Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: mWedc4TNMP6WE9St0+YcKh5ITfaMEJIdpYZFVj++tOk=
Subject key identifier: C7:4C:DA:57:85:35:67:22:85:39:A0:26:67:37:D9:98:C7:C4:95:27
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 019650B64B6C6603E63F8D8F9E1E0427D52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0E7C
Signing time: Sun 20 Apr 2025 01:00:46 +0000
Manifest this update: Sun 20 Apr 2025 01:00:46 +0000
Manifest next update: Mon 21 Apr 2025 01:00:46 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: HdJFpEztO7vs5XTojtKKkRAKhcaBSL0GI/ckDYD529w=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:4b:6c:66:03:e6:3f:8d:8f:9e:1e:04:27:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Apr 20 01:00:46 2025 GMT
Not After : Apr 21 01:00:46 2025 GMT
Subject: CN=c74cda57853567228539a0266737d998c7c49527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:11:be:d5:b4:6d:06:ec:f3:da:c5:50:f3:
f1:07:d7:5e:bc:3d:14:cf:79:e1:ce:5c:ad:ed:7c:
b2:15:73:97:fa:dc:54:46:85:48:82:16:7e:ea:8f:
68:64:2c:e0:05:a6:95:d9:32:38:58:8e:a6:a4:c8:
72:64:c1:e0:24:5a:54:39:ee:44:f6:61:a5:98:00:
8e:3e:48:92:37:c8:12:c2:4a:d8:c6:a9:f5:9c:ef:
07:01:63:23:71:f3:83:42:95:57:f1:d6:14:f9:bc:
87:ab:73:2d:c3:0b:71:a4:b1:20:35:06:2e:4b:ce:
3a:38:13:11:f5:f3:69:a1:32:ed:99:c3:6c:db:77:
2c:1f:4b:e4:20:d8:83:c1:37:61:03:34:ee:69:b8:
a8:7e:9d:01:46:c9:10:67:20:29:2c:53:c7:3e:aa:
1c:59:8a:bf:14:a1:23:57:b0:a5:86:8f:11:d9:3d:
10:cf:bb:2a:89:a7:e7:48:bf:bf:8e:c2:a7:6a:e9:
e2:ce:5b:9a:29:e2:17:13:88:0c:9a:59:c7:b1:63:
a7:06:ed:8b:31:eb:72:4d:ce:32:eb:4f:b2:83:26:
55:70:4a:29:0e:4c:b0:c3:05:c0:30:85:2c:3e:6e:
4b:c7:b4:7b:40:71:9b:a8:db:47:f0:2d:8f:ce:41:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:DA:57:85:35:67:22:85:39:A0:26:67:37:D9:98:C7:C4:95:27
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:c5:aa:92:df:aa:8c:6c:5f:69:79:f1:30:ec:29:4d:9e:
9d:09:27:af:4b:8c:a2:31:49:cd:27:b5:aa:a6:c8:5b:2c:c3:
a7:4c:73:81:29:27:4f:19:55:4f:01:24:b6:84:1d:87:28:b6:
1f:cb:4d:e8:31:30:4e:e4:73:48:01:5e:cc:00:1e:90:e6:a7:
73:5b:d4:55:14:6d:cb:73:f8:db:cc:75:8f:9f:5c:dc:38:23:
c8:42:94:8d:a5:ea:8b:25:cf:e6:50:11:1e:e4:40:f0:2b:0c:
7a:59:75:22:df:be:cb:ea:70:1a:3e:25:63:24:13:73:d2:ec:
80:31:dd:16:97:4e:58:48:f4:47:4d:ab:55:47:88:58:26:11:
9f:d1:64:78:2c:05:ee:fe:8d:ab:e8:56:7e:c8:97:27:4f:84:
5d:c2:2d:fe:c3:1f:98:61:a2:6e:f8:c6:dc:58:a5:97:3f:a4:
f0:ff:0e:ef:18:dc:63:7e:6e:8b:f5:37:89:8e:cf:5e:3a:bb:
1f:45:5c:a4:b9:de:d8:e6:6c:e1:b1:bf:4e:27:58:a1:ab:ea:
5f:d1:a9:b7:7a:01:3d:13:3d:44:55:1c:17:60:de:42:de:a5:
fd:b7:0b:7f:ba:04:e7:bd:e1:73:88:84:ec:6e:ed:f3:e3:ee:
cb:6d:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:34 2025 by rpki-client