Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: AOJoR3F2lp5ydMijkYnJv2K2tKyt92tmn6sp1XYAa3w=
Subject key identifier: ED:B8:00:12:CF:10:03:1B:9C:68:4F:DE:02:8F:DB:80:F5:D7:06:B2
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01992D7DB5EB8BB24AFDC19289120BF55A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0D67
Signing time: Tue 09 Sep 2025 08:00:37 +0000
Manifest this update: Tue 09 Sep 2025 08:00:37 +0000
Manifest next update: Wed 10 Sep 2025 08:00:37 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: +rqSaolWWRPbkm7WnX2hOOwzgA1hlxVcKmhfspTRylw=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7d:b5:eb:8b:b2:4a:fd:c1:92:89:12:0b:f5:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Sep 9 08:00:37 2025 GMT
Not After : Sep 10 08:00:37 2025 GMT
Subject: CN=edb80012cf10031b9c684fde028fdb80f5d706b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:fa:18:56:1b:8c:e9:f6:44:3f:0c:5f:62:
85:b6:2f:7b:4a:cb:7b:47:53:5c:31:a4:8b:41:39:
20:32:34:25:ab:cc:9c:59:50:79:31:01:3d:db:98:
9d:66:42:d3:02:14:ca:e3:5c:06:bc:6e:82:58:42:
7e:34:3a:82:2e:71:32:b6:3a:61:7a:0f:21:7c:9c:
5a:fb:f3:10:a9:ca:66:62:f0:bb:f0:fb:25:07:99:
69:b4:c5:92:f7:d2:9e:96:54:88:15:cd:b9:fd:1f:
18:e6:4a:5a:ab:90:39:5d:c0:04:20:20:31:29:a5:
06:ba:b8:72:bf:f1:21:87:3b:56:23:82:ec:f2:a8:
c0:f9:5e:b6:10:3c:22:f8:67:a2:de:c4:91:70:11:
1c:1e:04:8a:51:81:62:00:85:a7:5c:0a:82:9a:f2:
cf:aa:34:81:3c:c4:34:c7:c2:b6:c4:f6:f3:73:da:
6c:7d:21:42:b7:00:d0:d5:5e:1d:b0:0c:3c:d9:4a:
7b:5a:14:55:6f:4d:33:f9:a1:3e:69:98:6c:c4:a0:
6b:e8:38:71:15:42:8f:a5:4c:bd:77:2e:cc:29:db:
e7:87:b8:75:70:e6:79:1d:62:3f:9c:b8:8a:d9:3c:
f2:27:13:3d:c4:fb:3a:1c:92:60:a4:e1:54:14:32:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:00:12:CF:10:03:1B:9C:68:4F:DE:02:8F:DB:80:F5:D7:06:B2
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d7:65:aa:0d:c4:c5:9a:a6:aa:d1:3a:ff:fb:f3:77:e6:76:
19:af:03:a5:38:19:40:88:d0:0b:2a:a3:60:f5:c0:21:d6:96:
39:29:3e:31:f2:f6:64:ba:d1:14:f3:16:b9:7f:76:0b:04:80:
e2:e4:bc:ce:64:d2:95:c2:42:b0:57:a8:15:d5:62:2e:19:5c:
03:49:27:5b:87:08:8c:11:1c:e9:08:6b:03:d2:ad:e5:c3:2a:
9b:fa:85:38:2a:d8:48:e5:5c:a5:e2:e2:cd:a3:c5:72:f2:94:
27:b7:fc:12:ea:24:a6:57:0a:d4:35:a9:ea:2a:68:e8:86:57:
0f:af:26:6d:6b:2d:40:68:f1:29:3f:00:06:f6:40:8d:01:de:
98:18:00:44:48:56:ce:fc:f0:b5:c4:5b:0b:f9:8f:d5:69:1f:
0d:e8:9b:9e:d8:a9:be:f2:41:28:8d:60:74:15:a9:1a:ef:33:
75:5f:74:d6:6d:95:3c:00:29:70:eb:70:be:30:90:cf:9d:a8:
52:6e:06:a8:ac:6a:01:37:77:25:a2:ac:91:ac:31:1d:ca:b1:
9d:59:02:b5:6e:61:77:65:4a:d0:74:45:81:18:69:ca:eb:2a:
cd:ca:22:0a:e7:1b:88:c5:1f:e0:6c:47:00:15:44:80:6a:82:
5a:de:fe:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktfbXri7JK/cGSiRIL9VqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOWU5ODMzNmY2YTZjYzlkYmNmMWVjYjQ4OTU1ODBmMDk0
ZTNlMmIwHhcNMjUwOTA5MDgwMDM3WhcNMjUwOTEwMDgwMDM3WjAzMTEwLwYDVQQD
EyhlZGI4MDAxMmNmMTAwMzFiOWM2ODRmZGUwMjhmZGI4MGY1ZDcwNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHb6GFYbjOn2RD8MX2KFti97Sst7
R1NcMaSLQTkgMjQlq8ycWVB5MQE925idZkLTAhTK41wGvG6CWEJ+NDqCLnEytjph
eg8hfJxa+/MQqcpmYvC78PslB5lptMWS99KellSIFc25/R8Y5kpaq5A5XcAEICAx
KaUGurhyv/EhhztWI4Ls8qjA+V62EDwi+Gei3sSRcBEcHgSKUYFiAIWnXAqCmvLP
qjSBPMQ0x8K2xPbzc9psfSFCtwDQ1V4dsAw82Up7WhRVb00z+aE+aZhsxKBr6Dhx
FUKPpUy9dy7MKdvnh7h1cOZ5HWI/nLiK2TzyJxM9xPs6HJJgpOFUFDLZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO24ABLPEAMbnGhP3gKP24D11wayMB8GA1UdIwQY
MBaAFAKemDNvamzJ288ey0iVWA8JTj4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUt
MGZlNmY1NWRiM2Y2LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUtMGZlNmY1NWRiM2Y2
LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9dlqg3E
xZqmqtE6//vzd+Z2Ga8DpTgZQIjQCyqjYPXAIdaWOSk+MfL2ZLrRFPMWuX92CwSA
4uS8zmTSlcJCsFeoFdViLhlcA0knW4cIjBEc6QhrA9Kt5cMqm/qFOCrYSOVcpeLi
zaPFcvKUJ7f8EuokplcK1DWp6ipo6IZXD68mbWstQGjxKT8ABvZAjQHemBgAREhW
zvzwtcRbC/mP1WkfDeibntipvvJBKI1gdBWpGu8zdV901m2VPAApcOtwvjCQz52o
Um4GqKxqATd3JaKskawxHcqxnVkCtW5hd2VK0HRFgRhpyusqzcoiCucbiMUf4GxH
ABVEgGqCWt7+Sw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:38:58 2025 by rpki-client