Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: Lv0aTf7Eq/Qx3cND+a6XnjJd23as+Z1j4VDXEJGwKP8=
Subject key identifier: 17:E1:C6:41:11:76:A6:6F:3B:29:2C:03:63:8A:6A:9A:89:21:CB:75
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019511353C136C8E220B9FB4E6EC88AE6901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 116D
Signing time: Mon 17 Feb 2025 00:00:56 +0000
Manifest this update: Mon 17 Feb 2025 00:00:56 +0000
Manifest next update: Tue 18 Feb 2025 00:00:56 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: Y7U2QE3QKr9oqkzOOtivpNSlwcjeAOekEpC8e+ze5ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:3c:13:6c:8e:22:0b:9f:b4:e6:ec:88:ae:69:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Feb 17 00:00:56 2025 GMT
Not After : Feb 18 00:00:56 2025 GMT
Subject: CN=17e1c6411176a66f3b292c03638a6a9a8921cb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:f2:4f:9d:34:89:1d:a7:d8:08:82:18:0d:
88:ed:d2:20:92:9e:b8:22:c9:f6:c1:8b:63:bc:a6:
f5:d4:00:83:7a:fe:93:66:bd:bb:fe:ca:62:f8:ec:
05:2a:ff:5a:72:d3:96:3b:59:39:31:74:90:d4:f2:
18:9f:d5:b9:5e:42:c4:e5:02:8c:30:4f:9f:30:c7:
4e:c8:24:a7:56:58:48:a9:a0:51:67:fa:8e:83:1c:
9c:5b:55:44:b9:00:21:63:d8:ca:20:dc:37:2a:45:
8a:46:7f:59:a3:dd:8e:1b:d0:55:b8:1b:a5:2a:4e:
a7:56:36:6e:f8:d2:05:56:fb:8f:80:9a:6a:13:64:
a8:21:7e:7f:c5:7d:86:6d:f2:d0:77:cc:6f:e0:61:
0d:77:31:18:59:9f:bc:cb:78:aa:bf:69:0d:77:5d:
7c:fb:d8:3d:c5:fe:c3:a3:fd:08:f0:66:d6:47:9f:
da:21:7a:19:f9:49:82:9f:c2:7b:91:6f:08:44:6f:
68:0b:4f:b8:aa:5a:c3:1a:f4:73:33:52:5e:b3:4a:
59:4c:8c:92:1b:23:74:3e:62:0b:6a:b5:96:56:81:
14:55:47:0b:19:85:b0:ad:99:e3:02:6c:5a:d3:8b:
52:06:d9:7e:bc:7d:52:f3:c1:68:8a:be:50:3d:12:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:C6:41:11:76:A6:6F:3B:29:2C:03:63:8A:6A:9A:89:21:CB:75
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:c4:c6:77:26:24:a9:6b:63:b5:b9:13:02:1e:55:0b:60:
b0:13:fa:76:72:30:a5:34:22:72:dd:d5:29:7a:b5:d2:6d:2e:
a1:9d:55:29:22:a0:60:38:28:0d:fe:24:cd:7d:4d:1c:96:2f:
bd:e3:c3:5f:4d:14:b1:a1:35:0f:b5:d9:4a:bf:45:4f:84:b4:
5c:cf:27:43:1e:14:ec:fc:02:54:5a:28:61:9d:a5:f3:e7:4b:
fe:44:90:6f:39:8f:5e:38:26:25:db:fd:9b:64:4a:4f:7a:40:
3c:a0:39:d2:96:6d:84:e9:43:71:08:60:2d:3e:22:2b:5a:14:
63:7a:a0:f5:09:1e:bc:08:0f:fa:5a:96:a9:a1:61:03:82:a9:
eb:9d:cf:a6:5d:bf:8d:b9:4a:84:2f:80:de:4a:12:dd:0e:e6:
0c:57:f0:0c:9e:dd:f0:07:c4:13:01:ad:de:f3:e6:30:d4:90:
2a:96:89:17:08:01:20:34:1e:96:24:e5:0f:60:25:d5:2b:7f:
21:1b:06:dc:83:f8:c5:90:4e:01:35:c7:64:22:41:ee:02:f3:
f7:58:a7:be:89:b5:2f:c8:0f:2a:62:b5:46:27:98:b3:be:1b:
06:05:20:9c:04:2f:25:00:d6:10:b3:d0:03:1e:5a:96:96:7c:
54:8c:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:34 2025 by rpki-client