Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: cHPK3g2CpnX8zlgwTIaBOFzP1D/fmG7/sz/inR7t6b4=
Subject key identifier: 4F:ED:AF:0D:CB:F4:9E:78:4B:9C:21:A6:19:FA:9B:18:E3:11:E7:32
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 019653B77DCDA3B7BF91FC49D7D2A49CF675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 0156
Signing time: Sun 20 Apr 2025 15:00:56 +0000
Manifest this update: Sun 20 Apr 2025 15:00:56 +0000
Manifest next update: Mon 21 Apr 2025 15:00:56 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: EdueBNUXwh1+TzalpA+c4Oqt5F5cScx7x+ejn3Jr24M=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:7d:cd:a3:b7:bf:91:fc:49:d7:d2:a4:9c:f6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Apr 20 15:00:56 2025 GMT
Not After : Apr 21 15:00:56 2025 GMT
Subject: CN=4fedaf0dcbf49e784b9c21a619fa9b18e311e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:3a:05:6a:6c:5a:68:67:d5:66:d3:85:0e:
f3:4d:e2:44:1f:ad:a1:bc:ac:70:05:61:b7:3b:90:
f4:df:2d:8e:12:e7:2a:96:cb:eb:34:87:76:e0:99:
98:69:f0:1a:67:2a:33:57:95:27:ee:ea:4e:3c:6e:
be:d0:73:40:5b:7d:92:cc:26:1f:b1:69:85:93:f4:
a1:db:2b:af:fc:a7:16:6a:20:e7:67:08:c1:63:6d:
2f:de:97:d9:d1:58:5a:4d:5a:ed:d2:ef:62:eb:4b:
4e:34:98:87:72:13:c4:41:bf:42:1a:55:12:4f:06:
37:24:81:db:c5:50:d3:36:7b:9f:7b:a0:21:3c:df:
eb:c9:59:83:bb:b2:d0:2a:89:54:58:a5:12:1f:db:
22:80:4b:a3:cc:f4:88:2b:2e:2e:1e:b7:54:ee:ae:
71:9b:aa:b3:91:25:e0:5a:1a:f2:0a:96:88:fb:fe:
23:f5:62:06:2f:db:c2:56:0d:f3:45:ce:79:5e:97:
65:c0:cc:b8:82:28:92:7b:61:b6:be:ae:da:a0:eb:
3e:10:d7:a6:f3:d8:f3:b8:94:99:2b:60:94:5c:dd:
82:a5:fd:79:c5:60:10:b1:e0:33:9f:fa:07:07:47:
f5:6b:9e:79:45:f7:94:63:6e:b9:3b:57:b5:4c:f5:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:AF:0D:CB:F4:9E:78:4B:9C:21:A6:19:FA:9B:18:E3:11:E7:32
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dd:9c:09:c2:32:be:94:1f:cb:73:d2:28:fb:9f:dd:5a:d1:
b4:65:95:fb:64:cb:d8:4c:24:f1:95:3d:a9:ae:fe:d5:83:b4:
aa:b9:fe:ba:2d:6d:ca:45:88:34:47:68:16:ce:9f:1f:69:3f:
ef:8c:dc:03:30:c7:b0:bf:2e:ea:43:16:be:4b:d8:ec:5c:f4:
f2:2f:ab:79:74:7d:60:29:f8:e9:54:57:97:24:88:d6:ce:96:
11:5c:c8:d5:36:d0:44:83:b8:4c:f3:eb:34:2f:c2:b7:a5:2e:
2c:cf:91:3f:67:e6:32:2e:f7:b6:ec:b0:9c:8d:7b:5e:6f:5b:
b7:b8:e5:6d:3d:ff:6e:c2:1a:9e:07:4c:87:9e:dc:80:b3:ed:
34:2c:3a:0c:28:48:78:33:4c:83:71:9d:3c:99:05:20:da:fb:
50:64:16:c9:c8:88:cd:19:bf:42:9c:ba:5d:a8:25:ee:42:ea:
fd:24:eb:01:a2:5b:56:f0:bc:29:01:d2:85:d3:ac:c4:79:74:
a9:6c:0d:9c:3e:e5:f1:7c:24:0b:d6:c6:8c:2c:db:d5:67:f7:
3a:01:7f:ee:48:87:5e:a5:53:0b:bb:5f:e5:17:98:89:37:6b:
1e:6f:93:e1:8a:83:97:39:98:35:6d:15:fb:5b:23:83:8b:69:
0a:9c:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:56 2025 by rpki-client