:f4:ed:3b:67:82:1e:b9:1f:38:84:
ae:9d:10:e6:f9:cc:d2:ef:4c:a0:e8:63:63:26:79:b4:d8:2f:
d6:81:a6:10:e4:16:aa:8b:42:bf:6f:cc:19:ac:9a:c7:8f:2c:
38:d2:93:85:60:d3:4d:29:9c:0c:ff:21:e4:77:3c:e1:54:24:
c5:42:a4:4e:75:16:22:80:51:4f:a7:8b:31:ee:53:a4:f7:8f:
1d:79:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:52 2025 by rpki-client