Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: oienptraew4ZS5mmTHQKd4Y0mdFs62tDFAtCbaVhwj4=
Subject key identifier: 46:4E:AB:DD:0E:1D:54:B2:DC:6C:CC:EB:F1:1F:00:B9:61:98:B1:54
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 01976F99F06C95A0F2B7D5BE7524E83862D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 02E2
Signing time: Sat 14 Jun 2025 18:00:48 +0000
Manifest this update: Sat 14 Jun 2025 18:00:48 +0000
Manifest next update: Sun 15 Jun 2025 18:00:48 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: 5I5HTdrnI9D162pXFkHh27ozWWnzAn79nIVGEHS9w7g=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f0:6c:95:a0:f2:b7:d5:be:75:24:e8:38:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Jun 14 18:00:48 2025 GMT
Not After : Jun 15 18:00:48 2025 GMT
Subject: CN=464eabdd0e1d54b2dc6cccebf11f00b96198b154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:f7:73:ab:a7:d4:e9:29:74:31:7c:6f:99:
6e:e5:9d:95:fd:57:c2:1b:22:34:0e:5d:85:35:05:
aa:26:c5:37:78:4b:8f:37:62:2b:4f:8e:72:0c:eb:
db:6e:37:90:af:cf:3c:fe:7e:de:76:8f:a6:34:e1:
9d:7b:71:85:20:d9:b2:35:1f:05:ef:86:85:1b:0b:
32:03:6e:6c:ae:7e:18:12:8f:82:4e:e7:d5:04:9a:
52:55:bd:90:23:b5:1a:9e:d2:14:20:6e:95:d9:48:
25:a9:8d:c8:a3:5f:62:c6:a8:d0:d7:ea:e2:c5:21:
44:c0:07:49:0a:83:fa:2c:02:64:ad:35:54:44:88:
dc:7a:26:fb:bb:58:34:95:06:97:8b:cb:25:5a:05:
63:fa:9e:84:3f:41:54:0b:b4:dc:ed:3b:aa:bd:28:
be:3d:96:57:71:19:6c:fe:aa:f7:96:b4:df:f9:59:
2c:91:cd:c4:82:4c:cf:10:03:af:dd:ad:05:80:68:
ba:e4:e4:b2:d2:3f:83:e6:4a:b5:67:fe:2a:48:b7:
f5:53:e6:a7:68:85:40:52:c1:26:0e:f4:24:8a:97:
7c:52:d3:35:41:fe:e7:88:f6:33:c8:b0:0c:f6:77:
de:08:df:ae:a3:cc:62:57:43:a2:da:5f:4d:dd:44:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:AB:DD:0E:1D:54:B2:DC:6C:CC:EB:F1:1F:00:B9:61:98:B1:54
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2b:81:fd:d9:16:06:14:06:a2:a3:e1:b0:16:f9:cf:93:e2:
7b:d2:53:d8:9b:70:82:f9:22:9b:a4:fd:b6:b6:89:39:90:33:
6c:93:16:c1:0b:82:af:08:91:f7:3d:fc:d6:51:d2:32:ef:d7:
a6:12:00:35:a4:60:3e:ce:2e:d8:25:cb:fc:1e:2e:ec:aa:9f:
d3:14:f6:44:08:16:f0:d4:f7:bc:80:3a:ac:48:73:bc:6e:64:
aa:2a:d9:68:ce:64:ad:da:57:47:b4:ec:1e:36:3d:1a:7b:0e:
82:29:2d:ca:c3:61:e3:64:95:4b:2e:87:ae:dc:bc:9a:01:5b:
43:53:cc:b2:b0:8e:a3:bc:7e:57:62:ac:01:42:ba:f7:64:de:
84:f2:bd:34:f2:5a:9f:be:b4:c0:c9:f9:d1:13:08:bb:2c:b9:
d1:88:9d:b9:9d:b2:76:96:5a:58:f2:5d:4e:4f:67:ba:e7:0b:
c2:e2:01:ef:cc:6b:8e:af:c1:7f:0a:9c:25:58:81:97:f6:6b:
0c:a3:ed:58:9b:6b:38:ad:86:f7:1c:b0:4c:3a:bb:4e:de:df:
35:68:eb:47:1a:3f:b8:77:a4:48:26:60:36:80:46:92:fd:b1:
c7:d3:c3:3d:b5:af:c2:ee:fc:57:c7:75:57:68:0f:24:cc:8b:
30:c6:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:15:41 2025 by rpki-client