Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File: APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier: b8enQ41vig0vuad0Rp67RwAGPXzK9dPCxdZqc0Z7tBE=
Subject key identifier: AB:0C:C3:BF:19:EF:2D:71:CB:43:E2:20:3D:57:82:3C:30:DC:D1:D0
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 01993794E7858631378ED4231899BBCF3190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number: 15A9
Signing time: Thu 11 Sep 2025 07:02:09 +0000
Manifest this update: Thu 11 Sep 2025 07:02:09 +0000
Manifest next update: Fri 12 Sep 2025 07:02:09 +0000
Files and hashes: 1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: XSlnicJzj16GTzv3mnqt1/IZFCfNBUFZMwQ9Z05DMGY=)
3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:e7:85:86:31:37:8e:d4:23:18:99:bb:cf:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Sep 11 07:02:09 2025 GMT
Not After : Sep 12 07:02:09 2025 GMT
Subject: CN=ab0cc3bf19ef2d71cb43e2203d57823c30dcd1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:e1:37:57:95:e6:82:3e:ca:c6:b1:b5:88:
8f:57:cb:3f:fc:39:cd:63:85:2a:ff:69:5a:8f:59:
9f:dc:b5:95:59:c4:b0:70:c7:44:de:3a:74:92:dc:
af:1d:fe:c4:0c:7c:69:18:45:61:f1:ba:81:8e:e6:
5f:26:49:6f:d9:01:4f:26:b5:c2:3f:1f:5a:e3:1b:
a1:f2:47:f6:b7:13:7c:63:d8:8d:4f:a1:36:6d:e0:
5a:af:57:e3:10:01:7b:82:6d:62:e1:1b:09:c4:94:
47:24:de:17:9d:bd:35:6e:ee:08:34:bf:9b:fe:9c:
bd:04:db:62:f3:36:23:c5:e5:8b:27:47:8b:cd:b6:
2a:a6:0e:fc:a2:3f:2b:96:d1:cd:0a:1a:bf:fb:67:
1d:1d:a6:80:cc:11:ac:6e:6e:fb:2e:b8:8b:0f:86:
a9:bd:ef:33:e4:8f:fa:0a:99:79:cb:ac:61:02:6d:
3d:9c:85:f5:d7:1f:d7:01:a6:b7:87:54:ac:9e:1c:
0d:44:34:2e:73:df:31:7f:69:cc:c8:ff:da:fe:fa:
2a:83:e6:eb:5d:59:30:02:ea:93:b2:08:f2:6b:bf:
87:89:12:02:98:fb:d7:f3:7a:89:c2:86:d1:07:44:
00:34:bb:15:4e:a6:92:2e:b5:14:ef:69:eb:09:3b:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:C3:BF:19:EF:2D:71:CB:43:E2:20:3D:57:82:3C:30:DC:D1:D0
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:59:60:0c:72:53:36:75:35:13:23:92:56:ca:2e:07:83:
7f:41:1d:67:6b:97:ed:a3:be:10:11:6f:0c:67:36:2f:96:9f:
3f:b5:d9:71:ba:b2:44:e7:1f:e8:2d:6f:dd:2b:1d:70:79:fd:
42:fa:0c:72:aa:e0:61:91:59:ba:e5:a5:30:b0:ba:e1:fd:6f:
00:d0:e4:48:41:3c:31:19:23:5d:e1:c2:95:45:ae:0f:c6:ce:
fc:19:10:86:e7:d2:08:4f:3a:8f:23:43:fb:f3:b0:d9:19:f1:
0e:ec:0f:ad:85:ca:3f:9e:77:f7:72:13:11:7d:c2:0e:58:60:
0d:f3:f2:87:56:e0:62:9a:6e:6a:bf:50:5e:cc:ed:f8:76:7a:
27:40:17:17:b3:51:63:8f:c0:45:fb:4d:5a:65:bf:35:ef:4c:
17:87:1a:6a:29:9e:7e:55:41:be:68:7d:24:f9:ae:ec:e2:b6:
a2:41:84:b4:55:0a:7b:9c:16:b8:29:61:ad:ad:1b:2c:ba:eb:
90:c8:a6:c7:8f:54:11:21:f9:8e:69:b1:45:53:19:09:4e:d6:
49:0b:db:97:99:ba:ef:02:c5:63:69:e4:93:ab:d0:e4:d6:a5:
d0:4d:a5:ce:3f:49:26:6a:b3:66:e6:de:2d:ea:c4:e5:eb:aa:
1f:b0:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:38:21 2025 by rpki-client