Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: cVB5ogaYgqN1Lm2pDzAwW1V73mmN0nc0MLsEDdAnyAA=
Subject key identifier: A5:E5:96:23:9E:93:9E:C2:61:EF:30:C7:FF:47:0B:54:8F:7B:39:8A
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 0196A2E4EAC68D44B8DA31B79BEB54C0A455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 00:00:33 +0000
Manifest this update: Tue 06 May 2025 00:00:33 +0000
Manifest next update: Wed 07 May 2025 00:00:33 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: V1oSs4WWJAFEuQDCscMO7WDSjnCiEg+mpw/s741YOU8=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:ea:c6:8d:44:b8:da:31:b7:9b:eb:54:c0:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: May 6 00:00:33 2025 GMT
Not After : May 7 00:00:33 2025 GMT
Subject: CN=a5e596239e939ec261ef30c7ff470b548f7b398a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:29:69:03:43:20:4b:3d:c2:9d:71:bc:17:
cc:b2:4b:2d:d1:3c:49:45:65:1d:c3:0a:79:ec:71:
b7:0f:fa:59:13:de:f6:c3:eb:a7:4c:18:4b:bb:57:
cd:b8:cd:c2:88:2e:57:58:3b:09:5d:41:f2:95:bf:
7b:37:27:8f:44:8f:fa:39:c8:ad:ef:e1:99:29:fc:
fa:f3:b4:b6:6b:9a:34:94:1f:b7:83:fd:77:8f:cc:
cb:12:88:c8:54:0e:a6:a6:c0:fd:b6:b4:84:2c:5a:
37:f4:2c:a0:40:41:3a:75:b4:ed:50:b7:87:57:0f:
a5:66:df:9e:d3:20:18:52:b4:3e:7f:72:ef:27:e9:
63:03:ca:7d:50:fe:ce:46:3e:83:92:c0:d8:09:8a:
2d:d1:5f:6d:e3:26:95:7c:cb:12:c8:8c:06:e5:6b:
09:54:de:7e:b2:ad:c7:27:45:18:0b:7f:35:5e:5b:
4c:0c:2f:87:35:1a:70:f4:cd:da:61:86:e5:76:3a:
91:8e:71:cb:b1:ce:2e:f3:a9:4e:ae:b7:38:e3:b9:
81:60:5e:87:fa:47:93:5e:cd:f1:42:70:36:4d:da:
82:64:e4:5b:78:5b:5d:a1:e2:70:50:eb:4e:26:94:
b2:48:6f:98:03:fc:13:13:85:48:c8:14:83:ba:05:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:96:23:9E:93:9E:C2:61:EF:30:C7:FF:47:0B:54:8F:7B:39:8A
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ea:5c:f1:59:e9:06:22:8e:a2:8e:11:b3:f9:16:b2:09:a7:
fc:40:09:6a:af:79:ef:60:4f:64:0f:c0:b9:bd:31:e9:22:06:
21:f8:93:1d:bf:71:06:e9:19:5a:60:05:63:71:da:5e:45:f7:
97:e5:10:b0:56:49:bd:91:97:1a:86:b5:e0:8b:4e:c9:e4:83:
5d:b5:27:f7:62:bb:65:33:9b:7f:78:ad:d7:22:cb:99:cf:96:
ec:f7:9f:19:a7:31:82:79:d5:15:f6:04:86:1f:d1:e4:0b:25:
af:73:9f:60:a3:b1:c8:80:49:42:d1:e6:7f:a1:4c:30:e7:d3:
93:d7:09:30:1f:64:73:91:21:a9:70:e9:8e:47:32:a0:a0:42:
85:a0:2b:bd:9a:68:7a:0e:e3:1e:3c:ea:d7:6b:f3:3e:c5:44:
7a:24:1d:fb:ad:f2:35:42:01:c7:5e:d8:ee:8a:a3:f5:cd:0d:
c8:80:c0:5f:21:5c:99:a5:8c:1c:01:c9:ae:2e:fc:24:06:52:
3e:ab:6b:42:ca:7a:df:a1:16:36:7d:23:ab:e6:bc:67:78:db:
da:d0:f6:e0:1b:ec:aa:8d:5d:8e:2c:c2:0d:aa:fb:1f:12:9d:
d7:62:25:ad:39:c5:22:69:38:1d:f8:16:fd:29:16:9b:4e:a4:
af:64:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:23:18 2025 by rpki-client