Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier: Xm8MRnrYrR4JlEItZ0u8EhCbvlvqRLEqxrapYmo1Hkk=
Subject key identifier: 23:63:B4:40:FA:B9:66:92:68:FB:95:80:E3:BF:4A:BB:B4:09:18:1B
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 0196586F81F128E95E74DA6CCE8F246E002A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number: 15
Signing time: Mon 21 Apr 2025 13:00:24 +0000
Manifest this update: Mon 21 Apr 2025 13:00:24 +0000
Manifest next update: Tue 22 Apr 2025 13:00:24 +0000
Files and hashes: 1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: 0I44wYqGpUJ2R6bjj10231wMOzAxCAtbbX8UsUx8U0A=)
2: fclhLZaCZsD4mZ3Ux8ve5zcOTYg.roa (hash: g0cDDvJ4XF055K+oEX9g59XfHmQcvBLdWm7+xMxjyb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:81:f1:28:e9:5e:74:da:6c:ce:8f:24:6e:00:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Apr 21 13:00:24 2025 GMT
Not After : Apr 22 13:00:24 2025 GMT
Subject: CN=2363b440fab9669268fb9580e3bf4abbb409181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:77:28:79:56:1d:78:cd:f3:d1:2b:e8:fb:
d5:7e:4c:d3:7b:65:d4:16:a2:6a:ca:38:8d:ca:68:
d5:a3:e1:9d:7d:99:f6:ef:94:e7:05:b8:88:9d:ad:
6a:b9:ea:cf:79:a1:29:62:d8:c6:ab:26:33:c9:4b:
50:fb:c8:aa:5b:73:bf:1a:81:c3:48:dd:b3:da:9c:
03:6d:31:d5:b0:7f:7d:6b:88:1e:d5:05:5e:1d:cd:
ea:14:9d:4b:e1:7c:52:05:34:76:ed:41:b6:59:fd:
1d:8e:83:9b:ab:97:2e:30:5a:07:2e:1c:ac:7f:b0:
9a:70:51:95:4a:24:eb:ce:d2:7c:7b:a2:a5:ec:c6:
03:d0:a1:a9:2d:fd:79:7c:4c:e4:64:13:a1:00:17:
d0:c1:bf:74:43:b6:64:00:1b:f1:91:7b:2c:fd:85:
1c:7b:c6:42:36:fd:11:d3:97:36:d7:e9:7f:24:dd:
7d:f9:26:6a:6f:25:4c:1f:e5:2a:cb:02:50:89:b6:
24:a0:7e:5b:f0:0a:61:ed:57:85:e6:7b:9d:28:47:
32:ae:ed:bc:63:3a:1a:fc:60:1f:fc:71:a4:ca:97:
6a:6d:6f:f7:8f:72:11:78:b9:b2:12:e2:a3:da:e8:
84:a2:4b:a1:39:07:ca:c4:7d:5d:52:4d:6d:4a:7a:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:B4:40:FA:B9:66:92:68:FB:95:80:E3:BF:4A:BB:B4:09:18:1B
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:e5:c1:a0:8c:da:1c:ac:a1:46:8c:b7:81:51:87:6d:78:
5d:b4:e6:8c:83:4c:e5:d7:99:48:43:8f:e7:3c:61:66:a7:67:
30:78:49:08:01:d0:b0:32:d3:9c:2a:f3:12:6b:11:9e:7a:24:
62:5c:ae:5d:21:17:f8:1a:5c:91:4c:e1:5f:4d:c0:61:6e:98:
46:14:8b:f7:a7:e0:86:24:4a:3e:9b:e4:89:9b:3f:53:76:7b:
9e:dd:e5:4b:1a:fd:36:98:18:e2:f0:f4:43:2f:ac:55:0c:7a:
04:a8:aa:ba:b5:1f:60:d6:e5:96:41:89:b6:e3:e5:4f:4c:78:
7c:05:64:9b:44:c5:ea:8d:ae:06:77:49:d0:b7:3e:b2:9e:a4:
cf:b9:d9:ae:df:5b:5d:07:ca:e4:7f:f4:a1:de:ba:00:71:fe:
4e:28:78:20:0e:87:d6:71:ec:96:5a:b0:75:ef:2e:6f:67:67:
10:5c:3f:c7:c1:3c:c9:b8:61:99:9c:a9:96:2b:75:bb:50:11:
ce:ae:2b:80:33:eb:22:cd:72:f2:78:5d:74:04:53:76:f7:af:
a6:5f:23:62:f9:30:2b:b3:af:2c:39:8c:c4:60:22:82:75:df:
c0:1c:94:6c:a4:74:8e:e0:96:aa:cf:28:93:c8:f2:7b:16:82:
3a:b0:d8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb4HxKOledNpszo8kbgAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWMxZmFhOTc4M2RmYWIyYjdhNTNkYTNmYjBmZGVmNGNj
ZmVhZTUwHhcNMjUwNDIxMTMwMDI0WhcNMjUwNDIyMTMwMDI0WjAzMTEwLwYDVQQD
EygyMzYzYjQ0MGZhYjk2NjkyNjhmYjk1ODBlM2JmNGFiYmI0MDkxODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvt3KHlWHXjN89Er6PvVfkzTe2XU
FqJqyjiNymjVo+GdfZn275TnBbiIna1querPeaEpYtjGqyYzyUtQ+8iqW3O/GoHD
SN2z2pwDbTHVsH99a4ge1QVeHc3qFJ1L4XxSBTR27UG2Wf0djoObq5cuMFoHLhys
f7CacFGVSiTrztJ8e6Kl7MYD0KGpLf15fEzkZBOhABfQwb90Q7ZkABvxkXss/YUc
e8ZCNv0R05c21+l/JN19+SZqbyVMH+UqywJQibYkoH5b8Aph7VeF5nudKEcyru28
Yzoa/GAf/HGkypdqbW/3j3IReLmyEuKj2uiEokuhOQfKxH1dUk1tSnrRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNjtED6uWaSaPuVgOO/Sru0CRgbMB8GA1UdIwQY
MBaAFGqcH6qXg9+rK3pT2j+w/e9Mz+rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYt
ZDJiYjdjNzk1YTg2LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYtZDJiYjdjNzk1YTg2
LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiM7lwaCM
2hysoUaMt4FRh214XbTmjINM5deZSEOP5zxhZqdnMHhJCAHQsDLTnCrzEmsRnnok
YlyuXSEX+BpckUzhX03AYW6YRhSL96fghiRKPpvkiZs/U3Z7nt3lSxr9NpgY4vD0
Qy+sVQx6BKiqurUfYNbllkGJtuPlT0x4fAVkm0TF6o2uBndJ0Lc+sp6kz7nZrt9b
XQfK5H/0od66AHH+Tih4IA6H1nHsllqwde8ub2dnEFw/x8E8ybhhmZyplit1u1AR
zq4rgDPrIs1y8nhddARTdvevpl8jYvkwK7OvLDmMxGAignXfwByUbKR0juCWqs8o
k8jyexaCOrDYjg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:51 2025 by rpki-client