Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: gi+aM2aoXr9MsmWZY3Y988nzD6kRNjNZLfKB2SPRSW4=
Subject key identifier: 97:56:9E:D8:EE:7E:A2:7D:D1:3D:5A:DF:8B:D0:7C:FB:9F:3D:7B:2A
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 019A72267E4D3759B55583732F18021E603C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0471
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: yIFdQkSlRy9aWtZiUq2IWUlUcO/PD3yizqgc1N+IEOw=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7e:4d:37:59:b5:55:83:73:2f:18:02:1e:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=97569ed8ee7ea27dd13d5adf8bd07cfb9f3d7b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:07:7c:85:e0:eb:36:16:37:e2:bf:74:fb:
43:4e:50:8e:18:b6:6b:1a:be:6e:3c:99:16:86:d8:
02:f9:0b:13:be:dd:4b:bd:88:0f:b9:82:d9:9c:6a:
82:9e:97:14:76:e8:e5:8a:44:9f:bb:fb:c4:68:b8:
92:03:0e:c9:06:3a:24:e4:90:c2:d2:25:29:03:6d:
34:7c:38:18:a3:a2:44:2f:23:38:93:8d:1b:c3:a0:
c6:a1:e0:e3:91:f8:d1:4d:8f:36:e5:57:bd:9d:fa:
db:70:9d:17:e8:b0:11:53:4e:5f:24:71:9f:6d:7d:
2b:36:a3:f7:b4:4f:7f:42:80:a5:7c:0c:c7:8d:de:
07:05:f1:08:ce:82:5b:bb:a2:8e:36:32:32:4b:d4:
97:5e:f1:15:5e:44:0f:10:9b:97:8f:02:ab:22:05:
6b:25:d8:f2:d6:78:5c:a9:72:e0:d6:17:59:40:aa:
48:23:69:75:2a:56:6b:67:02:8f:ea:e7:9c:52:d0:
56:43:54:38:a6:ba:51:5e:cd:67:44:36:fc:f3:43:
64:0e:6b:4e:6e:e8:b9:65:e4:47:7e:54:f1:a3:a4:
9d:08:8a:08:2d:28:db:b9:eb:52:74:02:9f:e7:34:
87:7c:42:54:58:c2:2b:72:8c:c0:57:c0:33:3a:c9:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:56:9E:D8:EE:7E:A2:7D:D1:3D:5A:DF:8B:D0:7C:FB:9F:3D:7B:2A
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:d9:dd:5e:19:96:99:de:e4:ba:71:1a:45:40:89:06:f5:
36:d1:0c:42:9e:10:80:81:7a:97:46:8d:f9:fe:8d:39:15:25:
c2:05:60:59:a3:34:c6:e2:68:29:3e:d1:47:9c:48:63:5f:3e:
fe:73:cc:ac:c8:05:96:83:36:71:d2:14:58:64:94:0a:0d:78:
66:77:a1:c9:98:e6:ea:57:b8:53:35:89:8b:76:0f:29:b5:cf:
4f:dd:c4:6a:15:e5:27:be:bd:44:86:0b:51:1b:f5:cd:be:dc:
18:11:d9:22:36:76:24:b8:21:9a:3f:a9:2a:b4:41:a4:d1:13:
41:2a:91:fc:05:5d:78:91:c9:c4:95:77:5c:79:12:61:05:c0:
e9:0d:3c:cb:1c:82:a5:0b:cc:c6:37:36:4a:c4:9d:5b:2a:c0:
e9:a8:1e:31:62:15:fe:c1:ff:7d:44:c2:12:a8:9f:d1:15:59:
7d:5d:b6:55:0b:7c:20:17:ec:4e:d5:14:21:36:96:3b:08:49:
86:d4:17:66:83:88:1d:bb:41:da:a8:53:e9:2f:e6:ad:37:1b:
c4:e4:c9:de:7a:3a:10:bf:a1:18:31:9f:66:db:e7:e3:f8:d7:
8d:8a:66:57:52:74:9d:c6:f2:60:74:8a:c6:cd:b7:2e:07:ad:
ab:a7:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:15 2025 by rpki-client