Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: wYazlQjVcY5U8l/U8leUTZ37cc6Brz+Y1vGW2P9Qnj4=
Subject key identifier: 14:1D:70:B1:D0:E2:C7:79:E8:36:6F:53:6D:D2:FA:B6:3B:B2:88:2D
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 01964DEBF27A2DB1AC97A408241BA05E6076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 12:00:30 +0000
Manifest this update: Sat 19 Apr 2025 12:00:30 +0000
Manifest next update: Sun 20 Apr 2025 12:00:30 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: YIfWj0wH/774R1fVDPiMwbFVBEcmL91HIqF7GQi85Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:f2:7a:2d:b1:ac:97:a4:08:24:1b:a0:5e:60:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Apr 19 12:00:30 2025 GMT
Not After : Apr 20 12:00:30 2025 GMT
Subject: CN=141d70b1d0e2c779e8366f536dd2fab63bb2882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:bf:ef:7b:3e:71:f5:a4:d5:34:36:e3:c4:
cf:f6:5f:0a:b2:5b:98:65:8e:f2:84:88:84:2d:53:
03:a8:6e:0e:58:d8:c6:5e:70:c0:9a:bc:c0:c7:f0:
45:7a:05:ff:b4:c7:6d:68:51:77:e2:e9:ba:dc:f6:
f7:bd:47:c5:af:b1:7a:7d:fb:cb:f0:9e:15:cf:d8:
1a:2e:44:ca:ad:90:ba:a2:df:98:06:29:af:2f:af:
02:a1:b6:e4:b1:af:aa:11:94:c1:40:81:89:2f:0d:
b6:fe:19:00:fa:85:fa:f2:ca:52:db:1e:a2:b2:59:
d7:de:8c:c1:40:ef:bf:e2:23:63:a1:35:3e:86:92:
50:ad:92:00:e3:18:86:ba:ca:75:6b:45:ab:48:17:
3a:a0:32:25:a4:da:d6:1f:6f:1d:8a:ff:2e:46:41:
5f:98:49:ca:08:b5:e3:91:e7:c5:2a:98:6d:f4:66:
43:ab:07:b8:75:9d:df:02:f4:45:d8:bb:96:a5:ef:
2b:c5:9d:ef:e3:14:4c:1a:24:f5:77:2f:40:dd:4b:
53:7c:36:43:30:c8:f0:55:30:13:b0:62:15:e4:2d:
47:bc:7d:dc:5e:08:97:00:c6:af:e3:b6:4f:63:15:
10:ba:ac:e4:ac:ae:63:6e:28:3d:7b:59:20:2c:60:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:70:B1:D0:E2:C7:79:E8:36:6F:53:6D:D2:FA:B6:3B:B2:88:2D
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:23:10:52:e1:05:93:65:94:a1:af:60:28:ad:71:e1:e6:d3:
18:be:59:d8:83:19:d9:97:f0:d1:4f:90:47:e5:2e:8d:2c:ad:
4b:b1:c2:9a:d2:9c:67:4e:b5:f3:87:06:fb:5b:42:85:ff:db:
6c:da:1a:5a:26:cb:93:70:28:ae:2b:72:c5:7c:b2:2e:05:16:
d6:90:e8:02:60:4a:58:1a:65:90:36:93:bf:30:bc:27:55:9c:
13:72:b7:0e:f8:e6:de:7a:a9:4a:55:4d:8f:92:01:79:84:0d:
6a:e3:a7:14:79:31:ef:7b:67:01:93:77:07:9e:2b:cc:e6:16:
7f:e0:19:9d:d9:2b:2e:15:2b:65:94:df:f3:3b:7d:f6:08:9d:
ec:f0:db:9a:8b:a1:14:67:8e:1e:2f:05:d0:0f:7a:93:a7:81:
53:8c:72:46:46:c5:1d:a1:7a:a1:bf:74:11:a1:29:44:0f:fb:
5a:95:e0:4f:e7:44:e5:fd:5f:61:96:9e:25:f4:f1:cc:83:f9:
9e:2e:96:8d:59:6c:51:bf:28:0f:8a:1e:d7:32:bf:93:9e:e4:
6f:d2:78:88:d8:46:f4:50:2a:78:07:53:ec:b8:e1:af:97:ff:
6c:2d:3c:4d:69:b7:c8:48:a8:8e:5f:2b:44:92:3f:5e:f2:d5:
bb:fc:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:15 2025 by rpki-client