Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: fOAjXaoUlDsnmAVPMu3HpbjarC+Y1pzJWILio1oMmJg=
Subject key identifier: 35:2E:94:49:EC:BF:A4:BB:DB:97:FE:32:B8:52:C0:CE:44:27:27:5E
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 01967868FF54005BCAA255532834FFEC3AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0B86
Signing time: Sun 27 Apr 2025 18:01:09 +0000
Manifest this update: Sun 27 Apr 2025 18:01:09 +0000
Manifest next update: Mon 28 Apr 2025 18:01:09 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: mzgGkf9apPXSd6bCfZs4eHGodz0LZftkneo8PNwfU/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:ff:54:00:5b:ca:a2:55:53:28:34:ff:ec:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Apr 27 18:01:09 2025 GMT
Not After : Apr 28 18:01:09 2025 GMT
Subject: CN=352e9449ecbfa4bbdb97fe32b852c0ce4427275e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:13:56:15:2d:65:2d:48:1e:b4:8c:6a:bc:
8c:73:5f:26:13:6b:07:d5:90:13:58:d1:19:ff:ab:
a5:88:44:a9:64:61:6e:89:bb:d0:b0:26:bf:eb:cc:
1d:f3:60:1e:b0:5d:27:df:1c:9e:f4:5c:d9:b8:ca:
b4:e4:c2:b5:67:e2:b1:08:17:f7:27:01:6e:70:8c:
d6:02:13:bf:2a:c1:ea:30:92:b2:b4:0e:f1:41:99:
ea:4e:dc:bc:98:e2:57:21:60:4b:34:da:e4:c4:61:
68:98:e6:5b:07:98:ee:8d:cf:57:0b:1b:f6:4c:23:
f7:c8:b5:c8:c5:5f:19:41:d8:a2:ef:99:7e:5c:6c:
e3:88:4f:ee:de:b6:3c:3d:71:84:2d:0b:6f:78:ce:
05:2d:af:2f:ca:8e:a5:2f:c0:e6:72:52:5f:cb:2f:
46:45:ef:c7:a7:c6:2e:81:67:28:14:47:5e:9f:e8:
eb:26:1d:b9:48:dc:59:05:d9:6e:27:b1:61:16:f3:
b5:6e:7b:d5:a7:e3:f4:df:ee:9e:e0:b5:77:df:94:
ff:c4:20:0d:07:06:13:ec:1f:f3:b1:e3:4c:fe:8d:
88:db:bd:69:ae:c7:cc:c5:04:dd:f2:0e:fe:9a:d3:
0a:30:75:b8:ef:94:f5:5a:c7:43:11:03:fc:da:18:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:94:49:EC:BF:A4:BB:DB:97:FE:32:B8:52:C0:CE:44:27:27:5E
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2e:73:72:33:c1:57:6a:a3:71:e1:58:43:fd:f1:38:c3:95:
3e:3d:e2:41:8c:37:6a:84:bb:30:d7:7a:7d:69:23:8c:6e:48:
a1:b3:12:9c:3b:78:cb:50:48:84:39:bd:21:29:c3:83:0d:1f:
74:98:a8:23:d2:db:41:d3:e8:f1:0b:d7:0d:39:92:e9:97:37:
a6:7a:90:96:45:74:54:ae:b2:9e:65:1c:01:c8:9c:c2:86:f6:
e6:f8:d5:f5:fc:15:15:e6:17:c7:23:01:82:6c:55:1d:6e:33:
d2:0c:e6:cd:74:75:f1:03:79:f6:aa:3f:98:e2:fe:1a:fd:23:
97:0f:14:a0:e2:aa:fc:43:64:fe:7d:ab:eb:1f:94:bf:dc:17:
f9:9a:c6:a5:5d:32:3f:20:22:df:96:5a:76:47:8a:8c:6f:dd:
03:26:d1:5c:48:71:4c:3f:62:f8:30:bf:f5:be:36:27:43:ec:
ba:aa:ba:6b:5e:01:fa:5c:46:83:c0:21:f3:71:16:bf:d3:80:
e5:c4:49:ab:4d:46:86:c0:34:db:f8:12:8a:2e:1d:f6:e0:b1:
42:e1:e0:f2:46:fc:21:15:ef:d9:0e:ac:3e:f7:50:4b:ea:02:
3c:62:fe:6c:a6:03:3f:dc:0e:46:ec:89:5b:1a:8b:ca:fb:fe:
66:6c:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:30 2025 by rpki-client