Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: JHV8fOYNB6UJF8hWRVpg64O/vnmdChuGopo6se4sOkc=
Subject key identifier: A8:9D:46:0D:90:7B:39:F3:B0:FD:E0:44:54:8C:1A:11:46:42:23:87
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 0196A0F69F6C564ACD5B2A8E84E00EBB47DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0277
Signing time: Mon 05 May 2025 15:00:39 +0000
Manifest this update: Mon 05 May 2025 15:00:39 +0000
Manifest next update: Tue 06 May 2025 15:00:39 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: GX7XK0DB5KW9Xg3bEFM+x9nn+ZYeuKqN5APGMYqBgm8=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:9f:6c:56:4a:cd:5b:2a:8e:84:e0:0e:bb:47:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: May 5 15:00:39 2025 GMT
Not After : May 6 15:00:39 2025 GMT
Subject: CN=a89d460d907b39f3b0fde044548c1a1146422387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:2a:ce:89:f3:12:90:1f:31:b5:44:28:6c:
ee:8f:d7:80:c0:db:76:a0:fd:56:fa:d7:42:2d:0a:
e0:ba:cb:0e:e4:13:e8:5f:b1:7b:71:96:5f:a4:59:
5a:dd:ff:1f:4a:5e:b8:33:72:ad:4f:d7:4c:a6:af:
9a:cd:69:52:ab:43:19:ab:26:db:b0:99:65:f6:43:
a3:e8:aa:7f:65:b3:9b:57:4e:f3:a7:d1:7d:66:f3:
53:5b:16:6d:e1:e0:86:15:35:0b:12:74:cc:71:32:
37:e8:ae:60:06:43:0b:2b:c4:f5:f4:ab:46:a8:c4:
81:7c:22:fe:0f:17:d6:5a:94:5b:39:5f:3b:f0:f0:
eb:17:21:0a:7a:22:d8:8e:ed:91:18:2f:32:db:50:
9b:60:b6:4b:52:a6:d9:33:eb:42:95:a4:44:28:bc:
2f:b3:ad:37:d0:fd:7b:d4:2f:a4:cb:22:00:33:f4:
75:0b:c9:dd:fb:a3:f7:55:ca:d8:d4:ae:0d:88:71:
7d:49:b7:21:b3:76:91:60:68:6b:3d:71:36:3b:4a:
db:0b:af:71:fc:c6:6a:67:b7:1a:5c:71:db:a0:dc:
94:d5:a9:ae:da:1a:14:8b:18:83:c4:46:65:94:25:
7a:5c:fc:19:9f:ec:62:76:38:29:80:37:ec:fc:e7:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:46:0D:90:7B:39:F3:B0:FD:E0:44:54:8C:1A:11:46:42:23:87
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:82:6f:a8:47:b6:05:d8:6c:49:a3:e0:2b:e8:a6:04:15:3b:
98:66:20:6f:43:3c:5f:10:dd:23:25:98:8c:1e:64:06:3c:5f:
81:34:6f:0a:46:19:0b:e6:3c:dc:c9:a0:99:a4:d4:cf:8e:08:
bd:72:c4:a4:f6:33:61:33:d3:b0:e1:f8:de:90:80:05:b2:f3:
e5:bb:7c:9a:a7:35:7d:a2:6a:3a:f1:df:08:bf:4c:41:89:81:
c8:f7:6a:9e:c8:fe:29:2a:d3:50:e7:69:39:48:d6:6f:44:4f:
8f:5b:2d:18:60:65:30:e7:76:74:12:f0:9a:08:6b:53:05:b1:
65:71:fe:f7:af:37:10:58:ac:29:1d:b3:66:82:f4:e0:07:b1:
8f:2f:6b:10:a3:68:6d:4a:91:42:86:15:64:3a:67:60:7a:2a:
e7:d4:2f:5c:08:b4:a5:2a:ed:ae:08:c3:02:0b:e3:8e:bc:24:
a2:3f:22:78:69:7b:62:e7:31:c7:b5:c6:e4:7d:83:9b:4b:d4:
47:6a:ff:6d:f0:5d:4f:49:4c:bd:be:7d:6f:c8:5d:52:f4:10:
1a:8b:de:8f:99:0a:6a:79:f4:75:9f:96:1c:84:ae:6f:93:a6:
10:85:78:d5:43:bc:cf:52:b8:15:b4:4e:4a:46:e6:c5:e9:77:
91:cc:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:59:44 2025 by rpki-client