Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: Nqh/bT3/+e9Ac/ZIhdGhT+e1j4tFUOCIDWKC6JiyOL8=
Subject key identifier: 78:D3:DB:EE:67:2B:71:C3:5A:DF:4F:36:9B:0B:68:7B:E3:0C:C1:E9
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0194C3F578533FB1AFE05D6EFE7768F77713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 87
Signing time: Sun 02 Feb 2025 00:00:31 +0000
Manifest this update: Sun 02 Feb 2025 00:00:31 +0000
Manifest next update: Mon 03 Feb 2025 00:00:31 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: J5kKfo0doYhPai7sTjDRCeGpovfl3+93VvqUGeDmfu8=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:78:53:3f:b1:af:e0:5d:6e:fe:77:68:f7:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Feb 2 00:00:31 2025 GMT
Not After : Feb 3 00:00:31 2025 GMT
Subject: CN=78d3dbee672b71c35adf4f369b0b687be30cc1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:ee:a4:54:6b:1d:8f:df:20:ed:8c:a1:8b:
72:c7:a5:7b:af:d2:f1:2b:97:ab:b8:f4:e3:92:56:
3b:c4:9a:bd:3d:c9:cf:2d:14:da:b5:ad:10:ec:5d:
69:8f:0e:2d:8c:db:35:34:c9:99:dc:75:b7:91:99:
f7:71:ed:70:3e:66:a5:e0:e3:ca:5a:c5:05:6a:99:
e2:e9:86:86:1c:cb:c1:c7:e0:a8:3e:92:23:96:25:
97:b1:6e:f1:09:34:eb:d2:9f:8d:e5:3a:6f:94:57:
7d:2c:3b:22:95:05:56:37:ca:d3:04:05:e5:da:5c:
0d:64:74:2c:88:b4:fb:bf:ad:23:49:47:2b:d4:2c:
c4:7e:b4:da:59:d1:ec:32:8b:e6:48:ef:da:bc:29:
c0:46:21:83:58:2f:2c:17:8a:2f:d2:18:4a:22:1b:
98:a2:62:3b:ca:bf:e5:b5:42:aa:1b:28:94:78:db:
0d:c7:58:4c:f0:d1:4f:04:ea:7a:d8:81:70:66:9b:
5b:87:82:dc:11:b9:d8:18:6c:6a:72:f8:b0:e1:2f:
b5:c9:c1:cf:08:5d:9b:fa:f5:c6:fb:3d:df:6f:6b:
da:c3:95:41:1e:90:4c:1c:3f:41:29:5a:3d:a6:c6:
a1:f4:4d:ef:eb:ac:31:9b:c8:99:d5:e4:a6:73:b7:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:DB:EE:67:2B:71:C3:5A:DF:4F:36:9B:0B:68:7B:E3:0C:C1:E9
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:05:f9:df:ed:82:10:79:f7:8f:6f:02:cf:a2:6d:8e:a1:4d:
f5:77:ed:af:40:05:04:49:82:78:dc:cb:c3:d0:cc:39:94:12:
ee:a2:c4:ae:27:db:bf:68:9c:b0:f8:92:43:c4:94:2c:d8:ee:
24:ee:c6:e3:cc:b0:b9:30:da:8b:0a:d5:f9:2c:c0:11:ab:08:
d0:3d:80:c9:b3:9c:47:f5:bb:d6:60:c6:59:e4:6a:f5:d5:a6:
0e:47:68:09:6d:d4:a4:04:cf:c9:ae:a9:b5:f0:97:a9:03:57:
3b:6e:39:04:05:05:8e:da:96:af:6d:ec:ea:07:31:36:44:36:
d6:3a:4b:f6:a6:1a:41:8e:86:a2:26:23:4d:0e:84:ac:7f:44:
19:be:89:47:9e:c6:87:8b:c0:99:01:a3:68:61:76:28:f1:0e:
6c:66:0e:9e:d1:77:23:94:e7:6b:40:fb:d1:ba:94:7a:e8:0e:
d6:be:2a:db:d5:af:b8:4c:2f:cd:43:d3:52:c1:35:5d:98:06:
fd:bb:83:47:4a:f0:ab:e8:ba:fa:2f:e9:cb:b4:8b:21:c6:fe:
23:65:ae:c8:09:60:f3:de:d3:b8:ec:25:3f:e4:9b:a7:23:b3:
38:b5:67:de:bc:c1:32:60:12:90:e3:d2:e5:c7:1c:c0:1e:e3:
32:05:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:00 2025 by rpki-client