Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: jG3JRj6qlq1d/flpHSOp7Bw5zupaBiA9mHhHUJARefU=
Subject key identifier: 70:F6:77:49:46:EB:AF:D8:22:7A:9A:EB:47:0C:15:3E:4F:A6:42:12
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 0196A2ADC97900A72E33BBE2EE784937F570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0C16
Signing time: Mon 05 May 2025 23:00:20 +0000
Manifest this update: Mon 05 May 2025 23:00:20 +0000
Manifest next update: Tue 06 May 2025 23:00:20 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: IZNqHA0P4xjlO4xGfhT95Yrnbwod6JMGY95kxcyMqW8=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:c9:79:00:a7:2e:33:bb:e2:ee:78:49:37:f5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: May 5 23:00:20 2025 GMT
Not After : May 6 23:00:20 2025 GMT
Subject: CN=70f6774946ebafd8227a9aeb470c153e4fa64212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:10:ad:49:32:64:da:e2:0d:1c:80:da:f7:
e0:ea:0b:8b:ce:f1:88:a9:58:87:bf:7a:e8:88:82:
39:d2:c3:e3:d2:d4:ac:c2:e2:a2:f4:99:fa:88:66:
6b:2a:1b:94:5d:b6:c3:6c:09:c3:16:6c:8f:97:af:
26:54:ab:52:9c:18:c7:3b:e2:90:a3:6c:a5:5d:ca:
5f:80:b0:f3:3d:5f:fd:50:89:fa:3a:77:69:cc:d6:
66:4a:9f:db:3b:57:a5:bb:0e:4a:d3:3c:8b:47:5f:
a4:84:3e:51:ae:86:e3:60:4e:8c:e3:2c:6e:8c:3a:
14:2e:32:62:76:42:2e:88:38:30:6d:63:14:e5:25:
92:5f:f7:ae:2d:36:bd:d9:09:37:dc:16:00:df:f3:
dd:19:e5:10:e3:16:94:06:cc:ac:ca:8b:8d:8d:f2:
d6:53:ab:27:d0:1e:8a:73:9c:2f:16:e2:20:9d:6f:
eb:e6:a7:03:dc:98:de:35:23:3b:00:2c:37:53:3d:
3b:79:d3:cb:5a:1e:8e:9c:60:a3:5f:75:7c:0e:13:
26:53:bf:49:8c:7b:f8:05:99:31:da:12:56:39:de:
ac:f9:1c:6b:31:7c:a2:36:90:87:32:47:fb:ef:7f:
35:f7:20:23:8f:5b:d2:f7:33:b1:65:57:38:bd:27:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:77:49:46:EB:AF:D8:22:7A:9A:EB:47:0C:15:3E:4F:A6:42:12
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a5:67:41:54:88:ff:46:c1:3a:83:7a:98:3a:c2:e4:78:58:
29:ae:31:78:ef:00:f2:e2:b6:4f:7a:05:e9:1d:d0:08:43:7e:
a7:cf:6f:b0:0a:a7:49:9f:3e:01:a4:65:03:08:5e:4b:97:bd:
5b:e2:4f:48:1b:4e:44:c6:6b:b0:fe:e4:7e:1f:fc:08:c2:df:
8f:5c:3c:d6:a8:f5:08:48:39:8f:7a:cf:ef:e2:7d:88:3e:11:
31:75:24:11:02:e2:55:98:70:01:be:5d:66:29:a1:96:d7:cc:
6d:e0:85:34:9f:65:7a:bb:00:e5:c1:ee:ce:7f:3a:50:58:e2:
a6:75:f8:64:bb:2d:a7:c0:b2:a7:ca:70:eb:2e:af:29:78:77:
01:24:7e:62:13:ac:d2:e5:eb:99:6f:14:b5:51:35:0d:c9:e4:
7e:d2:a5:06:86:5f:53:37:fd:b7:a4:3b:0d:a7:d3:0a:fa:f5:
5e:fa:b3:40:ae:c1:e0:59:09:fe:89:14:ce:37:d9:0d:e9:7b:
66:2d:35:2a:56:45:06:18:e6:59:e8:63:5b:85:77:88:8f:c2:
f8:41:d9:9e:bf:9b:cd:2b:81:81:42:58:15:d9:36:d4:3d:d0:
a9:09:55:30:ae:6b:17:48:3d:97:ee:37:3d:28:42:6a:e7:8c:
f3:18:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:37:21 2025 by rpki-client