Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: u8nW8Jv3YjaeWO/8SdZm43ZUZV2bwcxKpsdhR6QWjvU=
Subject key identifier: E0:BE:D5:28:2C:24:8A:E4:6F:63:44:86:76:6D:E2:51:15:2D:18:B9
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 01964F6C2E80059BDFEEC8DD83A82463F8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 19:00:11 +0000
Manifest this update: Sat 19 Apr 2025 19:00:11 +0000
Manifest next update: Sun 20 Apr 2025 19:00:11 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: Y8v9iH//Sbpr+evOSbYYiMD95SFnbHQ2kqUhI5DxkqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:2e:80:05:9b:df:ee:c8:dd:83:a8:24:63:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Apr 19 19:00:11 2025 GMT
Not After : Apr 20 19:00:11 2025 GMT
Subject: CN=e0bed5282c248ae46f634486766de251152d18b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:0f:7e:21:c8:4c:fd:c3:62:12:89:87:c5:
e0:5f:a5:54:04:9e:0a:61:04:c6:93:7f:f2:4d:d0:
28:a5:82:8e:bb:c8:7f:49:d5:1e:d5:8b:05:10:7e:
30:ef:74:bd:ef:e5:48:a4:4b:01:58:df:84:ca:ab:
3a:3a:cd:0d:6f:33:9a:41:e6:55:2a:ad:3c:f0:2f:
b0:36:fb:8f:73:28:fe:98:b7:fe:72:66:28:07:60:
ff:d3:4d:bf:8f:b4:44:9a:f3:8d:44:29:45:16:d4:
84:7f:f6:4c:ab:3e:19:7e:22:8e:2e:55:ba:7b:6a:
c4:4b:a2:8a:35:f9:72:8b:67:39:a6:4d:da:7c:dc:
ae:8a:68:47:d8:78:3d:f7:f0:1f:9c:c5:65:c9:eb:
0d:a6:b6:3d:77:02:76:5f:67:75:cf:9e:40:cb:5c:
32:20:6f:a4:68:82:ea:39:ab:49:04:20:28:27:f1:
eb:dc:1a:0a:dd:7a:b2:01:8f:5b:07:82:f6:8b:71:
66:bf:b9:de:d2:a0:53:2c:76:1a:dc:bc:a8:7c:19:
d7:dd:9a:c5:aa:c9:1f:c7:7f:61:1e:e0:37:f9:43:
3b:9c:76:1c:34:f8:37:19:5c:72:68:dd:49:1c:9e:
10:89:8c:c6:e1:cd:d2:18:c9:0a:be:e4:ab:98:24:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:D5:28:2C:24:8A:E4:6F:63:44:86:76:6D:E2:51:15:2D:18:B9
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:38:45:9d:da:7b:fc:f5:39:f1:24:3b:15:6b:b8:17:67:
e9:81:10:ee:35:52:13:bf:64:b6:36:42:a9:69:45:7b:ec:06:
b5:0d:cd:b0:44:a0:59:a6:fd:3f:30:07:7d:f0:69:a8:5e:ab:
99:6b:c8:d9:a0:88:51:78:42:e0:d6:db:08:16:df:10:a3:35:
fd:2b:c7:33:f7:83:97:28:96:e8:24:8f:69:64:08:53:17:8e:
ce:c2:94:09:a2:1f:26:48:82:01:14:48:57:26:3a:8e:62:6f:
3c:90:10:d0:09:6e:86:a8:00:91:37:09:5a:eb:93:32:bf:e3:
1b:6b:4f:7e:dd:18:c1:fc:37:b9:4d:9e:5f:d1:88:3e:2e:6c:
3c:fd:b0:f3:ff:e2:bb:5d:a0:5c:45:35:5e:c6:57:3a:0f:18:
ea:7e:d4:85:79:7e:ca:7b:d6:27:e3:e1:60:b3:f0:27:b6:3b:
ff:dc:9a:04:c7:5c:c8:d9:0e:4c:d1:b1:88:7f:28:99:69:3d:
e1:db:19:81:2f:45:a9:e5:0d:4c:47:62:aa:a5:28:90:15:ff:
7b:a2:3a:9e:b4:4c:fe:aa:49:d8:b7:e4:1f:75:75:9f:42:f9:
d9:46:4b:cb:2d:01:fb:2b:e2:03:f5:8d:66:70:4b:fb:c8:08:
ca:f6:6d:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbC6ABZvf7sjdg6gkY/j9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTZiYzExMGJhYTJhYzlkMTYyMGMyNTA3MTc1NzdkZTY0
YTkyNGIwHhcNMjUwNDE5MTkwMDExWhcNMjUwNDIwMTkwMDExWjAzMTEwLwYDVQQD
EyhlMGJlZDUyODJjMjQ4YWU0NmY2MzQ0ODY3NjZkZTI1MTE1MmQxOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zYPfiHITP3DYhKJh8XgX6VUBJ4K
YQTGk3/yTdAopYKOu8h/SdUe1YsFEH4w73S97+VIpEsBWN+Eyqs6Os0NbzOaQeZV
Kq088C+wNvuPcyj+mLf+cmYoB2D/002/j7REmvONRClFFtSEf/ZMqz4ZfiKOLlW6
e2rES6KKNflyi2c5pk3afNyuimhH2Hg99/AfnMVlyesNprY9dwJ2X2d1z55Ay1wy
IG+kaILqOatJBCAoJ/Hr3BoK3XqyAY9bB4L2i3Fmv7ne0qBTLHYa3LyofBnX3ZrF
qskfx39hHuA3+UM7nHYcNPg3GVxyaN1JHJ4QiYzG4c3SGMkKvuSrmCRJHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC+1SgsJIrkb2NEhnZt4lEVLRi5MB8GA1UdIwQY
MBaAFGsWvBELqirJ0WIMJQcXV33mSpJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2Yt
NTgzYzk4YTA2MzAxLzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2YtNTgzYzk4YTA2MzAx
LzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDk4RZ3a
e/z1OfEkOxVruBdn6YEQ7jVSE79ktjZCqWlFe+wGtQ3NsESgWab9PzAHffBpqF6r
mWvI2aCIUXhC4NbbCBbfEKM1/SvHM/eDlyiW6CSPaWQIUxeOzsKUCaIfJkiCARRI
VyY6jmJvPJAQ0AluhqgAkTcJWuuTMr/jG2tPft0Ywfw3uU2eX9GIPi5sPP2w8//i
u12gXEU1XsZXOg8Y6n7UhXl+ynvWJ+PhYLPwJ7Y7/9yaBMdcyNkOTNGxiH8omWk9
4dsZgS9FqeUNTEdiqqUokBX/e6I6nrRM/qpJ2LfkH3V1n0L52UZLyy0B+yviA/WN
ZnBL+8gIyvZtkg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:19:15 2025 by rpki-client