Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: KZDw/I4aj8Lud2gcTYXWMdQnB4KcaLx4ZnGKo9CPc/E=
Subject key identifier: ED:7B:2D:E7:F7:4B:F5:3C:18:6A:3E:5E:B1:46:FF:60:13:22:EF:39
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 0196767A380536D1AAD28594BF8605D498BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0261
Signing time: Sun 27 Apr 2025 09:00:43 +0000
Manifest this update: Sun 27 Apr 2025 09:00:43 +0000
Manifest next update: Mon 28 Apr 2025 09:00:43 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: RJvJHSg5NO14BLl+wTr+R5nEL6NmwsNbcGkyMlH1oVs=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:38:05:36:d1:aa:d2:85:94:bf:86:05:d4:98:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Apr 27 09:00:43 2025 GMT
Not After : Apr 28 09:00:43 2025 GMT
Subject: CN=ed7b2de7f74bf53c186a3e5eb146ff601322ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:7d:41:9f:63:e7:17:a5:44:64:51:8a:9e:
cb:c0:5a:de:01:e6:04:0c:a8:05:9e:77:e1:24:e4:
30:a9:a8:58:fe:3a:59:40:fd:3e:fe:31:bb:23:96:
0d:65:36:68:e6:d5:96:9f:22:9f:71:0c:92:ac:bf:
7a:83:8c:33:e8:55:60:f3:3b:8b:22:89:ff:6a:06:
1b:26:65:e6:05:a1:e8:73:f7:10:58:7a:44:de:52:
ee:04:a9:19:ff:4a:49:42:db:63:37:74:65:a2:49:
78:fa:af:cc:a4:8f:89:86:ab:76:cc:9a:c5:9a:4f:
b6:56:1a:f5:07:07:1f:41:54:96:93:50:c2:3d:5d:
ec:f6:f5:ce:ac:df:be:b6:eb:d6:af:7e:ab:54:28:
2a:8a:dd:b7:e9:cc:f3:c2:ba:b8:e3:15:0e:78:c5:
46:48:92:c0:01:76:a3:d1:9a:82:a5:48:8d:d2:3a:
a8:04:40:6c:2a:1c:23:f4:89:63:65:8c:0c:c1:3d:
87:82:6d:ea:86:60:58:7d:be:ed:01:ae:1c:b3:72:
4a:c7:b5:80:79:33:35:3f:4e:80:7e:13:07:a6:9e:
a1:e1:ac:04:ae:0e:41:f2:7a:2a:4e:12:2a:01:17:
a5:2e:02:d3:d3:69:5e:e7:6a:9e:5d:da:e5:5e:1b:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7B:2D:E7:F7:4B:F5:3C:18:6A:3E:5E:B1:46:FF:60:13:22:EF:39
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:ac:f1:9e:e9:85:1a:96:f3:83:4e:b4:21:c4:87:df:8b:
e3:71:e0:f4:97:b2:90:00:4a:0c:bf:cd:74:50:44:35:5d:e9:
7e:f6:24:49:d5:37:22:14:ee:12:78:e0:e6:44:dd:96:1c:52:
14:47:c7:ac:db:fd:ed:21:db:dd:9c:6e:32:bd:ea:78:b9:9e:
a2:f5:57:6a:bd:f0:60:7d:bd:4c:9d:f7:f1:98:e6:3e:3a:cb:
85:ec:20:09:72:db:bb:b8:1d:f0:bb:68:8c:98:55:92:fd:03:
fb:6b:0c:88:24:d6:b4:76:e9:94:87:06:0b:72:00:59:a2:2d:
bb:f6:21:2c:e1:0d:dd:e9:bd:9d:1d:f0:4a:9f:26:f5:a3:3b:
22:c4:f9:cf:fb:8e:f2:75:aa:6d:09:48:80:74:8a:ea:ad:dd:
d1:fa:b2:f0:25:ee:f2:22:0b:aa:77:d9:84:77:c1:a9:0f:75:
dc:da:f5:e1:fe:94:a0:da:16:2f:fb:4e:82:67:21:ed:04:e5:
20:2e:97:7b:39:ff:6e:1a:e8:fa:70:70:3d:69:13:1e:81:88:
24:1e:28:d5:36:1a:4a:49:ee:10:12:cb:a0:70:b2:be:b9:e4:
77:53:e0:3b:37:2f:ff:75:70:1f:4c:0c:57:93:cc:79:8c:43:
00:8f:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:21:42 2025 by rpki-client