
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: Xg5xri5lH5DUQJIKy8sX/5e6UW/sXROn9jX5FccTkeo=
Subject key identifier: 01:9B:E7:CF:3C:85:40:46:D3:37:16:68:21:60:8C:AC:35:92:19:9F
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 01974AE8FBB8436CE7B798221D1F6CD7ADDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0BF3
Signing time: Sat 07 Jun 2025 15:01:12 +0000
Manifest this update: Sat 07 Jun 2025 15:01:12 +0000
Manifest next update: Sun 08 Jun 2025 15:01:12 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: BMf1lfAKQ+VpCZu3qNSPwzLlpc5ev21930WLFNI1aAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:fb:b8:43:6c:e7:b7:98:22:1d:1f:6c:d7:ad:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Jun 7 15:01:12 2025 GMT
Not After : Jun 8 15:01:12 2025 GMT
Subject: CN=019be7cf3c854046d337166821608cac3592199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:44:30:48:c3:91:87:9b:25:3e:87:59:73:
40:6c:9a:59:57:88:0f:5f:2b:d4:d0:67:1e:00:cd:
16:19:9c:c0:08:29:5f:f5:b1:0d:ae:73:33:3d:0f:
46:29:7a:9d:ae:92:c8:89:3c:92:7d:6d:cb:c7:48:
1a:7f:48:b8:25:79:cd:5c:02:15:80:32:5e:3b:54:
df:16:c8:9c:5b:32:9e:b9:cc:eb:50:c2:a3:39:15:
4f:d0:9e:85:02:71:9c:17:af:30:30:0a:ad:a9:7e:
3e:d5:34:d6:9c:30:4f:bd:34:49:aa:63:e4:1b:44:
26:53:6e:e1:4d:ef:16:3b:a3:6a:12:6b:b4:e5:be:
41:5b:97:dd:86:48:cf:81:29:18:f0:db:28:f1:a4:
a1:69:56:80:70:69:0e:c5:59:6e:85:8e:a6:27:64:
30:7f:67:96:c6:12:a0:f0:b7:d1:76:f3:19:7d:b5:
3c:26:d1:e4:3a:fa:e7:84:73:97:cc:41:d2:3e:6c:
f1:97:43:ad:b3:ee:d3:63:68:76:b8:ed:ce:ad:fc:
67:74:bd:22:b5:e1:aa:c2:8a:01:f4:7f:8f:f3:0c:
de:e9:c5:46:02:13:11:08:e5:f6:c3:15:c2:01:dc:
57:2a:ee:fc:87:72:94:85:74:05:29:b2:3a:90:02:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:E7:CF:3C:85:40:46:D3:37:16:68:21:60:8C:AC:35:92:19:9F
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:a2:a1:f4:61:06:11:c5:a9:83:2a:69:62:1a:45:bb:4f:
e7:38:ea:41:86:f5:9e:36:4f:79:2c:be:ac:fd:c3:4c:bb:c6:
65:ae:49:b8:02:dc:68:d2:3c:f3:d8:bd:50:46:63:11:39:02:
05:91:a1:a7:fe:2c:d9:33:85:cc:7e:2b:61:bc:3b:35:18:6d:
4e:61:e0:62:e5:00:50:62:39:b4:67:81:46:5a:11:20:40:0a:
6c:49:19:10:f7:95:76:49:e1:46:d9:e8:54:7a:03:6d:16:61:
71:41:a1:10:e5:2d:39:dd:77:b7:a8:19:03:7e:81:61:22:a9:
59:be:11:ad:52:97:f1:ad:df:73:d5:76:96:fe:6e:a8:d3:4a:
ce:10:2e:08:55:73:52:cb:dc:dc:b8:fe:41:fd:e6:e3:72:62:
46:46:66:b3:74:28:00:38:22:5d:4b:7b:2b:09:8a:2c:56:4c:
be:42:b2:87:b6:c7:4f:c0:0f:24:bd:7c:ae:49:28:44:f6:88:
eb:ca:6a:82:c8:5a:fe:d3:3a:8c:52:23:06:40:95:40:47:c5:
ef:0a:d8:6b:a3:8c:77:7d:b0:49:3a:9f:78:aa:13:9f:53:10:
96:4d:52:5f:4f:a3:49:72:21:8f:1a:43:a7:42:8e:3d:80:b8:
ad:5d:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:19 2025 by rpki-client