Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: rCIjs9KZ9gPtT6c3KvDh6lRQizC/IMMj6bVm/pnSIls=
Subject key identifier: 98:32:63:EF:B1:44:03:DA:F1:8C:34:B7:62:1B:BE:5D:36:29:7A:0D
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01974C3245BCC4A2C5E1BBC5BEB04059C5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: qPjv+x9r8dmz0FI33J7N8nWznwJw7sKExKFl7CJDqzE=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:45:bc:c4:a2:c5:e1:bb:c5:be:b0:40:59:c5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=983263efb14403daf18c34b7621bbe5d36297a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:63:2d:4f:42:82:1b:ec:c9:b3:eb:51:6c:
21:25:3b:11:e9:46:aa:24:f3:30:b8:84:41:20:cf:
23:64:94:74:79:66:2a:f7:32:5d:aa:2f:a9:c0:22:
b7:22:87:6b:ad:9a:2e:ae:60:a8:5b:9e:e9:59:83:
9c:66:88:70:4a:05:f6:e6:fb:75:8d:a9:58:35:5f:
a9:c1:84:37:2a:33:db:60:97:5d:2a:04:d2:68:03:
7d:a6:d8:04:60:d1:08:8a:67:18:d1:cb:b9:a5:41:
52:89:04:4d:29:39:60:3a:54:28:6a:02:a9:97:32:
3e:7f:8d:d4:5e:4b:bc:ff:f2:3d:f6:10:eb:ad:50:
64:58:d6:d5:e8:4b:81:55:fe:ab:63:1c:46:4d:97:
9a:86:06:05:02:dc:c6:52:b5:25:a1:dc:47:9a:f2:
20:6a:47:0f:6d:0a:e7:f4:ff:d1:57:4b:40:f7:ed:
29:62:47:03:a9:39:e6:a6:63:b5:12:df:85:48:dd:
dd:ab:65:65:f9:52:05:8b:89:e8:00:1f:53:17:d6:
fb:0d:cc:55:6d:32:c3:96:42:86:e4:96:87:ce:11:
3a:a8:98:66:f8:4c:e0:0c:2c:b9:ba:4a:32:84:68:
88:16:a7:f8:fd:7e:e3:eb:e6:76:8a:fe:b9:1e:7d:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:63:EF:B1:44:03:DA:F1:8C:34:B7:62:1B:BE:5D:36:29:7A:0D
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:a0:83:06:76:f1:7c:ac:e0:9d:c9:98:3c:96:3e:e7:36:
fe:8b:5e:cc:ad:50:77:69:7d:7c:2f:9b:ee:fd:4c:d6:dc:6d:
42:22:03:31:ae:2d:fa:c2:10:9c:24:72:79:86:b9:33:e4:53:
67:32:2d:d8:82:05:d7:bb:f6:ee:0f:64:f0:0e:06:7c:d3:66:
a9:d7:54:c5:f1:80:d0:57:65:a0:4e:fd:36:23:40:01:13:ae:
5b:28:10:a4:b6:d0:02:5e:36:c8:c5:b4:83:6d:12:d2:68:3e:
29:6a:cb:31:7a:a3:12:22:8e:ca:8c:14:40:f6:06:09:7a:48:
25:69:3b:cf:f8:1f:f9:9c:5a:56:64:99:26:b7:d9:fd:72:ac:
32:49:10:86:c6:f9:20:fb:28:79:26:f1:dd:f3:24:5d:8d:72:
3e:0d:8e:6f:b6:d6:3f:5d:03:83:66:a1:e7:02:be:50:da:a2:
8b:98:0d:b4:57:f3:cb:00:6c:60:22:42:a7:31:45:c1:27:00:
78:27:bc:d5:ba:6b:e7:16:06:70:63:5f:c4:5e:2c:fa:31:2c:
12:b0:95:9f:96:b8:71:ee:95:16:35:f5:a0:c4:15:7b:0b:13:
63:da:28:2f:de:65:a4:6d:4d:13:32:c8:2f:34:55:fa:94:0b:
03:e7:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:13 2025 by rpki-client