Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier: lg9IalsDzlv62L8K/njPeB4A2sNmgpH1GwDElkQm97I=
Subject key identifier: AD:3E:BA:45:C5:74:02:CE:46:CA:44:11:27:D1:8C:16:74:F2:75:D2
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial: 0198443F4036E4CE8C21D4363B89D10314D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number: 01C5
Signing time: Sat 26 Jul 2025 01:00:52 +0000
Manifest this update: Sat 26 Jul 2025 01:00:52 +0000
Manifest next update: Sun 27 Jul 2025 01:00:52 +0000
Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: rJgSuA1SalBTn6VNq0oAktiAnWyHg2d7gyBmcXH+MGQ=)
2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:40:36:e4:ce:8c:21:d4:36:3b:89:d1:03:14:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Validity
Not Before: Jul 26 01:00:52 2025 GMT
Not After : Jul 27 01:00:52 2025 GMT
Subject: CN=ad3eba45c57402ce46ca441127d18c1674f275d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:51:96:f0:a9:82:b6:dc:c9:a3:27:64:e9:
a3:fc:75:28:2e:74:d5:a3:c1:20:31:e7:1d:d3:e1:
8b:e6:41:3d:74:63:96:36:ab:18:03:19:d1:42:09:
14:4f:49:85:dd:25:0d:81:5b:00:ba:30:e6:96:1f:
cf:30:97:2a:68:87:4d:c4:e2:56:80:3b:0d:13:30:
24:33:c2:91:84:b9:25:f8:11:ff:90:9c:2c:a0:33:
8b:9c:96:42:dc:d4:af:41:c9:df:ca:cf:aa:1e:d4:
bb:37:6f:c6:af:f6:54:3b:e5:07:c8:90:a0:b5:48:
dc:7f:29:e7:18:24:21:24:56:0b:b9:c3:48:43:64:
01:5e:b6:1e:35:cc:fc:94:b3:9a:c2:ed:d3:52:e6:
27:af:f5:54:e1:dd:d0:8c:81:3c:d4:9e:fa:17:4f:
4e:b3:a2:a8:7c:63:b7:18:b0:24:ba:04:b3:95:61:
cf:d8:10:fc:d4:2c:98:3a:08:14:7a:89:f7:39:87:
22:a9:98:5c:e8:78:30:fa:e1:83:59:5b:57:5e:a6:
22:61:ff:4f:65:be:b1:57:8a:f3:e6:09:0d:44:8b:
4c:ee:64:51:38:1e:71:3a:67:08:eb:48:d6:29:4e:
8e:c6:9f:5c:38:fe:9f:47:96:10:ca:76:1a:ef:5e:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:BA:45:C5:74:02:CE:46:CA:44:11:27:D1:8C:16:74:F2:75:D2
X509v3 Authority Key Identifier:
keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:e0:b5:74:55:5b:d2:14:77:25:55:6a:e7:a4:39:5c:57:
ea:ad:0c:a0:17:2e:f6:f9:5c:0a:63:e5:95:82:b1:d4:62:fd:
68:64:30:09:09:52:be:da:d2:19:4e:4a:2a:52:70:1d:ef:b0:
ef:ec:93:51:ed:51:87:b7:85:18:82:5c:89:dc:83:ae:43:88:
61:00:03:33:c4:8c:91:d2:1c:ed:7e:e3:f3:48:50:e4:25:bc:
fe:54:35:de:19:7a:e4:75:b9:f4:4e:32:34:2e:ee:d4:76:c7:
ba:52:51:64:2f:2b:0b:04:05:06:60:dc:ba:16:fa:21:7a:35:
79:8f:23:b4:6b:e0:a0:d4:94:b6:13:ae:47:92:66:b3:6b:6d:
c1:f6:93:d3:d7:72:de:a7:1e:9b:9c:76:5e:0e:94:56:dc:12:
12:d4:0e:a3:5e:3d:57:cb:db:07:e0:9d:ae:e0:66:11:64:2c:
ee:f7:a4:23:3d:d3:19:b9:5f:55:13:d9:49:33:b6:fd:d3:ad:
36:a2:b6:77:ec:f0:0b:fa:5e:18:7e:a6:b6:11:a5:bd:6a:19:
21:20:9b:33:30:00:72:ed:77:c0:22:f7:a6:d5:e4:19:37:48:
33:9f:20:c4:d0:56:19:c7:db:8c:51:b0:79:c9:1c:bb:b7:55:
9e:2e:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:13 2025 by rpki-client