Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: 0FKcqlXzqLsEmV3WP04GtyE6DcnVFKH0IKHiPbKr+p0=
Subject key identifier: B3:84:43:1D:94:5D:85:F9:8E:BD:97:FD:AB:5C:CF:95:63:08:30:02
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 0196A164C01833B00C1A5F198CE1C023FBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 14B7
Signing time: Mon 05 May 2025 17:00:56 +0000
Manifest this update: Mon 05 May 2025 17:00:56 +0000
Manifest next update: Tue 06 May 2025 17:00:56 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: 53oTq4+bo2nRK+HkDouybNtLR5SwSG78kSSxSPIGB2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:c0:18:33:b0:0c:1a:5f:19:8c:e1:c0:23:fb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: May 5 17:00:56 2025 GMT
Not After : May 6 17:00:56 2025 GMT
Subject: CN=b384431d945d85f98ebd97fdab5ccf9563083002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:f7:df:34:25:71:d6:02:9e:61:2c:a5:56:
f1:63:8d:ab:d4:3c:4b:97:0b:b1:d0:45:0a:4b:5b:
d6:24:8e:ad:e9:cb:3b:54:f8:59:5c:08:3d:4c:83:
5c:28:a7:0a:83:6b:64:34:ad:5a:8a:90:e6:73:83:
c7:de:f2:4f:a6:e6:58:a5:6e:c7:35:34:c3:f6:5d:
b5:f5:87:25:69:39:d9:ef:73:eb:81:df:2b:ef:74:
d6:e4:b7:49:90:0f:02:56:f6:f0:5c:e3:cf:6c:56:
b0:37:26:c3:0e:76:1b:3e:1d:24:cc:5e:55:7b:62:
4b:c7:67:03:79:52:06:0a:aa:5b:81:65:23:72:2b:
6e:cc:29:61:46:88:60:f3:d1:7a:84:d3:b7:bb:ee:
09:0c:d3:ce:e6:f8:99:bb:84:bc:d3:1f:3b:22:ec:
33:54:38:93:60:d5:89:6a:4b:c3:8d:6a:29:f1:bc:
dc:41:40:60:a2:65:cf:f2:9d:9b:a1:1e:1a:c6:b6:
32:b4:a6:c9:f4:d1:58:0d:5c:de:66:ec:d1:66:76:
fd:e8:fd:41:63:23:29:d5:c1:9c:ef:b9:68:26:15:
b5:78:9f:2e:50:b8:e8:b4:36:d6:da:7a:fa:2f:2e:
bf:f4:7b:dc:d5:45:98:72:8e:be:bf:14:8f:fb:97:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:43:1D:94:5D:85:F9:8E:BD:97:FD:AB:5C:CF:95:63:08:30:02
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c7:a3:04:12:c7:62:7d:b2:9b:ab:79:7a:d4:06:42:4f:21:
24:02:56:86:2c:bc:cc:10:db:5a:75:96:63:7b:e1:ad:e9:5b:
be:f6:39:df:9e:58:79:97:c4:28:b7:2b:f8:99:0f:57:11:23:
e1:bd:da:24:a3:ff:cd:31:a5:d9:14:8d:ff:6a:d4:5e:eb:b4:
8d:c1:23:a7:2b:f8:ef:d8:ab:3e:b4:f0:86:1e:ff:cf:bf:cc:
21:33:8e:54:06:86:8a:12:ed:b6:8d:dc:51:06:a4:62:22:78:
36:84:65:a3:cc:88:29:a3:41:46:08:eb:ef:75:a6:e2:b4:19:
f5:a2:bc:3f:bf:9d:e2:44:2e:78:c5:32:ac:e6:35:0d:da:12:
ed:d5:28:c1:e7:12:fb:17:9e:9f:66:53:3b:17:7c:f7:7e:95:
db:7b:8f:a4:e7:4d:ef:a9:99:4a:25:0b:0a:77:ae:79:5b:a3:
6b:fe:05:46:a8:97:b1:f7:b4:3b:f8:9d:49:e3:69:f0:fe:73:
0b:1d:1f:28:86:fb:54:1d:e8:e8:f9:43:05:b2:8b:b5:fa:15:
ec:33:c0:a1:9c:14:fd:65:bd:9a:a3:86:1f:8a:35:27:18:2f:
41:fe:25:38:35:ec:e9:21:2a:8a:2c:0e:c4:68:1d:a1:60:9a:
bc:1c:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:22:34 2025 by rpki-client