Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: QhAsUbv4tTcfb0phnwp8Mew0eBb6j/e+xePo5IBdP40=
Subject key identifier: DC:BD:61:CF:27:39:9C:1A:1F:ED:AC:05:AF:F2:12:35:C0:D0:54:D3
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 01965613114E951B50600F4399BADFEEDB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1490
Signing time: Mon 21 Apr 2025 02:00:12 +0000
Manifest this update: Mon 21 Apr 2025 02:00:12 +0000
Manifest next update: Tue 22 Apr 2025 02:00:12 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: U4FiGn7OK6QOhItfWFHW8Ybk8QQyEdPipvV5ot3wQbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:11:4e:95:1b:50:60:0f:43:99:ba:df:ee:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Apr 21 02:00:12 2025 GMT
Not After : Apr 22 02:00:12 2025 GMT
Subject: CN=dcbd61cf27399c1a1fedac05aff21235c0d054d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:1b:3c:96:ed:69:e2:4a:ae:f1:85:fc:cf:
cf:50:82:a2:90:78:f4:49:c8:85:f0:0f:00:09:46:
00:33:4c:fb:22:76:eb:c0:ab:7d:65:53:fb:48:37:
57:35:fe:fc:15:c3:7e:a9:eb:10:3a:c3:0e:ce:1b:
4c:e1:76:13:aa:14:02:bd:6e:29:67:c0:14:a4:a9:
2a:dd:7c:82:2e:c6:2e:7f:df:ef:f8:3c:4f:c3:66:
dd:db:0b:51:cb:05:ad:01:c0:26:82:a1:08:0b:ac:
f8:fe:d3:af:5d:d9:0f:59:a0:d6:ed:4d:9c:bc:91:
35:e2:57:f4:1d:c8:5d:b3:ad:f2:06:74:2f:e2:57:
5f:16:49:c9:42:0a:40:0c:22:0c:a9:35:9c:12:94:
fd:f7:67:39:5b:82:b8:ff:a9:50:f2:8a:35:94:83:
57:b9:d0:fd:12:5b:0c:a4:4a:6f:68:e0:53:b6:58:
aa:5a:8c:5e:c0:e0:c1:0b:90:d6:aa:1a:67:e7:13:
ce:cc:11:f5:4e:2b:58:41:e8:e5:a5:ee:e2:b8:bc:
76:af:b6:29:68:a6:36:40:18:37:e9:e6:43:1c:72:
43:8a:ae:5e:95:9f:0a:e4:81:6e:6e:9b:51:b1:ad:
b5:1d:11:74:c8:39:ea:63:bc:ea:ea:87:1c:ee:34:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:61:CF:27:39:9C:1A:1F:ED:AC:05:AF:F2:12:35:C0:D0:54:D3
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:a5:44:a4:ea:d4:f2:b5:37:c1:ad:f6:20:53:49:3c:fa:
42:7f:04:06:e0:9f:2e:a7:55:e0:bf:2b:4d:32:5f:1c:94:97:
ac:7d:27:c6:0e:81:84:8a:74:eb:dd:fd:dd:0c:bc:e8:84:8c:
fa:ab:18:57:9e:c3:6d:81:b3:95:09:f9:e2:39:fd:f8:f3:97:
4a:57:22:24:e5:51:e9:31:dd:d8:96:3d:ea:ac:88:e5:70:76:
15:6f:4f:d9:3f:2b:31:31:00:fa:27:47:e8:98:93:ac:b0:5a:
cd:cb:4d:53:47:d6:88:a7:b5:99:8f:2a:1a:f7:74:1a:e8:4a:
78:63:7f:83:01:6d:1d:b8:40:da:03:36:f5:fd:51:a8:06:8d:
9a:d9:9e:40:0a:c0:de:1f:6e:21:9e:89:8a:b7:0c:cc:d0:57:
70:0f:99:97:8e:ff:b3:f2:2b:52:b6:fa:31:8c:55:ce:36:06:
d3:b3:0a:36:1e:ce:ef:11:69:43:e1:22:0f:60:0c:14:59:1c:
5b:22:dc:1b:2d:e2:03:b0:e2:11:87:86:7f:d4:41:31:f7:05:
9c:5e:58:56:e1:8e:bf:a3:77:07:ab:31:1b:87:bf:77:d6:3e:
9c:49:be:f2:c3:d0:4b:8b:c5:38:5e:50:ef:56:fc:7b:36:b5:
73:93:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:12 2025 by rpki-client