Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File: APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier: Qi0izrWVfQTIYzTEizcFVbcuo2ZG++hjgbSAOg8ylYM=
Subject key identifier: 5C:A1:A3:61:6F:B5:95:C6:A6:E6:E9:1D:57:19:D5:8E:16:D6:BA:93
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 01967C7C62DF00A0D527325D1B22F95C067E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number: 1467
Signing time: Mon 28 Apr 2025 13:00:48 +0000
Manifest this update: Mon 28 Apr 2025 13:00:48 +0000
Manifest next update: Tue 29 Apr 2025 13:00:48 +0000
Files and hashes: 1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: jLGavDEhZFyGY5Kvk+977Jfk3jyiY8oVX9XI4OeWU9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:62:df:00:a0:d5:27:32:5d:1b:22:f9:5c:06:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: Apr 28 13:00:48 2025 GMT
Not After : Apr 29 13:00:48 2025 GMT
Subject: CN=5ca1a3616fb595c6a6e6e91d5719d58e16d6ba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:2f:dc:4a:20:fd:14:5f:3b:1d:21:40:39:
4c:f3:17:c6:ff:de:ca:59:13:17:0c:1b:66:df:40:
4e:1a:07:b2:1e:06:3d:40:61:66:92:25:8a:78:5c:
dd:f7:c4:75:65:69:bd:e3:0d:ce:c0:b6:ca:a7:30:
43:49:de:a6:b0:9f:c6:4e:94:67:cb:fb:34:f6:9e:
b6:67:66:bd:8c:c5:fa:b4:f4:96:9a:cf:bc:2d:37:
b8:07:39:74:77:2f:07:8b:86:67:57:fb:6a:64:f3:
b1:64:26:5f:91:44:b5:7f:05:7d:f2:42:07:ce:8a:
dd:ee:7a:db:fe:7b:6c:cc:68:06:76:b6:df:09:eb:
d7:bc:98:db:59:89:47:b1:eb:11:58:19:ef:ff:05:
1d:e5:64:03:40:1e:65:81:b7:58:c5:46:46:13:1b:
11:34:bc:cd:92:7f:fe:92:1d:d7:66:64:5f:3b:28:
83:d6:b8:5e:eb:34:f6:27:06:96:68:26:be:67:6a:
ba:58:ff:d5:89:d0:bc:71:76:41:e9:8c:f2:d7:9a:
92:dc:d5:ae:d0:a3:c2:30:41:b2:5e:4a:56:7e:24:
c7:90:fa:14:b7:1a:f5:92:e7:72:53:2f:ea:ac:b7:
8f:00:8d:db:92:fe:69:6a:5d:c8:18:3a:65:df:19:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A1:A3:61:6F:B5:95:C6:A6:E6:E9:1D:57:19:D5:8E:16:D6:BA:93
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4a:7c:5d:ff:4f:5f:4e:f2:9a:08:0c:8b:a5:56:5d:ba:23:
59:45:2a:14:8f:f3:3d:02:bc:01:19:93:b8:94:ce:3a:f9:21:
ed:6a:70:69:61:83:c4:24:fa:1c:43:8f:b7:e7:5f:5c:a7:d1:
9b:88:17:51:a3:b0:8d:17:9a:7a:a1:ee:bb:f4:0a:dd:cf:38:
39:6a:65:d8:c2:87:2b:dd:6a:67:27:a2:ac:c7:cc:90:47:c8:
cd:9f:9d:d3:66:57:dc:b1:f1:d0:be:65:6c:2d:52:b6:18:18:
08:d1:ed:1c:57:8e:2e:23:cf:3d:63:bd:58:ad:11:4a:4d:45:
fe:d9:6d:16:4d:81:58:69:43:4b:48:cd:94:9c:c8:7f:71:47:
9a:f7:f2:23:ef:7e:23:6f:f8:48:a5:c5:eb:51:5a:f4:fa:13:
f1:31:a4:8f:4b:d1:ce:ff:21:c7:5b:3d:78:6f:53:22:1e:46:
b9:70:19:cd:50:7a:ba:5f:c8:d7:c0:fa:e5:ea:51:5a:ec:98:
b1:51:a8:7c:0b:4c:40:11:50:7c:41:56:de:fd:98:ab:33:89:
ea:82:30:29:a0:a0:5d:ec:9b:67:cf:45:7f:53:20:0a:cd:0d:
e4:02:99:8e:1f:59:2c:8b:0a:e9:ac:f0:78:18:e3:54:9e:1d:
1f:a4:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:26 2025 by rpki-client