Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: KFoKiUSCdwIkqINHRFK7U2zkW20XIs2n/prysnR+XFU=
Subject key identifier: 78:AD:A9:25:02:3B:F7:D1:98:7D:95:23:D7:FE:79:F7:2D:F2:73:AB
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 01951210722D846F5458E540BD555D58DCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0DD7
Signing time: Mon 17 Feb 2025 04:00:22 +0000
Manifest this update: Mon 17 Feb 2025 04:00:22 +0000
Manifest next update: Tue 18 Feb 2025 04:00:22 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: Lb+wct7EiJ2BCwKNfmGPH1wUnXJvGCWtJdnQ6fvwJDA=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:72:2d:84:6f:54:58:e5:40:bd:55:5d:58:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Feb 17 04:00:22 2025 GMT
Not After : Feb 18 04:00:22 2025 GMT
Subject: CN=78ada925023bf7d1987d9523d7fe79f72df273ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:81:62:0d:63:49:b8:f5:1d:b3:a6:d1:a3:d9:
0e:b7:30:c5:df:93:42:18:ea:98:94:85:e8:74:33:
8b:2d:1a:eb:12:26:0e:2d:bd:43:8d:d8:c9:d1:e8:
5d:5a:b7:ef:bf:47:aa:25:6f:d8:70:d0:e3:e9:b9:
d2:2b:da:59:c7:c8:ec:6d:c2:64:45:cf:ef:4d:8a:
c6:3b:94:60:8d:73:9c:91:81:d4:cb:89:2c:0f:b2:
51:dd:1f:c6:8b:2d:8d:55:5a:3a:1d:9a:77:9e:08:
27:a3:25:ac:01:88:cf:9f:b1:b5:f9:82:12:aa:4f:
ec:12:d2:de:3f:cd:b2:bc:bd:b4:16:81:ad:fc:4c:
e5:61:61:30:f9:dd:67:cf:98:73:85:b5:01:77:6f:
4f:bc:63:03:4d:ad:bf:47:e1:f8:d2:a2:7e:72:2d:
58:d6:fc:0d:3f:bf:20:7d:2a:b2:d3:64:80:38:fe:
71:87:a7:47:05:cc:dc:a2:0b:f8:40:6b:0a:89:0e:
63:32:83:73:fa:d4:bc:b9:bb:40:7a:d9:db:37:6d:
6a:93:3d:a4:ba:8d:2c:08:52:7d:e5:85:c2:a2:df:
16:95:1e:7c:ed:39:38:ac:98:18:24:69:39:94:31:
18:74:66:8e:dd:47:82:53:2d:33:d6:b6:f3:18:c3:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:A9:25:02:3B:F7:D1:98:7D:95:23:D7:FE:79:F7:2D:F2:73:AB
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:44:e2:26:47:19:0b:62:e9:48:e0:be:a6:2b:e4:fa:ac:
c7:46:36:a5:ae:ae:0a:3d:3c:32:27:b1:36:b5:ea:73:b7:28:
11:98:4a:34:6e:7f:4a:7f:1e:f1:04:74:3d:79:7b:1f:78:2b:
15:03:06:76:b4:cf:05:34:fd:ba:df:7f:6e:c3:9e:33:73:19:
27:fd:ce:5a:8e:24:05:35:64:ff:61:ab:de:88:f5:2f:7c:f8:
83:05:3e:68:16:02:74:f6:5e:31:10:b2:ee:2f:ae:49:d9:2b:
ee:19:e7:9a:f0:cc:67:2a:82:19:3f:21:d7:11:1b:bd:3a:a5:
28:17:e0:79:b2:ed:88:9c:b8:b7:41:7c:5e:f7:0c:ba:23:ec:
de:e9:e8:75:47:ff:88:c8:d7:fa:5e:e7:a0:40:5f:89:2f:85:
43:04:b0:46:1b:21:59:ca:03:f7:70:ed:7a:bf:11:ac:5f:5f:
49:9f:fa:35:b1:19:f0:0d:bb:11:7e:67:19:34:2c:d5:70:e0:
11:10:be:c2:32:96:45:04:6f:8b:c5:10:c0:52:f0:14:55:7c:
f6:69:db:53:3a:01:26:b7:c2:90:3f:d1:66:ab:c0:ca:6a:a4:
0e:f7:2d:9c:aa:bd:5d:4e:c6:4d:75:1c:7c:1f:ea:31:48:d5:
20:4c:d9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEHIthG9UWOVAvVVdWNz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTQ1MTQ4OTdhMGFhM2ZmYmY0NWI0ODYwNjEyNDYyN2Yx
NWU1MDYwHhcNMjUwMjE3MDQwMDIyWhcNMjUwMjE4MDQwMDIyWjAzMTEwLwYDVQQD
Eyg3OGFkYTkyNTAyM2JmN2QxOTg3ZDk1MjNkN2ZlNzlmNzJkZjI3M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YFiDWNJuPUds6bRo9kOtzDF35NC
GOqYlIXodDOLLRrrEiYOLb1DjdjJ0ehdWrfvv0eqJW/YcNDj6bnSK9pZx8jsbcJk
Rc/vTYrGO5RgjXOckYHUy4ksD7JR3R/Giy2NVVo6HZp3nggnoyWsAYjPn7G1+YIS
qk/sEtLeP82yvL20FoGt/EzlYWEw+d1nz5hzhbUBd29PvGMDTa2/R+H40qJ+ci1Y
1vwNP78gfSqy02SAOP5xh6dHBczcogv4QGsKiQ5jMoNz+tS8ubtAetnbN21qkz2k
uo0sCFJ95YXCot8WlR587Tk4rJgYJGk5lDEYdGaO3UeCUy0z1rbzGMNouwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHitqSUCO/fRmH2VI9f+efct8nOrMB8GA1UdIwQY
MBaAFAMUUUiXoKo/+/RbSGBhJGJ/FeUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kZmYxODEtMmI3Ni00Y2EyLTk2ZTQt
NmIxNThiMjJiNDhmLzEvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kZmYxODEtMmI3Ni00Y2EyLTk2ZTQtNmIxNThiMjJiNDhm
LzEvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcNE4iZH
GQti6UjgvqYr5Pqsx0Y2pa6uCj08MiexNrXqc7coEZhKNG5/Sn8e8QR0PXl7H3gr
FQMGdrTPBTT9ut9/bsOeM3MZJ/3OWo4kBTVk/2Gr3oj1L3z4gwU+aBYCdPZeMRCy
7i+uSdkr7hnnmvDMZyqCGT8h1xEbvTqlKBfgebLtiJy4t0F8XvcMuiPs3unodUf/
iMjX+l7noEBfiS+FQwSwRhshWcoD93Dter8RrF9fSZ/6NbEZ8A27EX5nGTQs1XDg
ERC+wjKWRQRvi8UQwFLwFFV89mnbUzoBJrfCkD/RZqvAymqkDvctnKq9XU7GTXUc
fB/qMUjVIEzZIg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:12 2025 by rpki-client