Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: 1Qr8uCwQxQxC60h8nEDjn/mElBLQVafzTzmU0fLOpFA=
Subject key identifier: D9:1F:10:F9:99:B6:B3:8D:B4:3D:10:BD:0D:21:F6:8A:B8:40:47:21
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 01984BC13A0CE90B09ABEC250294929B2335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0354
Signing time: Sun 27 Jul 2025 12:00:11 +0000
Manifest this update: Sun 27 Jul 2025 12:00:11 +0000
Manifest next update: Mon 28 Jul 2025 12:00:11 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: wpfBGJwQYkrDe5U0SuaDkAdA86133UYuqdfbjdwwkjk=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:3a:0c:e9:0b:09:ab:ec:25:02:94:92:9b:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Jul 27 12:00:11 2025 GMT
Not After : Jul 28 12:00:11 2025 GMT
Subject: CN=d91f10f999b6b38db43d10bd0d21f68ab8404721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:5d:27:cd:b7:c9:f4:b7:79:d1:56:e7:1b:
77:c8:c8:53:13:69:be:96:a8:20:be:46:c7:27:ce:
da:85:91:b8:d6:02:4a:be:4b:37:37:1a:99:fd:44:
be:02:41:f9:80:b6:0f:d0:85:33:f8:0f:dd:84:b9:
77:1c:83:16:62:27:e7:dc:a6:a3:33:9a:c6:68:6d:
5d:71:77:07:71:90:73:df:26:0f:2b:67:f2:a5:be:
9a:39:bc:4b:38:2c:15:89:2f:0a:5c:d1:80:b9:44:
c7:d7:59:35:98:ee:59:fd:1e:90:7f:7e:3f:34:70:
35:e3:a8:2b:63:d0:a8:e3:ef:f4:3b:9c:06:c0:63:
45:83:02:82:b7:5b:0a:f4:4b:5b:b8:41:03:b9:a6:
98:ea:bd:61:63:d5:e8:16:14:76:34:b0:21:04:e2:
bb:43:02:79:d7:d3:ac:c5:7f:e2:28:3c:87:6d:e0:
d4:6d:e4:3a:a7:b6:ca:e6:7b:5d:81:9c:1b:3d:b2:
8b:fe:e2:cb:c4:cf:69:63:59:d7:51:d6:75:58:a2:
a2:60:a8:66:dc:91:e3:d7:66:9e:88:27:22:fc:75:
c1:55:19:44:a0:af:df:5e:8a:56:f0:f9:bc:f3:32:
7f:7e:02:be:a1:c3:4e:a2:e1:da:28:87:37:b3:7d:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:10:F9:99:B6:B3:8D:B4:3D:10:BD:0D:21:F6:8A:B8:40:47:21
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:2d:fb:e7:81:ea:04:42:84:01:af:c0:44:f4:a0:95:e3:
e0:27:66:17:e9:e8:e5:ce:8d:75:71:f3:f9:77:11:8d:98:b1:
57:e7:65:e4:56:f9:b7:7c:a0:53:b1:8c:ef:8c:dc:75:3e:97:
cf:0e:ac:60:e4:25:fc:2e:db:3d:52:2a:eb:68:64:29:5b:09:
5a:00:6a:e9:0b:c1:fb:b4:68:f6:11:9c:55:81:4f:b8:73:4f:
8a:39:df:e5:68:11:30:9f:7e:ca:6e:80:4f:b9:bf:e0:ae:ec:
c7:72:76:ed:2d:7d:14:a7:ef:99:ee:8e:ed:74:99:f4:13:8f:
04:34:b9:f5:9e:b9:bd:76:9c:99:1e:87:e2:7c:ac:31:5b:5c:
e3:fe:9e:98:bb:3f:e0:01:de:35:df:66:51:09:f5:de:af:e5:
58:32:8c:a0:c2:f2:34:4c:62:eb:fe:af:7e:3c:41:d7:7f:31:
ee:12:0c:6a:ce:1e:32:50:5a:38:1e:07:1c:61:d3:37:0c:a9:
c6:a9:35:d7:aa:88:37:c9:39:82:5f:30:58:2b:8f:05:79:62:
e9:c9:63:32:6d:56:63:19:a9:26:22:1f:f7:db:16:f3:76:f1:
48:70:55:7a:a3:27:ca:26:22:0a:f3:78:ea:ce:59:98:5c:95:
15:f6:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:44:18 2025 by rpki-client