Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: XurJh/7aUI1bpyv5M2er09N7a3hgO9nPtBmeMuv+JDQ=
Subject key identifier: 27:AD:AE:5C:F6:12:88:B5:FA:5A:43:BD:0E:7E:EF:23:8D:AA:CC:45
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019644446C9F1B62F7306E37361C42C09901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 120C
Signing time: Thu 17 Apr 2025 15:00:57 +0000
Manifest this update: Thu 17 Apr 2025 15:00:57 +0000
Manifest next update: Fri 18 Apr 2025 15:00:57 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: Iq7ByrV26hvI6KHr/pR/gpLwk4fxrjp6l7e0sZxupko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:6c:9f:1b:62:f7:30:6e:37:36:1c:42:c0:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Apr 17 15:00:57 2025 GMT
Not After : Apr 18 15:00:57 2025 GMT
Subject: CN=27adae5cf61288b5fa5a43bd0e7eef238daacc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:2a:94:bc:c1:20:bd:fc:c4:5d:89:82:e7:
ad:49:11:c3:d9:db:03:bf:ab:7c:aa:06:35:7a:3a:
fc:42:6d:a5:78:0b:cd:c2:d0:35:ed:28:7f:5e:20:
32:ae:11:66:63:4f:f8:22:ad:3b:16:92:15:20:01:
1c:ac:45:74:73:f7:e9:c8:aa:cd:67:fb:c5:9d:53:
b2:2c:22:6c:de:4f:68:df:af:dd:a1:d9:b3:15:2b:
45:d9:9d:e4:9f:5f:eb:a1:28:6d:02:55:42:47:a6:
55:85:31:0f:a4:1b:c2:df:af:92:f4:28:55:82:93:
e5:a1:84:00:e8:69:d7:f1:66:8e:54:ec:26:17:ea:
62:24:75:bb:fc:32:bb:84:fe:9b:d6:88:ef:f8:1a:
63:73:d7:79:cd:2e:b7:c8:2b:a6:f0:d1:1a:b7:ae:
ae:37:a6:7e:df:49:80:5f:54:f3:c6:62:99:27:b2:
38:2b:88:c8:ac:f9:25:b8:3a:20:e4:04:9d:47:20:
f4:d1:e6:ce:2d:47:f4:cc:6a:4b:cb:b3:01:84:29:
00:5f:26:93:7a:91:d5:ee:7e:ce:79:c8:1b:fc:78:
9c:e9:f4:92:8b:a7:e7:bc:21:4f:3f:69:ba:3e:f6:
f6:13:f3:c1:86:28:a4:36:56:69:c7:7d:10:68:fd:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:AE:5C:F6:12:88:B5:FA:5A:43:BD:0E:7E:EF:23:8D:AA:CC:45
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d2:d7:d1:02:59:01:6c:df:b5:cc:2a:80:0c:ae:d3:20:4a:
46:9e:87:fe:a3:da:64:e0:58:01:76:ac:e4:08:2e:51:59:ca:
89:ae:ff:69:65:ee:64:7c:51:6a:d9:16:71:9a:ab:cf:95:f8:
7c:91:38:64:ca:89:d5:e4:3f:8c:d9:ea:91:3c:10:0f:fb:24:
ac:66:de:9b:57:6e:b9:7a:f6:6e:39:85:50:f7:60:df:47:2f:
1b:37:29:97:6b:b1:29:5c:fb:d3:4f:5f:cb:8e:1e:b6:4d:61:
17:24:57:1d:cf:9c:4b:bb:87:67:5f:48:dd:32:f6:ac:4c:95:
20:a5:c5:f1:c7:be:b6:ae:93:25:4c:bd:5b:66:34:32:51:40:
a0:88:85:0e:7c:bb:b0:c1:81:63:e2:6c:a6:2d:81:21:91:8a:
c8:d0:37:64:f5:c1:e9:39:47:66:a6:a0:aa:c4:7b:df:3f:e8:
77:fd:f7:00:1d:aa:be:cc:65:e9:02:d1:c7:23:95:98:37:5e:
93:c0:01:e7:2b:83:5d:e9:7c:ff:79:08:e4:df:24:19:88:65:
d7:66:42:6b:b9:2f:57:35:de:ec:f4:36:db:94:bf:a5:f2:7c:
64:9c:84:a1:ea:70:4c:53:22:21:9d:62:f7:fe:49:e9:6f:d2:
7e:cc:64:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERGyfG2L3MG43NhxCwJkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3
MzMwMWYwHhcNMjUwNDE3MTUwMDU3WhcNMjUwNDE4MTUwMDU3WjAzMTEwLwYDVQQD
EygyN2FkYWU1Y2Y2MTI4OGI1ZmE1YTQzYmQwZTdlZWYyMzhkYWFjYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4AqlLzBIL38xF2JguetSRHD2dsD
v6t8qgY1ejr8Qm2leAvNwtA17Sh/XiAyrhFmY0/4Iq07FpIVIAEcrEV0c/fpyKrN
Z/vFnVOyLCJs3k9o36/dodmzFStF2Z3kn1/roShtAlVCR6ZVhTEPpBvC36+S9ChV
gpPloYQA6GnX8WaOVOwmF+piJHW7/DK7hP6b1ojv+Bpjc9d5zS63yCum8NEat66u
N6Z+30mAX1TzxmKZJ7I4K4jIrPkluDog5ASdRyD00ebOLUf0zGpLy7MBhCkAXyaT
epHV7n7Oecgb/Hic6fSSi6fnvCFPP2m6Pvb2E/PBhiikNlZpx30QaP3zdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCetrlz2Eoi1+lpDvQ5+7yONqsxFMB8GA1UdIwQY
MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt
ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4
LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9LX0QJZ
AWzftcwqgAyu0yBKRp6H/qPaZOBYAXas5AguUVnKia7/aWXuZHxRatkWcZqrz5X4
fJE4ZMqJ1eQ/jNnqkTwQD/skrGbem1duuXr2bjmFUPdg30cvGzcpl2uxKVz7009f
y44etk1hFyRXHc+cS7uHZ19I3TL2rEyVIKXF8ce+tq6TJUy9W2Y0MlFAoIiFDny7
sMGBY+Jspi2BIZGKyNA3ZPXB6TlHZqagqsR73z/od/33AB2qvsxl6QLRxyOVmDde
k8AB5yuDXel8/3kI5N8kGYhl12ZCa7kvVzXe7PQ225S/pfJ8ZJyEoepwTFMiIZ1i
9/5J6W/SfsxkQw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:23 2025 by rpki-client