Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: EEb6kbzjB4i1TaRt3wx4jwmCAjukSZsc0SSO8dpVpnA=
Subject key identifier: 54:1E:FE:B3:98:83:B0:F9:B4:69:6B:6F:D5:4D:48:71:87:DC:DB:AD
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 01984966B2CF1E1CB668F5F78F8CAF4FEEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:02:03 +0000
Manifest this update: Sun 27 Jul 2025 01:02:03 +0000
Manifest next update: Mon 28 Jul 2025 01:02:03 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: 0D4J6rKPSbWqbJ1qmgw9tvb9wF5PyavVo6AHx7AYgcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:b2:cf:1e:1c:b6:68:f5:f7:8f:8c:af:4f:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Jul 27 01:02:03 2025 GMT
Not After : Jul 28 01:02:03 2025 GMT
Subject: CN=541efeb39883b0f9b4696b6fd54d487187dcdbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:8d:7b:5f:bd:92:a7:3a:94:08:62:bc:35:
1c:d9:68:8c:a3:a3:dd:c3:71:8c:cf:33:a2:0e:51:
09:78:1d:2b:fd:4b:2e:00:02:9b:cf:42:89:eb:0d:
f5:86:e6:80:19:35:d7:23:fb:fe:ba:8f:e4:99:1f:
e1:ca:6b:b2:de:8d:1f:17:3b:25:46:90:a0:8e:75:
18:77:e5:fd:0f:94:07:de:d2:bd:87:96:a6:d9:74:
a0:08:68:f1:7e:d7:15:72:b5:c6:3d:82:44:3d:0f:
a7:c4:89:1c:a8:ee:7d:cb:f3:42:ca:28:97:84:e1:
96:6d:5e:f8:a2:a6:19:0f:37:0b:39:a0:b2:9f:98:
52:9f:53:e2:28:4a:72:97:b8:e2:cb:4c:65:d9:73:
5e:b9:ad:65:1d:2c:73:45:9d:6b:46:2a:94:0d:5c:
cc:a0:df:f7:b8:e1:c9:7a:b7:91:4d:22:df:af:e8:
9e:28:9b:dd:98:99:56:55:5c:1a:4d:47:f2:34:65:
f3:a9:b7:d8:40:2c:c0:71:aa:d8:c0:0f:81:df:5e:
80:ee:4d:2a:d7:e2:6b:6e:a4:d6:21:d6:fa:d0:29:
9f:b4:2f:99:82:77:7d:25:16:03:cf:d2:ba:88:63:
e9:29:a3:ae:02:b6:3c:8b:25:1f:9c:b8:0b:6b:f0:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:FE:B3:98:83:B0:F9:B4:69:6B:6F:D5:4D:48:71:87:DC:DB:AD
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:77:61:a1:c7:1c:c8:00:00:fe:e2:5c:fb:b0:38:cc:f7:d7:
d9:d2:14:55:13:68:42:4b:7e:34:48:8b:2d:8d:ec:1d:62:ab:
1b:b9:40:54:99:96:b9:e4:85:01:0f:8e:75:6f:c0:a5:20:d3:
84:b8:c8:f5:f9:13:9f:54:a5:aa:04:f8:75:5f:93:45:f8:47:
88:46:a1:39:2c:7d:40:18:04:92:5e:70:3c:01:26:99:18:75:
eb:2f:ba:78:41:3a:f2:5a:6f:35:3f:44:65:a4:7d:48:12:55:
31:0f:26:be:28:56:b5:52:18:6f:84:d2:d1:1a:59:27:6f:f1:
17:d6:ff:12:da:34:09:15:63:cb:8d:c5:a6:b1:98:41:e2:9b:
e7:b8:71:dd:64:12:53:84:3d:fb:07:9f:62:53:54:6d:67:7d:
3a:6b:7f:21:b5:a6:bc:e2:76:f5:b7:2f:bf:63:d3:e8:0d:17:
3c:9a:65:e3:ca:06:4c:bd:eb:3e:47:24:3c:7f:7f:e4:b4:1b:
84:7b:35:7c:c6:6e:72:35:6c:f4:34:09:bf:9f:23:2a:7f:d7:
d3:eb:0f:66:4c:bd:8e:12:ea:2f:82:0a:15:31:b2:08:04:87:
ab:bc:ef:1c:5a:53:0c:23:97:91:02:11:d4:31:c9:49:ac:c5:
88:43:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:34 2025 by rpki-client