Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: Sr0jm1wwORBCpBNLPW5kmMIfE6ol4136mosNLAxHTjI=
Subject key identifier: AF:74:49:62:B4:D7:BC:5D:E7:5B:0F:39:B1:26:37:63:92:5E:70:2D
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 01963C8B386216CF684BC63C12B0A04E5088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 03:01:18 +0000
Manifest this update: Wed 16 Apr 2025 03:01:18 +0000
Manifest next update: Thu 17 Apr 2025 03:01:18 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: 0vvFwVTIg1Gm66RtTRJn6aft7lQBYEpSWsFmjTGd9Qs=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8b:38:62:16:cf:68:4b:c6:3c:12:b0:a0:4e:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Apr 16 03:01:18 2025 GMT
Not After : Apr 17 03:01:18 2025 GMT
Subject: CN=af744962b4d7bc5de75b0f39b1263763925e702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:4d:b1:e2:9e:97:ef:71:66:76:e6:d0:9e:
50:0c:3d:21:ee:3a:38:84:ee:a2:f7:96:9c:fb:3d:
93:08:6d:39:03:7c:8d:40:30:71:ab:16:ec:d9:df:
0d:ef:7e:7e:7e:46:68:13:ce:6e:52:5a:eb:eb:84:
f6:c8:dc:1e:72:39:22:c8:27:c5:63:06:6b:28:26:
79:61:23:43:89:7c:ce:24:d4:9a:e9:c1:9c:20:3b:
0d:48:30:44:65:4c:77:30:07:71:25:1b:14:7c:f6:
85:80:d6:77:96:64:c9:e4:98:e0:86:29:d4:c5:4d:
10:ea:8c:be:05:d0:b1:aa:9d:62:7b:e1:c0:c6:8c:
fd:17:13:25:ae:52:95:90:41:71:77:2f:30:35:91:
92:81:99:cf:b8:78:73:bf:38:b7:14:b3:c8:1f:3f:
41:8e:d3:0c:cc:2c:d3:fc:c0:36:fb:ae:1c:ca:54:
3b:c9:ce:37:e3:00:6a:0d:b2:44:a6:0d:7a:57:69:
0d:d2:a7:84:f7:8b:8a:82:46:fb:1d:0e:81:e2:d5:
b9:12:a2:4f:1b:61:53:32:5e:4b:41:ea:8d:74:b5:
95:7f:08:71:6f:88:d5:ce:56:6c:ff:0f:fd:f9:40:
34:1a:9e:4d:e5:2d:7f:14:f5:31:4b:c6:57:20:64:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:49:62:B4:D7:BC:5D:E7:5B:0F:39:B1:26:37:63:92:5E:70:2D
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:53:aa:44:10:ee:1c:a1:15:dc:fb:c1:e6:67:98:16:47:
e1:09:ce:3c:ca:29:fc:93:27:40:9f:b4:c4:ea:d3:a1:14:fd:
3a:ec:22:a9:3e:da:ab:5a:e4:0f:9a:8a:47:b8:07:26:47:e0:
e3:75:2f:61:b6:09:a7:16:66:54:48:1a:37:f5:bc:cf:cd:e3:
1c:51:4a:23:e2:22:10:b5:55:36:3d:6c:bf:0d:42:9c:61:0a:
07:db:a4:bb:41:14:22:53:a4:fa:3c:90:4a:e9:cc:f8:9e:88:
0d:54:7c:e5:a5:f4:85:44:07:c0:fa:59:0d:3f:10:84:44:ac:
83:aa:8a:27:04:94:dd:c3:04:f8:3b:2b:b8:fd:55:27:0e:c9:
e5:4a:70:13:0d:97:ef:73:76:62:e5:a6:59:64:54:65:a4:a1:
d2:4a:76:64:24:6a:8e:5f:0d:07:aa:f1:cb:68:27:5a:43:eb:
cf:24:c7:73:55:76:76:26:40:ef:ec:b4:be:cb:50:2b:0b:9e:
c4:36:54:49:62:19:cd:38:bc:07:99:cd:a9:af:48:e9:3c:86:
31:ec:90:88:b6:7e:23:25:11:7a:56:ab:78:17:26:5c:b3:ea:
2c:7a:f0:57:fd:b0:76:5e:49:74:57:0a:2f:b3:2c:cb:84:8c:
6b:11:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:52:23 2025 by rpki-client