Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File: APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier: ep73xvKTgPjh4HWkF6Q+jQtg8brLtYsG4/K9nFA2BVc=
Subject key identifier: 71:1B:3D:B7:00:38:C2:01:A3:C7:64:1C:9B:D9:41:49:7E:00:86:2D
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 019747425D256EAACAE5E2D9F421CFF28B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number: 14A8
Signing time: Fri 06 Jun 2025 22:00:20 +0000
Manifest this update: Fri 06 Jun 2025 22:00:20 +0000
Manifest next update: Sat 07 Jun 2025 22:00:20 +0000
Files and hashes: 1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: WL58QjVuz/Lqg8DCWgvxYBaRWB4uMaqGk2fMLaTJiG8=)
3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:5d:25:6e:aa:ca:e5:e2:d9:f4:21:cf:f2:8b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jun 6 22:00:20 2025 GMT
Not After : Jun 7 22:00:20 2025 GMT
Subject: CN=711b3db70038c201a3c7641c9bd941497e00862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:61:93:2e:41:f9:de:ed:a4:a4:f2:7d:ad:
e8:8f:dd:eb:0d:5d:a2:ce:64:bb:e1:80:a0:99:c7:
a5:f6:d3:fc:24:a0:9a:d3:1e:f9:27:9c:49:bd:98:
10:e9:d7:cf:a7:1d:75:e3:ec:f9:31:c8:28:ba:d9:
46:d9:07:6f:95:11:aa:ef:3f:b5:58:cf:f4:22:46:
cb:16:a3:fc:41:4b:2b:52:14:da:03:66:33:8a:7f:
b8:8b:26:fb:9b:9b:63:bf:58:9b:8e:54:56:51:01:
01:d8:fc:de:90:85:fb:8e:8c:1f:07:9e:ef:6b:e5:
a6:d5:1a:36:96:6a:56:2f:0f:c5:c2:a0:fb:6f:8b:
10:8c:e7:44:2c:65:fa:f2:ce:f7:0d:08:77:5a:ae:
30:1f:2a:39:61:7f:1d:45:de:93:4b:49:18:19:6f:
dc:f1:b6:29:28:96:53:c8:4f:82:88:dd:0c:bb:84:
75:fd:99:f1:64:97:2b:90:bc:94:44:b7:5b:f9:3b:
07:75:99:87:f4:3d:3e:28:8d:82:cd:27:8c:26:56:
ac:b7:72:48:2f:2a:63:1d:51:c5:b9:70:c6:28:65:
60:42:a9:16:75:53:7c:19:5f:08:53:02:cc:c1:30:
e0:ec:ac:f9:fc:0b:aa:39:fe:69:23:fd:e9:32:77:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1B:3D:B7:00:38:C2:01:A3:C7:64:1C:9B:D9:41:49:7E:00:86:2D
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7a:ed:38:26:6a:be:54:ec:ed:94:7a:9c:88:8e:f9:df:1a:
25:14:31:c4:0b:c4:4c:53:26:bd:e7:d5:7c:00:ba:b4:58:24:
14:e2:a7:ff:5d:ee:36:c8:1b:91:20:2b:03:da:87:22:48:9a:
7b:2f:45:ba:24:e5:8c:c0:ea:c6:76:c5:77:ca:45:78:5a:9b:
5e:98:41:c3:b0:2f:52:f4:24:95:47:e4:84:80:bf:68:ea:63:
74:1d:81:1a:34:ff:33:45:29:62:be:58:95:37:01:f2:15:15:
0c:23:0a:76:59:fa:2d:f0:89:90:22:8a:29:6b:75:b4:69:56:
67:97:3b:a2:e7:60:64:e0:ad:94:b6:1e:27:eb:0f:db:2c:ac:
fe:a1:e0:9b:4e:3e:02:6a:12:9f:ef:17:30:eb:3d:95:5c:87:
12:f9:90:d8:b8:c0:66:05:c7:37:86:51:4e:55:d0:ec:cd:33:
84:ef:2d:49:81:6e:ec:11:3b:05:46:2f:c5:4f:b2:4e:ee:dd:
dd:d1:a5:b7:30:ab:a8:eb:8a:ce:e6:52:12:ef:fa:65:a6:69:
77:4b:fe:13:89:97:b8:82:37:a6:24:0a:e5:db:dd:37:78:1b:
45:2f:ad:1f:87:4b:24:ab:33:ab:ee:62:c9:44:a9:1b:76:1f:
e8:e2:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:52 2025 by rpki-client