Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: S2086lFDtEuBGvhJGA3KDgQugbrtvo1rGOQ5nJ3etQo=
Subject key identifier: 19:06:90:A2:D5:26:1A:00:B5:9B:BD:33:D9:52:6E:E4:4C:07:CB:BD
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01967B69760AB9F259BFE069758B5BD68A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 152D
Signing time: Mon 28 Apr 2025 08:00:31 +0000
Manifest this update: Mon 28 Apr 2025 08:00:31 +0000
Manifest next update: Tue 29 Apr 2025 08:00:31 +0000
Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: K8UYo/wki4S1mDY40tO+SVrSqahg/+aBG8e06b5QaWk=)
3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:76:0a:b9:f2:59:bf:e0:69:75:8b:5b:d6:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Apr 28 08:00:31 2025 GMT
Not After : Apr 29 08:00:31 2025 GMT
Subject: CN=190690a2d5261a00b59bbd33d9526ee44c07cbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:7b:7f:92:a4:88:20:db:57:88:cd:01:51:
00:49:8d:de:02:78:31:d7:bb:60:1f:3c:bf:a3:52:
b5:f0:9e:26:8d:a8:fe:09:db:d9:5e:2a:8c:6f:77:
59:95:e4:93:c3:1b:41:e9:f1:af:b9:54:93:a6:f0:
3a:2e:80:74:df:f6:f4:cd:af:38:84:42:d2:3c:03:
d5:b9:a5:89:46:f1:1a:f5:0f:8a:b6:03:f5:00:fa:
57:3e:8a:6f:2c:51:55:12:bb:69:aa:8f:15:78:45:
a8:0e:bf:db:92:43:76:f4:1e:10:e6:d9:94:8a:2b:
30:a7:bc:ff:ec:29:d8:aa:7e:0c:e6:e0:bf:b1:8a:
1e:bd:66:e9:70:65:a7:55:a7:f1:55:ef:5f:8a:5a:
5c:17:e9:f1:b5:4d:68:a3:8c:13:de:75:41:b8:bf:
30:69:d5:36:02:9e:33:51:04:73:9d:68:a3:61:7d:
ae:2a:e3:b4:79:d2:6d:54:5a:90:0e:dc:8c:86:9d:
33:b1:de:72:ad:51:73:c8:37:9f:81:c3:9d:49:e5:
80:11:e1:23:f2:cb:64:e5:3b:78:28:ef:9c:a2:5c:
bc:d2:6f:2c:fc:4b:9c:8b:d8:18:d5:62:c0:df:b8:
ab:d4:a1:c1:2e:08:c9:95:20:52:68:2d:ac:50:8c:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:06:90:A2:D5:26:1A:00:B5:9B:BD:33:D9:52:6E:E4:4C:07:CB:BD
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:16:6c:70:f9:bc:10:5b:05:b9:fc:4d:89:ee:40:fe:ed:24:
fd:24:b8:c0:1c:21:51:d6:be:4e:47:dc:66:f3:4c:4c:1b:cc:
d5:ce:f3:ae:53:77:1f:7b:e2:5d:b7:3b:63:b5:8e:18:17:12:
44:67:a2:9c:4a:86:6f:40:b2:ab:fa:2a:2a:89:03:ec:e0:34:
ea:7f:f3:84:ce:bf:ab:21:6f:b7:e8:24:40:c3:d9:62:e3:5f:
ff:a2:ba:db:f5:86:af:bd:d3:3a:ab:9b:10:45:0b:2a:45:91:
5d:73:5c:4e:67:87:8d:fc:d5:84:6a:18:0e:6a:56:2a:d9:cc:
d8:3b:ab:7a:c6:15:38:06:ff:88:72:19:de:49:86:f9:a3:0f:
1c:b2:03:1c:59:98:2e:a0:dd:e7:c2:a0:8a:24:c3:93:d2:81:
95:f2:09:17:a1:01:ec:3d:0e:29:55:4b:57:fd:43:0b:5c:21:
8d:1f:11:31:60:06:27:e6:86:72:c8:50:ee:9a:7e:94:e7:1c:
a1:05:0e:7d:76:a9:6c:8a:1f:d8:bd:31:cd:42:10:25:72:19:
cf:96:3b:e4:7d:60:2a:ba:5e:2f:65:12:29:ac:3c:95:b2:01:
45:22:56:44:e2:da:11:61:02:a7:77:aa:f7:ce:42:e8:25:27:
1b:6b:83:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7aXYKufJZv+BpdYtb1oqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1
NGFiMWMwHhcNMjUwNDI4MDgwMDMxWhcNMjUwNDI5MDgwMDMxWjAzMTEwLwYDVQQD
EygxOTA2OTBhMmQ1MjYxYTAwYjU5YmJkMzNkOTUyNmVlNDRjMDdjYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM97f5KkiCDbV4jNAVEASY3eAngx
17tgHzy/o1K18J4mjaj+CdvZXiqMb3dZleSTwxtB6fGvuVSTpvA6LoB03/b0za84
hELSPAPVuaWJRvEa9Q+KtgP1APpXPopvLFFVErtpqo8VeEWoDr/bkkN29B4Q5tmU
iiswp7z/7CnYqn4M5uC/sYoevWbpcGWnVafxVe9filpcF+nxtU1oo4wT3nVBuL8w
adU2Ap4zUQRznWijYX2uKuO0edJtVFqQDtyMhp0zsd5yrVFzyDefgcOdSeWAEeEj
8stk5Tt4KO+coly80m8s/Euci9gY1WLA37ir1KHBLgjJlSBSaC2sUIx9JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkGkKLVJhoAtZu9M9lSbuRMB8u9MB8GA1UdIwQY
MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt
N2Q0YmIyMzgwNDg3LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3
LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRZscPm8
EFsFufxNie5A/u0k/SS4wBwhUda+TkfcZvNMTBvM1c7zrlN3H3viXbc7Y7WOGBcS
RGeinEqGb0Cyq/oqKokD7OA06n/zhM6/qyFvt+gkQMPZYuNf/6K62/WGr73TOqub
EEULKkWRXXNcTmeHjfzVhGoYDmpWKtnM2DuresYVOAb/iHIZ3kmG+aMPHLIDHFmY
LqDd58KgiiTDk9KBlfIJF6EB7D0OKVVLV/1DC1whjR8RMWAGJ+aGcshQ7pp+lOcc
oQUOfXapbIof2L0xzUIQJXIZz5Y75H1gKrpeL2USKaw8lbIBRSJWROLaEWECp3eq
985C6CUnG2uDoQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:19:16 2025 by rpki-client