Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier: zuUMxcJ6aY4OEwP18yYmKB7T7gnGtxEUnQyJlGKvv1M=
Subject key identifier: 3A:E8:23:5F:A8:93:CB:EB:B2:8B:1A:B6:29:EC:62:D0:87:03:C6:5B
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 019A725C9F4769CAB18D86007F5C15F6A758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number: 0235
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: D5IKnTWExH7GfyKqERoHxtFLsoQxJ2VaTWZpXqwLqnw=)
2: tIh3EbNG8PyhR2bhdKGu98lXfi0.roa (hash: WvckFFiPzlkbuyQKqzi40xspGv9L4xehhqGGvB5LMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9f:47:69:ca:b1:8d:86:00:7f:5c:15:f6:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=3ae8235fa893cbebb28b1ab629ec62d08703c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:68:af:03:55:fa:e5:c8:8c:f3:be:af:a4:
34:cd:3c:3d:a8:5e:ec:7b:db:ee:e8:24:bf:fb:45:
4f:a5:cb:06:dc:08:66:7d:d9:a1:43:91:03:91:d2:
5f:c8:a6:6d:6a:40:64:82:c5:9a:90:8f:b8:90:18:
b1:3c:fb:2a:da:b2:4a:ac:e9:15:81:35:dd:93:50:
75:de:6a:de:85:11:9e:25:34:af:05:38:49:89:f9:
75:a7:e9:d3:01:53:b4:0a:19:8a:26:b8:c2:2e:98:
0c:71:ab:1e:88:18:86:13:99:cd:9a:09:fe:dd:ce:
c7:2d:40:c2:9a:8a:2b:cd:e1:7a:e1:5c:1a:a9:4e:
29:eb:cc:ca:9a:8d:b2:db:5b:dd:32:44:d2:fc:94:
63:8e:3f:66:b2:38:25:bc:62:2a:d2:48:22:19:f2:
c3:88:7b:f5:d7:57:15:5c:ca:09:d3:a9:8a:71:5f:
13:71:a6:5d:fc:dc:62:51:07:ff:3c:89:64:6b:0f:
1a:22:4b:0b:22:9f:f6:66:37:6e:b7:d8:89:1b:3a:
68:ba:e9:92:14:13:0b:0b:8c:ff:dc:01:67:1c:e0:
e9:e9:1c:3b:97:44:b2:95:c3:43:31:7d:c0:9f:ab:
ac:24:c1:7b:d9:5e:9b:91:5e:7b:c5:41:78:f9:88:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:23:5F:A8:93:CB:EB:B2:8B:1A:B6:29:EC:62:D0:87:03:C6:5B
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9e:b9:de:a8:2c:a5:ba:34:6b:98:8e:0d:2a:66:86:37:34:
6e:ce:fc:34:10:32:b5:ac:aa:87:23:40:4f:20:0f:94:c9:01:
91:ca:ab:d3:9e:0c:3e:71:85:17:e9:04:0f:a8:bf:c9:3b:8f:
a0:54:7e:0c:4e:85:6c:3d:e4:9a:53:9a:d9:3e:84:79:4f:50:
66:c2:a8:85:da:66:25:94:0f:f3:c8:b7:99:60:1e:5a:c8:b8:
31:a0:ec:f7:73:91:ab:87:44:fe:a3:47:f6:35:9b:b7:ae:5d:
cd:72:94:11:8f:f0:94:47:04:f2:7a:fa:6b:11:dd:8a:c5:a8:
e6:d1:d6:10:77:a0:d6:a8:1e:05:4c:14:b3:bd:97:22:1b:4c:
b3:c2:25:8e:89:94:76:7b:a4:9c:7d:b0:2d:20:c2:00:45:f9:
b4:3c:85:9f:5d:db:4d:53:b2:9f:90:5d:37:d6:68:6d:41:eb:
20:4e:77:5c:ac:f2:de:58:58:9c:22:c9:8e:88:a3:97:6e:4a:
7b:74:96:e8:c9:56:fe:34:77:9c:85:c8:73:b1:5e:b8:33:4f:
4d:da:4c:a9:b0:9e:87:56:3e:72:2b:08:9e:4f:65:e1:f4:78:
39:8a:b4:fd:9d:d8:a1:0e:86:4f:7b:56:3e:7a:90:54:ef:2d:
4c:df:f4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:04 2025 by rpki-client