Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: K+HdaBOF1ztNhAzho5cP8EEPVA2uVjhBm4xHxENtZTA=
Subject key identifier: 18:52:91:CD:E8:48:73:66:E1:F2:46:E7:33:C0:EA:6E:33:AC:33:EA
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 0196808FB1C436D86EBD90D8AF1F300DCB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0E15
Signing time: Tue 29 Apr 2025 08:00:22 +0000
Manifest this update: Tue 29 Apr 2025 08:00:22 +0000
Manifest next update: Wed 30 Apr 2025 08:00:22 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: Bu9ENE0kObQbz9kj7BElQnsw39QXBCzBLRYcRgX7T1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:b1:c4:36:d8:6e:bd:90:d8:af:1f:30:0d:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Apr 29 08:00:22 2025 GMT
Not After : Apr 30 08:00:22 2025 GMT
Subject: CN=185291cde8487366e1f246e733c0ea6e33ac33ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:f6:f9:90:fd:95:d6:98:c5:90:a4:e3:3a:
f9:c8:a1:6c:e3:7d:e0:c5:77:64:0e:48:63:25:82:
55:1a:a9:a7:98:7e:70:f7:3d:3e:25:fb:cd:d2:6a:
39:18:91:04:25:e7:da:d8:d5:ea:fb:9a:62:ec:48:
7a:f8:a3:19:95:0c:b0:b4:11:91:6b:db:19:46:50:
73:03:70:b8:d6:b8:fe:94:d1:aa:e2:6e:49:c5:66:
07:50:28:ac:29:42:26:32:3c:19:b6:39:39:41:b6:
19:3a:1f:9f:b5:65:b0:fb:6b:b8:6b:b6:47:b9:f5:
c0:4e:7a:71:bc:f9:ee:f7:fb:48:c1:78:cc:63:95:
8f:da:f7:e2:e6:37:ca:68:9d:1b:2e:9c:33:df:98:
ba:86:21:20:7f:8a:c2:23:ba:f5:c4:59:e3:f0:a1:
e8:3d:9a:fa:9e:5a:20:43:19:4a:56:f1:85:ca:b7:
44:3c:fc:70:29:aa:dc:93:65:08:f4:c6:9f:69:58:
c3:60:86:2b:f8:30:e4:e5:42:c5:37:1d:bd:68:8c:
ef:f7:28:23:1b:1e:fe:9e:0a:8f:98:74:97:8c:db:
99:91:6d:ba:b7:ec:90:36:e9:11:8b:04:ae:f5:87:
ce:c1:73:3a:6f:04:5a:8c:57:0b:d5:1e:f6:b4:75:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:91:CD:E8:48:73:66:E1:F2:46:E7:33:C0:EA:6E:33:AC:33:EA
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:30:d4:ed:56:64:9d:12:f1:a4:dd:fa:01:9e:0b:f1:61:
7e:a4:2b:59:6f:36:19:3e:d3:ff:5c:0e:84:a7:cb:b8:70:a3:
b0:ad:5a:49:96:c6:36:d0:69:47:a7:37:e8:19:cb:76:02:60:
0e:80:f8:d1:de:08:01:c6:fc:97:91:a4:e1:e1:7c:51:06:a2:
db:12:78:07:d8:81:05:d1:78:50:aa:76:92:ea:a5:a9:52:24:
3f:2b:be:f1:c9:d3:ae:ce:7b:ef:f1:35:83:ef:48:4d:54:5a:
bc:a8:cc:5a:4e:97:32:28:1c:85:3d:21:df:7e:c6:0e:64:cf:
1a:48:d9:c8:20:e8:d5:6c:68:3c:22:0f:88:96:14:57:c6:a5:
c2:fb:4e:85:9b:1c:cc:3f:2a:4b:9e:8e:1f:44:e8:16:5e:14:
ec:bb:08:8f:16:f0:b7:da:62:06:dd:d5:67:06:cb:fa:6f:1d:
c7:cb:1e:57:3b:aa:96:41:d2:2e:f4:f7:aa:bd:80:94:79:e0:
d9:ae:36:29:1a:14:e7:6f:f6:ff:4e:b1:b6:10:10:3e:99:1e:
26:1b:53:83:6e:24:31:f9:6c:b5:4a:65:2a:7b:e8:f1:c5:02:
cb:ea:cb:d5:f8:48:7a:94:5c:dc:17:89:68:33:b7:d7:0e:ad:
1a:2f:43:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAj7HENthuvZDYrx8wDcuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4
YThiZWMwHhcNMjUwNDI5MDgwMDIyWhcNMjUwNDMwMDgwMDIyWjAzMTEwLwYDVQQD
EygxODUyOTFjZGU4NDg3MzY2ZTFmMjQ2ZTczM2MwZWE2ZTMzYWMzM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwH2+ZD9ldaYxZCk4zr5yKFs433g
xXdkDkhjJYJVGqmnmH5w9z0+JfvN0mo5GJEEJefa2NXq+5pi7Eh6+KMZlQywtBGR
a9sZRlBzA3C41rj+lNGq4m5JxWYHUCisKUImMjwZtjk5QbYZOh+ftWWw+2u4a7ZH
ufXATnpxvPnu9/tIwXjMY5WP2vfi5jfKaJ0bLpwz35i6hiEgf4rCI7r1xFnj8KHo
PZr6nlogQxlKVvGFyrdEPPxwKarck2UI9MafaVjDYIYr+DDk5ULFNx29aIzv9ygj
Gx7+ngqPmHSXjNuZkW26t+yQNukRiwSu9YfOwXM6bwRajFcL1R72tHX6cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhSkc3oSHNm4fJG5zPA6m4zrDPqMB8GA1UdIwQY
MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt
MzZkYzI4MDBmZGVkLzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk
LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRYw1O1W
ZJ0S8aTd+gGeC/FhfqQrWW82GT7T/1wOhKfLuHCjsK1aSZbGNtBpR6c36BnLdgJg
DoD40d4IAcb8l5Gk4eF8UQai2xJ4B9iBBdF4UKp2kuqlqVIkPyu+8cnTrs577/E1
g+9ITVRavKjMWk6XMigchT0h337GDmTPGkjZyCDo1WxoPCIPiJYUV8alwvtOhZsc
zD8qS56OH0ToFl4U7LsIjxbwt9piBt3VZwbL+m8dx8seVzuqlkHSLvT3qr2AlHng
2a42KRoU52/2/06xthAQPpkeJhtTg24kMflstUplKnvo8cUCy+rL1fhIepRc3BeJ
aDO31w6tGi9Dyw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:25 2025 by rpki-client