Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: wagXZgbEB/yvmN8OcmgN57qPGEvdnPpeovzsI7qJaJM=
Subject key identifier: 03:0C:23:C3:85:9A:1E:80:AA:4D:86:21:0F:B3:68:B3:81:6D:8A:BE
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 019655383FFEAFA4622CB521A2D95D98E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:01:11 +0000
Manifest this update: Sun 20 Apr 2025 22:01:11 +0000
Manifest next update: Mon 21 Apr 2025 22:01:11 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: 4MzhsFmoZOmDD7BUCngMzZ4fUKoUG5mHW8UXmMtlOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:3f:fe:af:a4:62:2c:b5:21:a2:d9:5d:98:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Apr 20 22:01:11 2025 GMT
Not After : Apr 21 22:01:11 2025 GMT
Subject: CN=030c23c3859a1e80aa4d86210fb368b3816d8abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:5d:89:cf:fb:5f:89:3d:40:98:21:f0:48:
f9:f3:45:7e:35:dc:4b:f5:5a:92:dc:1b:fe:db:57:
03:bf:00:49:65:ff:b1:6c:91:0c:8d:1f:01:b5:4d:
75:7e:ce:1e:e2:14:56:e5:16:20:bd:da:07:0c:aa:
f9:5a:80:a3:3e:1c:31:80:4f:21:33:9b:64:bd:0b:
7e:db:b7:ca:56:10:55:c6:fa:23:9b:99:d9:27:b4:
ef:f8:98:7c:f7:be:16:88:94:4c:8e:ea:29:86:b1:
66:8f:51:6f:5a:66:67:e1:82:64:73:32:e9:ed:a3:
b6:1e:fd:bf:88:14:43:20:6c:91:4c:22:2b:f4:0f:
42:9a:1e:d4:44:31:b5:2a:38:0f:7a:75:bf:6c:8b:
58:f3:61:19:77:51:66:45:3f:4b:fb:f2:e8:ad:11:
ef:cf:35:bd:f5:6f:2c:56:c6:97:02:75:c4:6b:6e:
ea:7c:f3:4a:75:5a:a1:5a:b7:fa:77:1b:9a:dd:5b:
89:88:07:6b:dc:9b:02:8a:d5:03:1d:8c:d7:fe:8e:
83:f8:20:d1:73:f0:93:79:56:f6:2a:8c:cd:da:b9:
c3:39:b4:7b:9e:bd:31:0c:72:07:53:fd:53:47:41:
3f:36:fd:7f:f4:c7:dc:4d:b8:ad:52:d5:96:75:05:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:23:C3:85:9A:1E:80:AA:4D:86:21:0F:B3:68:B3:81:6D:8A:BE
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:5e:ea:cd:f3:11:97:ee:be:e7:40:8a:d0:38:ca:75:33:
3f:a3:d2:6c:27:4e:03:de:b0:27:17:78:cf:e0:73:a7:68:b6:
e0:9e:1d:00:65:72:f3:ad:69:d4:62:4e:81:be:51:4c:8c:97:
3c:22:42:5e:a7:3b:74:38:42:66:3f:f1:45:30:94:68:09:c9:
27:76:cb:02:84:34:79:d6:5c:d0:5a:a7:a8:e9:8c:d7:c5:8e:
38:e0:61:45:5a:d1:53:05:fe:95:0e:0a:e5:ab:71:f6:20:e4:
4f:29:d8:0f:08:b8:1f:be:72:bf:8f:87:58:52:f7:d2:72:00:
71:e7:47:05:3e:25:6b:5b:56:d0:1d:2e:fd:e9:15:e1:49:32:
e8:20:f6:ed:58:47:29:4a:39:75:d7:bb:2e:0a:61:78:1e:e6:
9e:c2:00:97:67:7c:ed:8b:33:18:17:19:db:9e:4e:76:4b:71:
6c:e3:f7:8d:59:07:de:d5:d0:d3:cd:c9:3d:a9:98:39:6b:59:
8a:71:b0:03:10:6e:58:e1:f1:2a:76:c2:16:4f:9b:03:a0:4b:
77:97:3b:b9:9e:51:19:0e:2f:97:59:5e:a7:48:7c:b8:b4:fd:
d7:fe:fc:e4:43:c8:68:27:90:11:1d:63:ef:27:1e:01:1b:c5:
2a:99:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:01:20 2025 by rpki-client