Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: 7yETdZPjaXBn5PiMwCekUWTlv7WBzMH3geCUyzxmuXs=
Subject key identifier: 2F:57:1D:3D:5D:BB:8F:C1:FD:7F:E1:EF:60:73:A9:67:CB:56:26:35
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 01974930FA4D246ADA4E4130EEFFF07BF4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 10A8
Signing time: Sat 07 Jun 2025 07:00:35 +0000
Manifest this update: Sat 07 Jun 2025 07:00:35 +0000
Manifest next update: Sun 08 Jun 2025 07:00:35 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: uUwYpuW9UVjSUKxtxkF6fjCAD8IxnI1bw2cXwSAUo18=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:fa:4d:24:6a:da:4e:41:30:ee:ff:f0:7b:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Jun 7 07:00:35 2025 GMT
Not After : Jun 8 07:00:35 2025 GMT
Subject: CN=2f571d3d5dbb8fc1fd7fe1ef6073a967cb562635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:a1:9c:e2:11:cd:eb:35:88:84:6a:59:67:
42:3f:7e:70:37:1d:60:05:5d:0f:05:97:47:10:f0:
aa:a1:11:23:08:64:31:15:dc:44:26:48:49:b8:4f:
a4:54:47:22:77:f3:c3:11:19:d5:62:60:ee:9e:11:
70:fe:a5:12:34:81:4e:a2:64:6e:aa:dc:3b:91:f0:
8e:51:eb:a8:72:c6:2f:f6:54:77:78:d2:90:01:e6:
c9:56:64:23:fb:39:7f:22:af:cd:9e:d8:0d:b7:1c:
66:f4:85:3a:f7:83:b9:60:b8:5f:85:4b:01:09:3c:
75:dc:7e:61:1a:a0:56:67:f0:77:57:e3:8b:d6:e7:
06:3e:74:3a:cb:0e:b9:a1:ab:85:b5:56:e5:12:1c:
d7:28:f4:d1:76:0d:1b:bc:f5:59:78:8a:9f:1a:be:
20:08:a7:39:c8:49:9e:34:40:f7:0e:d8:d8:60:d1:
7f:32:5a:45:65:fc:5d:9a:03:df:c0:fb:bb:21:a6:
2a:7a:5e:15:44:93:9c:0b:20:ba:86:e0:88:e5:9d:
a2:0b:2e:23:c2:6b:6a:87:dd:f7:78:d6:87:c8:3e:
d6:ee:7a:72:93:21:80:2b:41:4e:56:d1:8a:13:e2:
51:51:76:f7:92:9c:a0:30:2b:46:a0:39:93:ab:b4:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:1D:3D:5D:BB:8F:C1:FD:7F:E1:EF:60:73:A9:67:CB:56:26:35
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:6f:37:47:ee:d4:a6:3d:3e:2d:ee:65:2b:4b:3e:4d:83:
cd:56:ac:ae:b3:8d:f1:54:75:20:7f:ea:60:2a:a8:a9:c9:7a:
c3:fb:b8:42:3e:f6:1c:6c:66:7d:22:20:12:8a:d0:d3:31:89:
b2:8f:f9:dc:9f:cb:34:58:ae:e9:76:be:4e:f6:35:b0:89:53:
da:ed:a8:28:e1:de:90:90:6a:53:72:13:95:d4:3d:90:6a:5b:
16:40:d9:6b:50:e3:1c:2b:35:a8:29:5b:f5:2f:fb:af:b4:fc:
2d:66:fc:50:af:df:ea:f1:6d:b6:24:48:57:55:b4:15:a4:e3:
bd:ee:41:e4:3f:1e:8f:ba:ef:4e:d0:00:04:8f:8d:0b:7e:d6:
72:7b:2f:1b:1e:ce:b7:8e:5c:34:29:dc:55:f6:51:46:42:bd:
5f:61:c5:52:d4:ce:60:95:19:46:7e:b9:71:92:9b:ef:1e:86:
61:d1:2c:65:ec:f8:18:61:4c:9f:9f:97:08:ce:3e:60:8f:9a:
1c:d6:2c:d1:82:31:0b:12:6a:bd:34:b1:f2:18:fc:08:87:3c:
00:20:25:f4:73:a9:89:54:50:aa:1a:37:fd:75:16:e9:fc:b7:
f6:fa:6f:5c:b6:8a:7b:ae:dc:eb:12:ed:f3:69:44:06:18:35:
a7:ab:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:39:58 2025 by rpki-client