Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: pMneqaCLBsQLqRDX1RPe6dvYtGgQUdZujQBrHcLzZ6A=
Subject key identifier: 7F:B4:5B:34:D4:5B:7E:FA:B5:57:6E:C2:D7:97:E4:39:CB:C3:2B:72
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01964DB4CCC56AA4014BD811E294420D3350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0BEA
Signing time: Sat 19 Apr 2025 11:00:16 +0000
Manifest this update: Sat 19 Apr 2025 11:00:16 +0000
Manifest next update: Sun 20 Apr 2025 11:00:16 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: 3vSYL5YXVsl3ey2nGnUX4AOD1Cyn4Gd74WcqPQMOj3Q=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:cc:c5:6a:a4:01:4b:d8:11:e2:94:42:0d:33:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Apr 19 11:00:16 2025 GMT
Not After : Apr 20 11:00:16 2025 GMT
Subject: CN=7fb45b34d45b7efab5576ec2d797e439cbc32b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:98:96:79:b1:ec:b3:7a:75:13:36:d8:10:
0f:8d:52:b4:96:1a:c7:d5:f2:d2:7a:03:0f:47:e5:
52:9a:e0:c4:a9:96:64:cf:4d:ad:f0:83:8a:a6:e0:
07:be:5d:8f:9b:63:f1:3d:2e:98:c3:5e:2a:a9:e6:
37:89:e4:66:b2:cd:03:e4:80:75:88:88:74:ef:7f:
32:8d:86:0f:62:ee:3e:5e:55:3a:3c:b7:0f:fb:82:
a5:52:9b:29:af:82:5a:24:a0:f6:6b:7e:a1:d7:ec:
13:f7:3f:6c:3f:e3:a9:b4:d2:8f:d1:f8:66:cd:99:
b1:07:a5:41:89:02:c4:06:ff:ce:ec:87:d3:16:92:
f5:1b:a7:97:15:c6:4b:89:f9:4e:46:9b:34:15:5d:
38:cf:c5:b1:5d:77:ce:d5:6d:a1:ec:82:be:29:25:
39:6f:17:8d:1c:93:d1:d6:c7:bb:76:70:0f:57:4e:
ad:44:c0:89:5f:3b:d2:c8:94:09:4d:1a:ae:88:bc:
90:c0:1c:96:d9:42:52:48:4f:e5:45:ae:fc:ff:f6:
4f:bc:93:70:64:e4:6c:b1:5b:61:52:82:d2:23:4c:
52:42:51:65:2b:22:d7:93:8c:22:dc:0b:6c:cb:96:
82:1a:f0:c8:11:cf:b2:80:72:74:0e:21:0a:1e:63:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:5B:34:D4:5B:7E:FA:B5:57:6E:C2:D7:97:E4:39:CB:C3:2B:72
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b9:ee:1c:83:b0:d6:dd:ad:7a:19:57:21:be:2a:c7:03:cc:
53:9d:93:ca:71:a5:0d:6a:cf:29:e7:f5:54:5c:d1:5c:c2:51:
9a:2c:cc:37:8e:bc:7c:5b:c7:a9:d5:49:54:84:f3:84:61:d9:
d2:91:29:94:c6:ea:da:c8:72:f4:4d:87:f2:0f:63:77:0e:c3:
28:b3:5b:9e:8a:67:e4:c4:b7:17:d1:bd:f2:be:ad:70:f6:d3:
4c:29:51:fc:4a:23:f6:19:92:f5:0f:c4:ca:d8:26:3b:02:4f:
cd:18:53:52:6f:4a:46:6f:f5:1e:ca:c2:f3:89:e5:88:92:9c:
27:14:09:4f:be:26:c7:33:a0:e7:b4:43:25:ec:a7:12:30:b7:
f1:aa:9e:65:cb:f8:f4:43:5f:88:64:6f:88:13:1e:b3:b1:23:
5c:ef:ea:67:dd:77:1a:46:d9:40:a3:d3:75:f3:80:6e:e5:cc:
5d:8c:82:1f:9e:70:b2:58:1b:ed:09:17:c3:7f:0c:dc:59:2f:
4a:8f:cb:aa:38:6e:db:17:91:41:03:cc:22:14:32:53:89:11:
db:85:2a:49:66:95:e2:c8:c2:b2:2c:b6:33:7a:92:0c:d6:8c:
fe:45:48:ba:79:e7:06:73:b7:a6:a8:20:5f:9c:89:35:98:61:
da:80:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:12 2025 by rpki-client