Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: 3XCJ+la2OMabiFMdKgK0cJLmKb/wyLx+TufhFEUk3yw=
Subject key identifier: A8:2D:E9:4C:56:4A:92:86:3A:9B:11:0B:77:07:F8:06:51:47:89:B8
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 01974AE902805FE2BD2ADB91CA8E6C2E1365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:01:13 +0000
Manifest this update: Sat 07 Jun 2025 15:01:13 +0000
Manifest next update: Sun 08 Jun 2025 15:01:13 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: 6InTu0NjfK2aC7hpgaCK0VZXXqUUnc3ZwTspZCmgchk=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:02:80:5f:e2:bd:2a:db:91:ca:8e:6c:2e:13:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jun 7 15:01:13 2025 GMT
Not After : Jun 8 15:01:13 2025 GMT
Subject: CN=a82de94c564a92863a9b110b7707f806514789b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:c4:f4:3d:32:d6:ed:58:a1:32:26:fe:a8:
1f:f9:73:f0:73:be:b5:35:77:1e:a6:b4:fd:98:1b:
e2:71:00:be:dc:2e:cf:45:1c:1c:c1:7e:eb:7c:01:
8f:06:e4:7d:11:3f:46:13:93:cc:6b:f3:72:50:d7:
8f:32:c0:67:a6:00:e6:72:43:bb:88:e8:d8:86:99:
8a:f3:ae:8e:03:5b:76:f8:2b:cf:fc:56:83:31:73:
0c:29:89:2d:b4:a5:76:dd:50:15:3b:bb:fd:ca:61:
24:45:dc:db:4e:85:81:96:52:89:0f:ea:6c:3b:e7:
a5:cc:8c:98:0b:c1:f9:5e:f0:d7:5e:58:68:75:f1:
cd:07:cf:68:31:e4:fe:17:12:95:63:07:df:e7:da:
a0:ad:4e:83:ec:a3:46:8c:57:3a:22:8c:00:d3:20:
11:80:d1:a3:24:23:e0:c9:61:3c:e2:d9:62:88:40:
74:71:09:16:fe:b8:81:68:49:1a:15:0a:c8:00:26:
69:90:c7:a8:dd:a2:c4:75:f9:ea:d6:e9:ee:9f:6e:
f8:06:7b:9f:21:9a:c4:09:e7:35:58:d1:49:9b:23:
41:f0:db:90:aa:4a:d6:f3:60:d7:71:ed:64:39:75:
32:7a:66:cc:80:c3:a7:59:cf:61:e4:e1:24:95:4d:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:E9:4C:56:4A:92:86:3A:9B:11:0B:77:07:F8:06:51:47:89:B8
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:30:14:f5:04:1e:ef:ff:92:1c:7c:4e:61:fb:5b:46:5a:
32:69:93:e3:d3:6e:e1:60:cc:c5:c1:78:10:59:14:3e:9d:e3:
a5:01:68:56:28:af:38:2e:36:e8:a2:8e:09:42:dd:f4:da:35:
44:1b:e1:ec:88:96:19:88:dc:57:3e:9a:e4:d5:53:27:10:9d:
90:a5:63:19:9b:ba:51:16:cb:f4:3e:1c:c3:89:80:08:43:0b:
ed:fb:72:35:1f:82:5e:1e:c0:0b:4a:12:33:30:95:94:c6:20:
4f:d2:f8:6a:0e:2b:fa:f3:83:d6:53:bc:96:7b:3a:2f:af:9b:
7e:8a:30:2c:84:ba:fe:f6:2c:27:ff:f3:e3:6f:77:00:44:94:
0d:86:b8:fa:a4:2a:2b:b6:6d:26:33:48:08:ea:68:ea:af:5a:
43:e8:3e:5e:50:97:5b:56:6f:00:9e:18:57:a3:ef:6a:63:80:
57:2f:24:cc:52:9d:25:10:0d:4e:51:b6:c0:e4:54:97:49:1b:
7d:e9:d5:2a:36:6e:25:b9:88:58:c4:24:ff:3c:32:76:73:9e:
8b:f0:50:c4:ef:0d:ec:98:a8:60:0e:bf:06:c2:9f:ba:9f:28:
39:3a:4f:fd:f9:dd:19:1f:a2:8b:ef:fb:56:f6:82:6d:da:6e:
7a:67:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:55 2025 by rpki-client