Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: vVA6gmKMpud9XKJCSXeGvXz99KnVx2lMPXm/XY/3XUs=
Subject key identifier: 5F:D0:94:57:FA:54:9F:93:E6:34:A3:D9:0E:5C:ED:7A:20:13:33:B7
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 019769CE6B5EA7237A0ADD4B9AE764887D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0C03
Signing time: Fri 13 Jun 2025 15:00:24 +0000
Manifest this update: Fri 13 Jun 2025 15:00:24 +0000
Manifest next update: Sat 14 Jun 2025 15:00:24 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: syIJM2EiBEKr0n+09aiNxos+1HresbojROdvt275ZPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:6b:5e:a7:23:7a:0a:dd:4b:9a:e7:64:88:7d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Jun 13 15:00:24 2025 GMT
Not After : Jun 14 15:00:24 2025 GMT
Subject: CN=5fd09457fa549f93e634a3d90e5ced7a201333b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:a6:78:2e:94:74:cd:3d:86:77:75:e0:ed:
8b:6d:88:89:f0:01:3a:4c:54:6e:42:8f:8e:2c:47:
7e:2d:54:84:41:22:00:af:99:93:bd:45:ad:5e:f5:
67:07:9c:0c:ac:c4:df:8d:98:75:72:36:27:ed:87:
cb:ed:a3:e5:21:1b:8d:7b:39:72:a0:47:b1:ed:ef:
9f:54:ef:3b:e4:8b:dd:a2:3e:21:96:05:22:36:67:
42:6b:1d:e1:12:7f:05:e5:76:c1:74:6c:6f:46:dc:
c2:9f:20:5e:65:71:ca:f8:c0:43:38:fa:ca:20:6b:
b1:ae:6c:b9:28:d3:c2:76:74:a1:7a:0b:e2:ae:0d:
7d:16:ff:26:e1:22:0f:10:14:b8:9b:0c:59:4d:cc:
f0:b0:48:86:52:82:62:4b:18:b1:13:5b:fc:b5:14:
28:1a:72:0f:69:97:62:b2:d0:1b:37:a4:8b:f2:e3:
18:3d:a7:95:4c:2e:8d:63:9e:25:f0:94:70:d3:b9:
fd:ab:25:d9:35:13:0c:ac:57:8b:e5:8c:19:70:59:
71:69:0e:22:d8:56:cb:cc:df:b0:1b:03:55:bd:b8:
5f:f6:46:97:9f:60:10:20:23:4f:87:57:61:45:2b:
be:b7:8f:f3:d4:5c:b7:c0:a4:c9:10:92:48:76:36:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:94:57:FA:54:9F:93:E6:34:A3:D9:0E:5C:ED:7A:20:13:33:B7
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a1:52:78:b8:ff:27:be:35:6b:7d:ac:98:f9:2c:8d:e8:54:
71:ae:25:51:a0:9a:50:59:2e:e6:e5:ab:45:c6:84:25:af:44:
20:c4:01:07:20:1e:7c:8e:a1:aa:ea:75:c3:4c:a9:a1:b1:35:
12:7a:19:4c:e5:78:21:1e:a1:59:17:1d:4a:83:a2:7f:ba:ae:
9e:0d:3d:18:fc:e1:19:43:d3:6e:5c:29:8b:66:dc:ed:75:23:
92:0b:db:33:34:a0:e9:70:39:d3:c0:d7:28:2f:d3:59:1a:bd:
f1:17:c1:4c:79:01:41:8c:fe:cd:1d:c6:fd:5a:58:5d:63:98:
bb:f7:74:c6:a4:e7:02:64:73:37:d7:cb:32:ba:3d:30:67:49:
ff:b4:2e:43:13:b2:bc:40:7e:9b:2c:bc:7a:94:05:e7:66:c3:
b9:3e:d4:f2:5b:6c:07:3e:e5:fa:a4:8f:a9:56:be:2e:6d:45:
ce:8a:57:37:36:1a:d7:23:c7:e6:7a:a5:41:48:17:71:1e:13:
c5:dd:00:c3:c6:06:5b:93:9c:e5:f2:cb:a0:18:eb:7b:dd:21:
92:87:8d:91:db:f8:f8:f4:16:6a:d2:46:96:9b:f3:d8:80:3f:
af:19:85:53:55:9e:4c:7d:85:f4:86:14:62:a5:bb:3d:08:c6:
8e:f0:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:37 2025 by rpki-client