Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: OyOVB79yjAEpDFI+pdDPYogMSGvvLylFIVLaVnBSI1g=
Subject key identifier: 23:00:F9:CB:B7:9A:8C:24:0C:EE:B7:F1:50:81:7A:C1:7A:8A:87:68
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01983E05913B11AA103981C38129AED47687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0CEB
Signing time: Thu 24 Jul 2025 20:00:08 +0000
Manifest this update: Thu 24 Jul 2025 20:00:08 +0000
Manifest next update: Fri 25 Jul 2025 20:00:08 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: FSjUhe5rdQi/ujHlOdKwObRT4tLZuCuH1RmJffWD2mo=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:91:3b:11:aa:10:39:81:c3:81:29:ae:d4:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jul 24 20:00:08 2025 GMT
Not After : Jul 25 20:00:08 2025 GMT
Subject: CN=2300f9cbb79a8c240ceeb7f150817ac17a8a8768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:2b:87:89:c5:5b:30:0b:a5:3c:88:cc:68:
9c:cf:23:08:4c:ec:b0:47:ed:12:aa:5d:40:f2:f1:
7e:1a:5a:e7:7f:f7:1d:c2:8a:bf:19:0d:8f:9e:17:
86:11:a2:77:5d:1e:b8:ac:42:99:6e:b2:b4:18:2c:
ee:25:97:2e:41:31:d7:05:8a:a9:6c:c0:83:6e:77:
ed:15:56:8f:5a:8c:8b:e7:02:15:47:1a:d5:b7:6a:
74:d4:d0:f0:dd:48:d5:80:e8:bc:f0:fd:d3:09:0e:
42:fb:cc:cc:55:1a:76:3d:1b:e8:a8:a2:93:0f:92:
23:eb:34:c1:66:e7:9b:31:b3:46:61:a4:d5:66:3b:
a1:5e:6f:3d:a0:f7:22:1d:41:27:1c:97:b4:38:27:
1c:cd:4d:9c:19:82:e0:8c:a7:fe:6a:02:a3:15:d5:
1a:ae:de:f6:7e:b3:ef:37:4d:be:0a:66:88:79:cb:
e1:eb:bb:45:21:b7:aa:23:2c:6e:bd:06:61:f2:36:
90:0c:e8:41:c2:ba:65:60:97:3e:d1:a8:0f:a8:ea:
b3:dd:66:eb:37:82:63:57:be:9e:81:6e:47:d0:74:
96:21:d0:1f:2c:df:99:5d:73:15:bc:a2:92:06:8f:
a2:dd:d8:ba:af:67:9a:07:d1:09:94:5a:dd:6f:89:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:F9:CB:B7:9A:8C:24:0C:EE:B7:F1:50:81:7A:C1:7A:8A:87:68
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:08:cb:12:fa:6c:ec:75:5c:54:eb:74:af:e0:dc:d8:82:
50:56:29:e0:ff:31:45:cf:6c:90:8a:21:05:99:e4:6d:0a:ce:
49:35:d6:61:42:6d:fc:66:36:cc:92:48:c6:dc:76:55:5b:26:
64:f8:72:43:9c:3b:41:57:07:57:0b:76:31:1d:e8:09:f8:0a:
27:50:5a:6b:77:08:c2:4a:89:3e:84:ee:2c:38:23:41:30:e3:
24:84:4d:d2:e7:97:d7:83:03:79:65:49:03:bb:b4:a2:2a:10:
3c:d3:61:a0:9d:4a:3b:38:08:21:15:de:a1:fb:12:c7:29:58:
e0:10:f3:04:e7:c0:bf:12:b9:23:3c:37:6b:c4:96:22:bf:e5:
6d:1d:54:41:14:2d:da:3e:c8:b9:a1:61:1b:bc:b8:ad:9f:58:
37:21:db:e3:2b:60:b5:da:77:7e:8e:30:5d:fe:6a:0f:c3:6a:
13:62:4f:21:c9:6e:89:7e:44:ad:ee:4f:74:ae:94:64:a5:41:
91:6d:75:b6:51:2f:46:c6:3d:25:26:e7:ed:ff:e6:a4:68:22:
a6:f7:ba:e0:32:1b:5b:8b:e8:56:e7:5d:4d:b8:8d:f1:f4:6a:
22:54:c6:1d:8f:e2:f5:4b:4d:24:39:d1:5f:fa:23:8b:bf:fd:
5c:8a:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:28:54 2025 by rpki-client