Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: AhtNgi/fnbAYrL5BpVOVpYSzl1kp3eXuw9sWeUHzaEI=
Subject key identifier: E6:3C:0D:83:4D:01:6F:7A:80:63:BB:85:8D:FF:8A:DC:D5:40:05:5E
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 019659156024E7499E2A057AD7B47F24DD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 047F
Signing time: Mon 21 Apr 2025 16:01:35 +0000
Manifest this update: Mon 21 Apr 2025 16:01:35 +0000
Manifest next update: Tue 22 Apr 2025 16:01:35 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: ewXpBllgQK/E2T4U9LtyIbNv6t73cWUaHEsadFZNBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:60:24:e7:49:9e:2a:05:7a:d7:b4:7f:24:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Apr 21 16:01:35 2025 GMT
Not After : Apr 22 16:01:35 2025 GMT
Subject: CN=e63c0d834d016f7a8063bb858dff8adcd540055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:d5:0e:2e:52:8b:4c:4d:59:bb:26:49:f8:
f1:b5:bf:43:b7:4c:26:94:69:8e:01:f2:3b:79:42:
ee:d3:d3:f8:80:3b:56:b7:73:00:52:5c:9e:b1:df:
5b:1f:9f:db:d3:0c:14:fe:9c:ed:44:c1:91:c6:48:
95:86:ee:eb:d0:3d:4e:24:20:ae:79:58:fe:73:fc:
81:93:35:75:a9:bc:ad:af:48:b8:7a:06:6e:7d:4d:
51:c5:2f:ac:82:e8:6f:04:09:62:7e:45:cd:13:3f:
41:2f:93:bb:0e:0b:15:5a:50:cd:70:2d:51:3b:6e:
94:9a:f8:17:9d:dc:07:85:67:81:75:27:32:e3:77:
bf:c2:6a:ae:07:71:37:84:ba:96:17:6c:78:5d:fd:
b4:82:a0:0b:64:a3:e6:b4:15:53:26:a4:e9:ca:69:
b2:d6:e9:aa:d1:8c:9b:f7:cc:91:39:62:82:c8:ff:
f7:e7:7f:1b:63:b4:b7:98:65:89:c9:6d:23:e2:da:
2b:29:bc:56:d0:24:9e:d5:49:ab:1e:b8:aa:c1:7c:
0f:d7:c7:58:44:e5:62:80:0c:62:fe:0b:0a:1c:be:
1f:3f:f4:b4:64:8e:41:66:40:1e:1b:67:1d:cf:d4:
16:e1:5a:f6:75:ce:a3:31:2e:62:a0:23:a9:c4:a8:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:0D:83:4D:01:6F:7A:80:63:BB:85:8D:FF:8A:DC:D5:40:05:5E
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:19:1d:6a:ea:05:fb:02:7d:28:08:52:32:f7:11:37:6f:b3:
ab:1d:a3:bc:81:52:7c:f0:d8:83:f8:ec:3e:d1:d9:6d:ce:c2:
f3:71:3a:a8:d4:1e:30:1a:4b:0b:8d:b8:11:2b:0f:43:a0:e7:
05:67:de:d5:53:cc:47:01:df:2e:85:d5:87:1b:07:46:a5:b2:
32:58:c9:a0:c3:41:f3:8b:5b:b4:01:f8:50:cc:c0:d0:e9:9a:
d7:03:85:f7:2b:3b:40:ef:25:91:58:5c:cc:64:ea:1c:18:a8:
8f:42:6f:59:81:4d:79:43:3a:44:15:d1:28:c0:d8:19:ba:70:
bb:cb:d3:98:42:23:ee:ed:e9:db:ec:42:47:eb:08:58:d3:70:
4a:5c:9f:13:bd:8e:78:55:a5:48:51:4e:d5:3c:3c:45:e9:21:
4b:04:62:7d:d9:f6:0c:11:d9:3e:b2:19:8c:ca:e5:9f:c0:f5:
e7:6e:ae:1e:24:68:bc:11:7e:2b:f2:0d:16:9c:11:7a:38:0e:
c4:fb:ca:63:7c:46:fa:13:da:90:f1:ac:06:f6:a4:09:df:f1:
36:9d:6d:8d:ac:33:9a:89:e0:42:ad:a5:01:71:32:c6:6a:87:
6d:a5:21:2d:c7:eb:fb:a3:9e:7f:0d:2c:ef:e4:5f:f3:8a:b3:
7d:86:d9:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFWAk50meKgV617R/JN1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWM4ZThjYzA3NWMyZDA0MzEzYjkxMWQ5M2Q2MWZlMmE5
YWRlYTIwHhcNMjUwNDIxMTYwMTM1WhcNMjUwNDIyMTYwMTM1WjAzMTEwLwYDVQQD
EyhlNjNjMGQ4MzRkMDE2ZjdhODA2M2JiODU4ZGZmOGFkY2Q1NDAwNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvDVDi5Si0xNWbsmSfjxtb9Dt0wm
lGmOAfI7eULu09P4gDtWt3MAUlyesd9bH5/b0wwU/pztRMGRxkiVhu7r0D1OJCCu
eVj+c/yBkzV1qbytr0i4egZufU1RxS+sguhvBAlifkXNEz9BL5O7DgsVWlDNcC1R
O26UmvgXndwHhWeBdScy43e/wmquB3E3hLqWF2x4Xf20gqALZKPmtBVTJqTpymmy
1umq0Yyb98yROWKCyP/3538bY7S3mGWJyW0j4torKbxW0CSe1UmrHriqwXwP18dY
ROVigAxi/gsKHL4fP/S0ZI5BZkAeG2cdz9QW4Vr2dc6jMS5ioCOpxKj0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY8DYNNAW96gGO7hY3/itzVQAVeMB8GA1UdIwQY
MBaAFAMcjozAdcLQQxO5Edk9Yf4qmt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQt
NjI2OGNlZGFiZDg0LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQtNjI2OGNlZGFiZDg0
LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRkdauoF
+wJ9KAhSMvcRN2+zqx2jvIFSfPDYg/jsPtHZbc7C83E6qNQeMBpLC424ESsPQ6Dn
BWfe1VPMRwHfLoXVhxsHRqWyMljJoMNB84tbtAH4UMzA0Oma1wOF9ys7QO8lkVhc
zGTqHBioj0JvWYFNeUM6RBXRKMDYGbpwu8vTmEIj7u3p2+xCR+sIWNNwSlyfE72O
eFWlSFFO1Tw8RekhSwRifdn2DBHZPrIZjMrln8D1526uHiRovBF+K/INFpwRejgO
xPvKY3xG+hPakPGsBvakCd/xNp1tjawzmongQq2lAXEyxmqHbaUhLcfr+6Oefw0s
7+Rf84qzfYbZCw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:45 2025 by rpki-client