Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json)
Hash identifier: 8dw9JJTA5bHvS3yM8++QA6oqHIWNokTXh1rBwUnew0I=
Subject key identifier: 0C:59:BF:48:51:67:BC:BC:C7:03:7A:8E:50:A7:F3:07:4C:DA:73:4F
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial: 5F16755A784B429D0A5A881FB35E397CEB0794F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
Manifest number: 013B
Signing time: Mon 07 Apr 2025 22:19:36 +0000
Manifest this update: Mon 07 Apr 2025 22:14:36 +0000
Manifest next update: Tue 08 Apr 2025 23:19:36 +0000
Files and hashes: 1: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: Hm6Zisp9rtO1MRy4fuc8qXTfS/nQ+EU71DsoKF+5F24=)
2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: 0TcNKNW9oaLuvWWQKeFr2c4Cl3YJMCdt4zJfKN0iXxo=)
3: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Apr 2025 23:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:16:75:5a:78:4b:42:9d:0a:5a:88:1f:b3:5e:39:7c:eb:07:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443440000
Validity
Not Before: Apr 7 22:14:36 2025 GMT
Not After : Apr 8 23:19:36 2025 GMT
Subject: CN=0C59BF485167BCBCC7037A8E50A7F3074CDA734F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:90:91:83:19:f5:b8:dc:d4:75:bf:de:a8:
58:5c:3c:ab:33:2f:c8:9d:94:6b:5b:e3:75:d1:0b:
01:13:8b:63:e9:96:d0:03:b4:e1:8e:99:28:3c:0c:
77:12:7d:cb:af:43:10:9b:e2:a4:fd:c8:5f:67:a4:
e0:38:55:e8:91:01:3e:e5:85:2c:29:11:01:02:0e:
8f:23:de:ae:7c:ea:cd:30:f7:44:6e:1c:56:04:06:
22:95:44:a4:e6:a3:43:9e:0d:5b:bf:f1:df:0f:3b:
47:5b:38:63:eb:d4:6a:c4:e6:2a:8e:c1:f5:62:83:
eb:07:42:00:67:46:af:ea:ae:ba:ba:14:6e:ea:7f:
35:c4:14:6b:c5:6c:e0:99:d1:5e:aa:49:63:d7:ff:
45:56:42:94:5e:c6:7d:4d:45:8f:ef:1a:3f:af:74:
bc:9c:cc:30:cf:f6:4e:bf:79:e7:0c:d2:b4:ae:32:
70:b9:0f:07:09:24:d0:e8:b3:ee:86:14:12:a0:d2:
a6:8c:5c:b6:ad:a9:2f:af:cc:5a:80:64:fc:85:9b:
19:05:bc:2e:37:3a:15:bf:5c:a0:ef:5b:b7:77:d7:
3f:0b:85:f1:86:e4:b6:1f:2e:9b:92:5c:a3:5c:71:
ac:29:a4:6e:77:ff:bf:e9:1d:66:55:b4:24:22:55:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:BF:48:51:67:BC:BC:C7:03:7A:8E:50:A7:F3:07:4C:DA:73:4F
X509v3 Authority Key Identifier:
keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:09:52:be:3b:9b:ac:4c:0f:28:86:34:53:83:dc:02:8f:
09:07:95:4e:53:ad:21:c1:63:e4:ec:33:09:f0:f5:87:77:f2:
62:a5:59:9a:b2:3b:e8:be:b9:d5:89:66:d1:43:90:bd:6a:f7:
3c:71:26:07:e3:09:ec:68:fb:cf:bc:33:ac:57:f4:4e:ae:b0:
88:fb:79:79:9e:6b:70:9d:96:45:6e:bc:6a:05:bc:c0:67:28:
d7:9f:6d:e1:ba:36:9d:8f:bc:7a:67:4d:bb:10:60:0f:3e:45:
1f:7c:49:6c:8f:75:42:14:ee:30:a4:17:31:8e:c6:ab:6a:fe:
38:97:8a:13:ee:78:e8:af:4e:8f:2c:75:7e:a6:71:cb:13:58:
b6:ba:b8:57:97:ad:36:4c:12:36:0e:7d:e2:19:1c:c5:b4:d6:
59:64:13:a5:c7:3e:6a:25:cd:f8:10:ca:0e:e2:aa:a7:f2:c0:
3f:e7:85:96:e8:c6:5a:d5:bc:fd:c9:be:ac:54:4e:27:1e:e7:
e8:d2:71:e2:d6:c7:31:72:f6:97:60:ce:7e:2f:f7:3e:bb:49:
ec:b6:c6:9e:bc:61:2e:5a:27:a0:c7:5f:9b:da:2c:85:82:80:
3d:1b:e7:b6:e0:aa:bd:76:05:ca:6f:30:b0:43:e7:ae:40:a4:
c4:9a:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:08 2025 by rpki-client