Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: tSw6vV0VpHRE+rM+8jcq2qCJx0XUsAh9kmbDSRdnwkk=
Subject key identifier: 99:09:FE:5D:91:A4:21:41:6A:73:D1:BB:DF:C5:20:33:1B:7E:C6:BF
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 01958F9827AC34992371A86828597F6FBA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0E18
Signing time: Thu 13 Mar 2025 13:01:08 +0000
Manifest this update: Thu 13 Mar 2025 13:01:08 +0000
Manifest next update: Fri 14 Mar 2025 13:01:08 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: 5I9LHrffnhasY97Ut6rOBdOmbKkoep5zLQMODDVmc+U=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:27:ac:34:99:23:71:a8:68:28:59:7f:6f:ba:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Mar 13 13:01:08 2025 GMT
Not After : Mar 14 13:01:08 2025 GMT
Subject: CN=9909fe5d91a421416a73d1bbdfc520331b7ec6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:de:3e:3a:f9:cd:aa:a8:9f:fa:53:12:2b:
5d:22:26:43:ae:98:b7:29:c4:ad:af:ca:56:2f:e6:
7a:4a:98:5b:e4:c6:de:b3:d4:69:46:cb:07:23:76:
7d:56:ba:0d:3a:9b:57:20:3c:b2:96:e9:56:f1:15:
d0:d9:a4:72:9d:66:38:b4:88:db:ce:82:45:ee:e5:
5d:0a:38:0d:fa:6e:1d:5f:f0:45:ad:e5:ee:23:a8:
2c:76:5b:a3:5e:ed:a1:a1:1e:c5:8e:d9:05:fe:d2:
0f:db:bb:fb:a3:cb:ea:dc:ec:8d:aa:82:5d:35:fd:
32:93:8b:40:bb:9f:a2:12:8b:38:3f:11:ae:b6:43:
ee:79:ae:68:60:f3:b9:67:9b:0d:a1:b2:18:fb:b8:
c5:db:78:38:f0:40:a5:76:de:87:4f:7d:e5:18:b0:
52:2d:78:da:5e:cd:dc:dc:3a:a6:f4:f2:70:ff:2d:
cf:23:4f:c7:14:19:a1:29:e1:4a:21:35:3a:05:27:
5d:8d:33:c4:9c:a5:ca:7c:31:ef:77:0d:46:d7:6f:
00:38:09:1d:ad:0d:6f:28:bb:22:68:bc:2c:96:63:
e1:c2:3d:0c:d1:e6:eb:ad:06:61:eb:04:f6:cf:50:
f2:f5:56:8f:4d:40:31:bf:13:76:61:a2:93:ec:ff:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:FE:5D:91:A4:21:41:6A:73:D1:BB:DF:C5:20:33:1B:7E:C6:BF
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6b:72:2e:8d:5e:ec:e7:a4:44:61:41:01:3b:38:12:d6:4a:
18:4f:43:3f:d0:1b:f1:1f:8d:55:dc:07:a0:f8:2d:b4:4f:de:
37:7b:27:c9:5d:77:14:cb:c1:b2:61:f8:2d:24:20:3b:6a:17:
03:1b:dc:24:37:23:bd:65:c6:e5:54:71:a9:b6:8b:8c:54:70:
16:55:ef:d7:a0:43:47:69:f8:90:75:e5:5a:a4:84:65:2a:ec:
2c:db:9e:0f:86:66:8d:9b:40:bd:65:64:a9:31:11:50:8a:cc:
0c:39:b4:b2:09:de:ea:ba:cd:41:50:f7:ed:21:61:d2:e3:36:
cd:13:58:05:92:9b:ef:27:d4:67:58:3b:6a:cc:cb:68:35:81:
c2:ac:eb:89:a8:0f:f1:ff:0f:6c:58:48:3b:d6:e2:51:95:67:
5c:b5:88:fc:49:a0:dd:4e:f1:cb:a3:7a:71:25:ae:8b:7f:87:
f5:c5:f4:12:72:e0:c9:48:9f:de:fa:eb:f4:00:9d:a9:ef:67:
62:c8:85:f9:4e:83:7b:18:28:d5:b2:fa:18:7c:5b:be:6a:0f:
25:1e:da:d3:78:12:0d:8d:cf:de:db:94:97:0a:96:17:2b:9d:
9b:bc:9a:da:e0:0c:24:ee:a2:98:77:c7:cb:c3:ba:3c:20:60:
9e:fa:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:22 2025 by rpki-client