Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: ZuumzOYc3N+cxctzFvOEux8OzCKcU1OOxsP70d0Ys14=
Subject key identifier: 93:53:61:70:6B:C3:2C:76:56:FF:8D:64:C2:FE:FE:E6:85:28:0C:93
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 019840CFBEE03E334B7F798E09A4A1D10F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0CCB
Signing time: Fri 25 Jul 2025 09:00:13 +0000
Manifest this update: Fri 25 Jul 2025 09:00:13 +0000
Manifest next update: Sat 26 Jul 2025 09:00:13 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: fxvYMWSnVN3Gi/iFWz4vlD27C19/P13cJNee0tJIv/k=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:be:e0:3e:33:4b:7f:79:8e:09:a4:a1:d1:0f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Jul 25 09:00:13 2025 GMT
Not After : Jul 26 09:00:13 2025 GMT
Subject: CN=935361706bc32c7656ff8d64c2fefee685280c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:3a:e2:ba:ca:68:79:1a:09:24:7b:af:65:
3d:c6:7a:1f:80:c2:c6:86:cf:5e:1b:9c:38:4e:65:
23:91:33:6d:e3:6a:c4:20:05:fa:91:5b:a0:2e:4e:
0b:d2:e1:6b:b6:a6:48:f9:b3:48:d3:b7:9e:84:2d:
5d:e2:24:03:1e:ff:20:b9:83:29:07:63:e6:e8:f0:
9d:47:15:22:66:f6:37:2e:47:29:f8:61:b1:44:7d:
f6:f7:18:c0:37:cf:e2:57:a0:e2:b8:67:16:fd:e8:
4e:60:d5:de:b9:c8:5c:1e:94:dc:cc:b4:3c:13:fb:
0d:39:15:b4:f1:36:95:50:98:0b:e1:c5:86:7a:55:
72:df:7e:4a:57:90:62:df:f7:7e:51:89:f4:06:a9:
e7:d7:06:1a:4b:d7:54:b0:47:fc:21:5e:28:d8:e9:
6a:0b:70:ac:3b:e1:11:62:7c:56:c4:f5:dd:c9:53:
c5:02:d0:4e:bc:11:32:d3:ad:c6:21:d2:88:af:75:
f2:f0:7d:4e:d1:22:0a:cf:ec:fd:6a:6f:cf:41:6e:
d1:ed:42:76:d0:12:38:c0:d8:31:a5:3a:4e:a4:ac:
79:9a:0c:d8:a6:c5:45:fe:77:0a:df:93:f2:56:49:
b8:25:5a:1f:5b:a2:fa:b4:a1:99:65:54:98:b4:ab:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:53:61:70:6B:C3:2C:76:56:FF:8D:64:C2:FE:FE:E6:85:28:0C:93
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:4e:02:c8:48:ef:8c:7f:14:ec:2c:90:8d:b4:81:28:9a:
3b:f3:55:a0:23:c3:3c:29:e9:c7:db:29:20:78:9c:95:c4:d9:
a8:50:6d:fb:3e:a8:af:53:a6:d2:d8:f4:04:8c:fd:ef:61:f2:
4f:a0:0d:31:4e:2f:e3:5d:17:cc:91:27:a6:3c:0c:c2:52:89:
08:50:df:e9:ef:14:f5:90:f9:4f:5c:ac:78:7d:2a:ae:b2:79:
20:52:14:93:04:70:5d:3f:6c:9b:63:0c:10:3d:98:ad:51:4d:
90:0d:6e:97:1a:ab:c5:3f:b9:65:f0:82:97:9c:b5:d8:51:63:
e4:c5:6d:f8:c1:67:d6:18:51:db:c9:1e:39:78:13:3c:ac:ee:
48:9f:d7:7e:eb:16:1d:c6:57:a1:dc:ae:89:69:29:b7:8f:3a:
c9:d0:dc:8d:13:5c:d0:4d:a1:0a:c9:1f:11:60:84:f1:6d:56:
4b:6c:e5:c3:f6:d2:d7:f5:8a:f1:7b:58:b2:e6:84:dd:e7:15:
92:ef:e7:a6:4e:41:0e:94:18:bc:a8:c0:cb:63:86:ed:2a:9a:
d4:63:c6:35:09:65:5c:e6:e1:f7:de:37:7d:1a:16:77:a1:b3:
38:07:b8:a0:30:04:46:35:f4:7b:57:6a:27:67:ac:64:02:23:
9c:d9:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:33 2025 by rpki-client