Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: yRK96v706oKZme0VYKvCqUCc3on9okx9L5BjJIRU+TM=
Subject key identifier: 38:E0:7F:19:63:D2:00:FD:6E:FA:2A:04:C4:28:CF:C2:DA:ED:FC:04
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019849661074C7A48EA9C3369FACC8BA0A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:01:22 +0000
Manifest this update: Sun 27 Jul 2025 01:01:22 +0000
Manifest next update: Mon 28 Jul 2025 01:01:22 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: 6whq9fbGRVjBlHdSn50uO/iwSxB5DAu50p8RpltQArM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:10:74:c7:a4:8e:a9:c3:36:9f:ac:c8:ba:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Jul 27 01:01:22 2025 GMT
Not After : Jul 28 01:01:22 2025 GMT
Subject: CN=38e07f1963d200fd6efa2a04c428cfc2daedfc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:f4:17:72:87:fe:f1:12:3c:c0:45:3e:a9:
94:5f:9e:f3:27:ef:e9:9d:21:4c:51:5a:3e:80:6f:
ff:a3:31:ad:3c:27:9b:0a:5d:d6:cf:ac:c4:01:a5:
13:49:2d:21:c0:ed:c2:f0:e6:64:87:bf:ea:5a:a7:
d4:b6:55:22:a1:d5:80:0c:44:6b:11:57:ee:0c:5c:
10:81:51:f3:85:1e:48:2b:e2:3b:8e:f9:77:6c:dd:
97:8e:07:6a:8a:fa:11:ba:06:e4:cb:8c:a3:c6:29:
d2:17:df:49:78:24:a0:0a:76:75:3c:2b:87:d8:8c:
f6:16:2f:17:da:4e:8c:f2:a8:b0:66:14:5f:7a:41:
ab:bd:9a:54:35:d3:18:9f:df:5b:5b:31:3a:6d:47:
05:56:60:09:1c:b2:18:04:01:cd:45:c2:04:35:5f:
44:f3:ce:71:7e:5f:52:44:e2:ca:eb:a3:5e:23:1a:
37:db:38:8b:c1:52:29:89:b5:19:48:38:e2:44:e7:
5e:41:90:1a:46:b1:05:57:21:5f:c6:ac:43:d2:73:
94:12:f9:ab:1a:32:20:f4:68:3d:83:52:7b:fe:bf:
51:59:1d:cf:e8:b7:b3:3f:f4:a4:11:fc:a3:ea:f4:
69:4e:22:d7:e0:4d:76:f9:78:38:4c:99:50:f6:c5:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:7F:19:63:D2:00:FD:6E:FA:2A:04:C4:28:CF:C2:DA:ED:FC:04
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:8b:9b:85:16:96:4f:35:49:89:7d:40:5b:67:6b:03:1d:
1b:ab:a0:12:71:24:9e:17:2f:a1:1a:d1:ba:bd:da:03:92:22:
fe:0e:83:03:7c:ac:e5:34:56:1f:58:03:24:12:44:31:9d:21:
25:e2:c4:3c:74:27:41:8f:1a:68:a0:c1:e6:e7:fd:1f:79:44:
45:82:89:5f:2d:79:30:e3:af:1f:6e:bf:6c:ad:f1:1c:0a:e6:
9e:9f:20:17:79:6a:cf:88:44:13:eb:91:21:66:24:34:87:9e:
bb:70:2c:4b:84:84:e5:9c:6d:97:53:6e:23:c6:7c:67:16:d7:
f0:c7:87:b5:fb:0d:63:d5:a8:ea:e6:7f:82:45:43:c5:af:4d:
ee:e4:07:dd:17:12:9b:09:02:51:30:bf:81:c9:43:24:c0:4f:
74:16:a9:eb:14:19:56:09:1b:c0:ee:e4:63:85:41:ab:1f:c8:
ae:a7:07:4c:fe:6d:f2:ec:7a:8c:af:ac:2e:e4:66:00:fc:05:
fb:5c:cb:f9:35:1f:7c:32:78:28:c8:e5:e4:ac:d0:94:b7:6a:
49:b0:d1:89:3a:a7:58:b3:1d:5b:62:2a:5d:46:b5:a5:7c:22:
ad:5a:2a:20:3d:d2:20:42:cb:37:e7:48:8d:1d:02:3b:17:92:
e8:c7:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:47 2025 by rpki-client