Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: VlKQvYbalIUupQZSkkew+vVKexjjQnsV0GBSOLVMn0g=
Subject key identifier: A7:D7:F7:9B:87:1E:D5:0E:8F:EC:D3:EA:D9:2E:60:07:BF:EB:6D:52
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019678D676A31E3C5934ECF88FFF755D320A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 20:00:43 +0000
Manifest this update: Sun 27 Apr 2025 20:00:43 +0000
Manifest next update: Mon 28 Apr 2025 20:00:43 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: gYb5xcluh1Mez6XUIy8+xGgSgs8Oo+hZA8rV7ffW14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:76:a3:1e:3c:59:34:ec:f8:8f:ff:75:5d:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Apr 27 20:00:43 2025 GMT
Not After : Apr 28 20:00:43 2025 GMT
Subject: CN=a7d7f79b871ed50e8fecd3ead92e6007bfeb6d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6e:b1:1c:59:0d:83:0b:e1:8a:46:bc:d3:0b:
7e:4c:7e:fe:ad:e5:7c:55:6b:c6:82:e6:58:d7:45:
4f:36:38:7f:af:1a:ff:83:ea:9b:6e:f4:e9:bc:25:
be:92:a9:44:d5:c8:d1:3a:cd:64:e5:63:6f:9f:f9:
ba:d4:91:4e:6b:78:b1:88:df:42:b1:59:dd:af:0f:
f2:2b:9c:e9:ec:f9:90:38:ad:fd:38:32:0a:bd:d9:
f5:6e:63:e4:74:69:bf:d8:59:bb:86:de:98:06:7e:
78:aa:61:44:1b:39:22:41:b5:e6:5a:5d:3c:51:8b:
9a:5a:57:b4:b4:0e:85:17:95:c7:61:86:e4:d6:fa:
11:74:b6:ad:6b:4a:21:88:43:8c:02:3d:be:65:84:
98:8b:9b:72:fd:8c:8b:84:91:37:79:66:c9:fe:46:
3a:3b:51:0b:95:cd:10:23:bc:fb:06:d0:74:2a:4b:
36:74:c4:fc:8f:f3:3c:e5:60:6c:1d:d1:01:7f:02:
e6:1f:62:0d:9f:89:1b:23:96:b4:84:ee:b7:4c:72:
2a:0b:0e:64:c3:54:4e:fd:7d:32:c8:02:84:ee:af:
93:76:b0:63:0d:d7:b0:9b:66:a4:8f:68:de:ba:30:
51:d1:79:a0:da:36:51:8a:b9:78:e1:b6:87:79:08:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:F7:9B:87:1E:D5:0E:8F:EC:D3:EA:D9:2E:60:07:BF:EB:6D:52
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:9c:28:4f:5c:a3:96:31:24:2f:15:17:c9:a2:b6:09:95:
7b:fd:00:cd:65:9e:ac:ee:4a:22:c7:55:bf:6f:0c:8d:5a:7f:
2a:89:14:fc:0e:b8:90:26:6e:b4:fb:b3:8e:5e:21:a2:49:85:
ad:a3:c8:03:9b:bb:f8:0d:8c:94:4c:81:04:17:96:ad:bf:f2:
dc:da:e6:10:6b:ef:46:6b:56:cc:66:e3:03:8b:7f:cb:15:3e:
73:2d:e8:4a:23:f7:9e:32:c7:97:bc:fc:b1:27:ff:a0:62:c5:
60:23:a7:1f:06:0f:22:f4:a7:32:e4:5d:63:ea:e8:23:51:98:
c0:20:70:c2:cb:12:7b:01:63:c1:11:cd:9a:1d:de:9f:4b:1d:
86:d2:4c:a2:37:2b:53:5d:a9:4d:d6:9b:f6:30:d0:9b:44:14:
6b:e1:8e:3a:cf:ad:83:b6:6d:94:bd:35:7e:0b:9d:5d:ff:80:
e9:b0:07:86:17:c1:7a:1d:b2:4a:a4:22:8c:5d:af:12:36:2e:
24:39:2c:07:8f:22:65:a4:9d:f1:fc:3d:c2:59:c2:b6:75:7c:
8f:b3:4d:9b:bd:b6:78:a8:80:41:0a:11:ba:21:fd:bb:40:d3:
c6:35:7e:3c:bf:6f:60:88:7d:45:b9:9a:c6:85:6b:b1:35:2b:
3e:cb:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:49 2025 by rpki-client