Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: /VziXWJwxZbG3dno2ii0wFFJ26hzWDkyxdyLoMjv1AI=
Subject key identifier: 11:E2:62:5B:37:5E:FE:04:2B:BD:56:20:41:D1:64:22:4E:46:EA:73
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 01967DC63226876A26A9F30A4360DC053BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 19:01:02 +0000
Manifest this update: Mon 28 Apr 2025 19:01:02 +0000
Manifest next update: Tue 29 Apr 2025 19:01:02 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: B6sfRgZFV/u2Q6rh4hzA/NR0UP1Cnzt8Evd7QOa7fYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:32:26:87:6a:26:a9:f3:0a:43:60:dc:05:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Apr 28 19:01:02 2025 GMT
Not After : Apr 29 19:01:02 2025 GMT
Subject: CN=11e2625b375efe042bbd562041d164224e46ea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:75:08:f7:99:d5:30:57:ee:73:51:b3:ca:
48:be:c3:94:0e:45:b5:53:bc:3d:63:88:e0:51:dc:
29:d7:c4:fd:96:c7:cd:aa:f9:cb:81:08:e0:39:8a:
d2:c1:fa:63:49:f2:40:cf:67:ab:98:b1:eb:fd:d2:
a6:7e:79:0f:38:db:db:38:0a:d2:81:ef:6e:a0:7a:
db:cf:66:0d:d4:5d:ae:ac:ef:7f:41:ce:28:7b:83:
dc:1c:cd:8b:c0:1e:f6:aa:84:7d:8d:a3:b7:b4:71:
00:6a:57:92:9e:10:1b:67:aa:31:30:ec:fa:89:6f:
16:cb:4b:3a:9d:16:a8:74:ba:bd:90:7e:70:e6:d1:
e7:05:b5:e3:b6:3f:36:45:4a:33:eb:48:7e:5e:14:
87:ae:96:b7:22:ee:43:89:75:21:d2:b5:4c:7e:f4:
26:8d:81:15:b8:6a:7c:98:1f:bb:40:90:82:25:07:
b3:fd:f3:21:21:a9:72:66:9d:fb:22:e9:ec:08:23:
b2:f7:56:d3:ac:93:88:71:fe:02:a9:38:e6:04:f8:
4c:13:45:0d:2e:34:be:20:5f:a9:46:f7:82:86:8b:
ec:e4:13:0e:87:36:c9:ab:6b:c3:f2:76:59:62:4f:
5e:e9:3f:a6:f7:18:01:6f:cc:0c:51:37:34:92:93:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:62:5B:37:5E:FE:04:2B:BD:56:20:41:D1:64:22:4E:46:EA:73
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:2b:0a:0b:09:03:94:3d:1a:c6:62:ee:98:e6:e8:a1:3f:
32:af:3d:2c:07:8e:04:4b:f4:7c:ff:58:ea:d2:58:fe:f6:76:
44:57:bf:49:3d:cf:57:ac:dd:c0:da:fd:cf:e2:87:3e:7a:23:
98:c6:0b:2f:e5:54:56:47:e7:ca:41:fa:7e:2f:c7:92:ea:7d:
6f:c8:8f:8e:35:f7:75:74:f6:15:3d:30:e1:7e:40:42:dd:e6:
d4:64:fd:59:31:17:b4:3e:b9:eb:9a:1d:0e:60:63:07:d4:90:
d7:da:7e:8f:aa:5b:31:fc:a5:73:69:3c:1e:33:85:5e:23:5a:
d5:44:0f:7d:c5:00:4c:d1:7d:e7:41:eb:26:ea:76:d6:66:aa:
40:21:db:ca:d5:91:e6:72:19:aa:01:39:5c:7c:56:9b:6d:81:
e5:9a:dc:e6:63:dd:aa:53:df:cd:b4:a0:d5:06:6b:94:9c:a9:
96:f7:ec:a3:06:f2:61:fe:8b:37:1d:91:a2:3f:ed:2a:6b:83:
c2:1f:ea:44:26:23:65:4d:03:3c:25:fc:52:e5:36:69:89:a0:
74:5b:42:1c:ef:88:1c:a9:09:db:ad:b3:25:7c:5c:b5:4d:20:
ac:57:bc:07:95:a9:f6:49:8a:01:ee:05:17:d7:2b:fc:05:bc:
da:24:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:08:42 2025 by rpki-client