Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: CtHrkTSqVGUeG+YdrZnaAb+xOzgyfahnWVKZHXA0Hyc=
Subject key identifier: 35:E6:B4:9C:CB:28:97:A5:25:25:91:55:D2:8D:02:7F:B1:25:03:0F
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 36DE6BCD90F93DD72331ADFAF3BA5CF1BD474ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 070C
Signing time: Mon 28 Apr 2025 01:24:39 +0000
Manifest this update: Mon 28 Apr 2025 01:19:39 +0000
Manifest next update: Tue 29 Apr 2025 05:14:39 +0000
Files and hashes: 1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
2: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: HAr/5SVyEQ6rEoTP2+1j5M0l8PJlDdNYVK0Dn9qxuzA=)
3: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)
4: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:de:6b:cd:90:f9:3d:d7:23:31:ad:fa:f3:ba:5c:f1:bd:47:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Apr 28 01:19:39 2025 GMT
Not After : Apr 29 05:14:39 2025 GMT
Subject: CN=35E6B49CCB2897A525259155D28D027FB125030F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:e9:66:d8:07:8d:be:4c:ab:cb:4a:58:7d:
73:00:07:3f:97:91:36:ee:cf:b1:e8:72:5b:63:c9:
99:b1:bd:cd:ee:5a:28:09:3d:94:a4:3e:35:a6:3e:
b4:c4:af:3e:0c:ee:ef:09:5d:41:2d:4e:e0:f4:07:
c2:42:40:c7:a5:55:a6:73:02:1e:ed:5e:00:e7:d3:
fc:49:e1:95:a6:18:31:93:c9:d0:04:be:7d:96:69:
ca:f0:cb:f6:ce:c7:f5:fc:f1:70:94:1b:a1:69:e4:
71:08:57:d1:02:1e:b2:49:af:4a:ed:e6:9e:e2:c9:
db:ca:23:0b:16:5a:f4:8d:a9:f5:fa:4f:2a:bb:28:
df:0c:96:6b:95:f2:2b:cd:d6:95:75:52:20:03:0d:
28:9b:a4:fa:28:3f:8b:b1:a5:a1:a1:b2:2f:2f:3c:
20:ca:fa:44:83:b9:5f:b5:c7:0e:8c:ba:25:1e:e1:
2c:4a:3b:50:08:e1:b4:9b:84:b6:f1:e8:b7:1e:c2:
57:b8:95:bc:a7:d0:78:e6:2e:c8:78:9f:1d:47:94:
50:df:7c:e2:b4:f1:41:76:76:2b:01:ad:f7:3b:40:
13:10:0a:43:72:55:13:29:ce:09:80:ed:92:dc:a4:
2a:ad:86:c7:dc:6e:0a:17:a6:27:8d:52:94:a6:07:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:B4:9C:CB:28:97:A5:25:25:91:55:D2:8D:02:7F:B1:25:03:0F
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3a:5f:2c:37:5e:e2:b2:7f:35:14:37:fb:0e:9c:58:ef:a0:
9d:c1:ac:7b:f1:f7:d9:4d:59:db:c7:4d:34:35:6a:da:cf:c9:
07:1e:25:ce:f7:c5:68:ac:c9:30:6e:91:28:e2:aa:d5:a7:7d:
9e:a6:b0:82:db:96:f2:94:8e:85:8e:6b:19:4b:07:66:d8:8a:
79:e5:34:29:ea:5e:46:67:fb:f4:e8:b1:7e:2c:f4:05:ef:15:
eb:f8:d4:60:96:8a:2e:92:74:1a:5a:ca:f2:53:3f:7e:09:71:
6e:ae:b2:cd:f8:9b:0b:bb:65:fb:a4:d7:c3:6f:14:25:4d:73:
e6:a3:b1:41:61:31:4b:8d:7f:ad:30:9d:12:fe:53:4d:fc:39:
53:89:93:8c:ed:f5:e4:b0:50:4f:58:ef:4e:97:2e:e5:8f:5d:
66:7d:24:b2:50:9a:0e:b5:17:81:eb:b6:3f:d7:1f:6d:5c:66:
54:9e:63:92:7b:12:2e:c4:1f:e8:20:e7:af:e0:3c:c6:04:5f:
fb:1d:ad:c5:37:5f:68:85:10:14:a3:38:73:9f:cb:e9:fb:d7:
86:f5:86:21:ae:0e:4e:43:ff:b9:50:0c:3b:8d:f5:ed:c1:1d:
13:b2:66:01:ee:6a:56:92:a2:fc:47:f8:ef:fc:16:3f:ff:f9:
23:55:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:33:02 2025 by rpki-client