Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: jJSd01Vz3Gi+4QatRCvZxGmww0YnRB7oXtuUKDKIWGs=
Subject key identifier: 09:2E:96:5B:8A:1C:48:70:9F:C2:2F:A7:90:17:F7:DE:5A:2F:28:73
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 152DA44DC84BDE18E8C4D4CB7518E063BDF55B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 0789
Signing time: Sun 27 Jul 2025 06:09:26 +0000
Manifest this update: Sun 27 Jul 2025 06:04:26 +0000
Manifest next update: Mon 28 Jul 2025 06:52:26 +0000
Files and hashes: 1: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
2: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: bJWlU5iM2d7BatWidim7wfDhN478UXzM6VlM5JLppHM=)
3: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
4: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
5: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2d:a4:4d:c8:4b:de:18:e8:c4:d4:cb:75:18:e0:63:bd:f5:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Jul 27 06:04:26 2025 GMT
Not After : Jul 28 06:52:26 2025 GMT
Subject: CN=092E965B8A1C48709FC22FA79017F7DE5A2F2873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:f4:ae:9c:dc:c2:aa:91:d1:47:39:e8:e9:
f3:aa:fa:6b:89:5e:06:88:8b:de:e7:9d:6f:9e:e7:
9b:8e:03:c1:81:8b:59:4a:3c:58:1c:b9:5f:66:a0:
c8:c1:76:62:6c:97:64:69:3a:d4:45:36:c6:91:c1:
3d:9a:99:6f:59:e5:34:1d:52:e7:dd:fc:74:cb:96:
f7:a6:5c:21:f4:ea:80:55:bd:f8:0b:54:3f:66:24:
6c:30:93:c7:4e:c1:7b:fd:d9:da:6c:87:08:9b:77:
61:89:98:e2:dc:81:1e:22:90:f0:70:6f:6f:28:cd:
0f:78:82:f8:ed:2b:ad:e0:d9:dd:78:f6:3c:26:c8:
22:ea:56:12:f1:a9:a1:44:a3:9f:e8:63:50:9e:14:
0b:7b:ad:20:90:a4:48:c9:27:ca:29:b4:68:47:65:
8c:b5:cd:20:95:99:79:34:41:81:f9:6b:82:aa:bd:
06:52:32:e1:30:9d:23:1b:b5:74:35:d7:17:83:f7:
e0:90:49:5b:15:0f:20:32:d9:e4:3e:b2:ee:3d:a1:
b7:bb:4e:22:2c:77:60:4c:8b:d7:f9:d3:4d:07:53:
5c:03:85:76:d1:3c:f8:ea:09:e6:60:de:2f:24:32:
f5:05:f1:a2:18:8f:95:35:a9:ff:e7:9c:2b:29:48:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:96:5B:8A:1C:48:70:9F:C2:2F:A7:90:17:F7:DE:5A:2F:28:73
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:df:8b:66:ba:bc:fe:d0:47:a8:b2:3a:44:6e:7b:9a:ec:f1:
dc:69:65:1e:ac:69:70:1b:c9:fa:c3:a3:58:2d:2c:dd:d5:ae:
bc:fa:9a:10:a6:c0:ab:87:9c:ad:df:03:63:6f:b9:eb:0b:96:
fb:8e:fc:7d:0a:29:30:cf:c0:cb:a5:e9:aa:3d:07:45:45:88:
cb:27:49:a9:dc:38:97:cb:42:f2:5c:40:0c:bd:c2:83:12:fa:
51:a9:9f:e4:cf:12:b1:66:9c:39:95:1d:0e:d5:98:b0:f0:a2:
d9:c6:de:00:97:52:7b:d2:d5:ff:ef:24:84:fd:9b:5a:5d:6a:
61:bc:6f:60:cf:d4:24:43:2f:67:49:65:c0:de:24:94:b0:15:
12:73:f2:be:71:e2:80:b1:86:1b:f7:35:93:79:27:df:6a:3e:
a1:c0:88:b1:90:8f:c6:62:b2:79:cf:99:a1:58:c6:69:85:2d:
b3:91:5b:04:d8:6c:7c:cb:15:51:fc:e5:90:0b:57:89:90:cf:
46:d9:af:1e:69:9d:dd:d8:34:de:a2:56:cb:8b:04:99:bd:a0:
e9:f6:71:45:34:87:54:70:f0:1f:73:f5:85:fd:cf:77:07:9c:
31:fc:f7:1d:96:77:90:a1:f0:00:70:c0:9e:d7:20:75:29:44:
59:95:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:17 2025 by rpki-client