Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: uG9wBkVl03KlAFyHGgvq2XiXoGQEW5BqeQQSbXPViJk=
Subject key identifier: 69:BD:17:65:68:A2:EE:EE:BA:A8:36:14:61:CE:00:A6:6B:69:04:1C
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019677FAB9F82AD5FEC1233F938BE16A973E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 16:00:42 +0000
Manifest this update: Sun 27 Apr 2025 16:00:42 +0000
Manifest next update: Mon 28 Apr 2025 16:00:42 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: rRbonfiMJvyL1AqW+MAUFsmS9OxFGtsno6FzDZKTfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:b9:f8:2a:d5:fe:c1:23:3f:93:8b:e1:6a:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Apr 27 16:00:42 2025 GMT
Not After : Apr 28 16:00:42 2025 GMT
Subject: CN=69bd176568a2eeeebaa8361461ce00a66b69041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:9e:c4:69:f7:bc:5e:31:39:d9:46:2e:eb:
7f:8b:11:c0:7b:85:7a:e0:9b:d9:60:c3:a0:89:69:
6b:b7:54:39:3f:d9:19:5f:5f:ce:14:3f:39:4e:49:
b8:f5:89:77:07:3b:44:57:89:2a:72:94:46:9f:68:
30:51:ff:5d:ad:86:53:54:d6:49:43:40:19:a0:96:
7c:88:b8:72:0d:ae:c3:fc:73:7e:87:a6:cc:87:40:
06:3a:db:8d:fb:cd:c3:4d:e0:7b:9f:a2:f9:23:ae:
63:92:27:eb:dc:53:ba:78:50:c5:73:9c:1f:88:a6:
b4:a1:14:3a:98:64:ab:00:82:3d:fa:79:6a:ff:d2:
e2:43:5d:d9:33:f9:53:c6:33:f4:e2:b3:d8:ab:63:
a6:fa:15:76:97:b9:d2:8d:b7:ec:be:e6:0f:00:d5:
34:dd:2a:f1:54:e0:21:88:2b:44:03:03:b6:30:78:
4e:2a:be:7a:4d:05:95:5e:e1:a5:98:1b:80:f4:f1:
d1:56:74:6d:26:0c:70:f6:3c:8b:36:90:db:27:8f:
ea:86:82:1d:c7:f1:bf:23:5f:db:24:b6:3d:e6:a5:
62:00:5e:ed:48:f1:50:96:e5:0c:46:12:f1:b2:0b:
dc:2d:02:73:4e:fa:9a:e7:b1:51:81:ed:c2:f2:65:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:17:65:68:A2:EE:EE:BA:A8:36:14:61:CE:00:A6:6B:69:04:1C
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:12:58:21:f4:fb:20:d9:07:12:b5:73:29:b9:a9:97:9b:3c:
9a:d7:a4:a3:94:3a:fd:36:3d:e4:dc:7d:37:8c:e4:63:e1:48:
c4:70:6e:5a:bc:78:57:03:2f:ef:60:51:7e:34:51:24:ac:c0:
f8:e7:b5:de:d3:17:ba:66:e2:3c:4c:5a:51:fd:7f:17:3e:05:
18:74:2a:72:d1:92:8e:25:bf:58:0c:fa:b6:7f:11:1f:ad:39:
23:b9:7c:6a:f9:8f:ac:10:2b:89:26:40:77:6f:a5:58:bb:79:
33:b7:b7:b9:04:45:ae:e3:12:19:bc:63:62:b4:61:30:be:92:
98:b6:00:99:92:56:82:72:20:d6:e3:99:95:3a:50:84:0a:1f:
87:49:82:b1:92:59:ec:64:74:1a:0d:a7:c2:d5:20:11:91:06:
77:c2:0b:98:a9:4a:f3:c3:25:eb:ca:d2:86:86:5f:8f:e6:e4:
cc:68:35:b8:dd:76:0a:4e:f3:8e:f8:d1:13:c2:f0:d9:a8:33:
0e:80:fc:e3:e0:e4:c4:66:8b:84:b9:28:4d:a4:6b:45:91:e4:
78:52:c7:34:fb:e6:97:1f:ab:f7:73:5e:83:20:19:ea:0b:84:
ef:94:08:ee:e8:a3:22:b2:54:3b:08:3e:53:a3:c9:ca:90:b4:
74:82:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:32 2025 by rpki-client