Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: dcj7DIzG5wo72fDsFmbRER0Xuk0AaV6s4EudpQdKq2c=
Subject key identifier: C1:10:8E:C1:26:6B:CE:8F:C5:54:8E:B7:2F:D7:59:2D:C7:E4:C1:82
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 01974CD6A7A736497EF15AB1FF2332F8EB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 150D
Signing time: Sun 08 Jun 2025 00:00:25 +0000
Manifest this update: Sun 08 Jun 2025 00:00:25 +0000
Manifest next update: Mon 09 Jun 2025 00:00:25 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: Wpme5oXr5wwtvPxZ59gvyV8ZwI7mY/GOH9Sr7xq9rqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:a7:a7:36:49:7e:f1:5a:b1:ff:23:32:f8:eb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Jun 8 00:00:25 2025 GMT
Not After : Jun 9 00:00:25 2025 GMT
Subject: CN=c1108ec1266bce8fc5548eb72fd7592dc7e4c182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:06:71:b1:18:e4:1e:a0:58:cd:7a:41:54:
58:11:ff:8b:77:fa:1b:9a:3a:fd:db:ce:a3:35:82:
b1:ef:59:3b:5b:0a:94:11:1e:e7:ba:89:06:9f:b9:
4e:0d:66:d2:e3:77:ac:a5:f8:be:0e:8d:7c:36:26:
93:2d:4f:03:7c:0d:00:87:37:75:c8:3a:94:88:92:
18:47:15:58:8e:57:bc:8d:01:8c:ce:6d:19:db:6c:
a0:07:f2:9d:dc:ce:05:e6:5b:47:2f:64:18:42:d7:
30:f6:25:aa:de:d1:53:50:90:c3:f1:a6:8c:ee:19:
00:ed:f3:8b:e2:bc:18:50:6b:c9:b9:fe:cb:56:9c:
48:54:cf:2d:7d:fe:f6:47:ee:00:0b:97:6d:3f:2c:
f2:6c:f9:b0:cb:c1:86:57:7a:e6:a7:b8:7f:10:f2:
c5:b0:fb:e9:fb:9b:dc:10:ad:42:78:fe:fe:33:4c:
b1:78:d5:f4:5d:f8:30:c3:41:25:08:1a:2b:2e:6e:
10:c7:52:a0:aa:ff:d9:14:33:9b:b0:21:1e:15:e7:
80:45:67:2b:35:2a:5c:f2:dc:fd:e2:50:af:c1:3e:
fd:8f:9a:93:83:94:91:ff:67:6b:8a:c7:a8:dd:af:
4e:dc:3a:85:8c:12:bc:d5:3d:99:6a:4a:fe:c6:a0:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:8E:C1:26:6B:CE:8F:C5:54:8E:B7:2F:D7:59:2D:C7:E4:C1:82
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6c:85:d0:17:32:fa:e4:6c:85:47:ea:30:78:83:9a:90:fb:
5f:72:cf:22:45:a8:b5:79:a2:a1:8a:93:17:d3:f3:13:39:3e:
ce:ca:a0:66:72:fa:bb:d5:f4:d7:5d:c6:96:2f:47:db:52:93:
ab:a8:1f:5d:fe:88:9b:c3:e6:6a:dd:c2:6d:2f:8c:9e:45:bc:
bc:0a:64:b0:71:6a:41:86:ba:16:e9:c5:45:52:dd:52:97:ae:
72:af:66:20:36:29:cf:a7:df:53:a7:8f:a8:f5:d1:0d:72:73:
60:17:02:bf:4d:47:12:96:a4:13:dc:12:5c:37:8d:fe:7c:6f:
cc:f8:f8:d3:e1:86:0a:6b:0a:48:c0:09:d3:cb:89:62:6b:71:
70:a9:fd:91:e7:41:41:10:2e:02:a4:3c:fd:c6:92:7b:b7:c0:
c9:64:b4:64:3a:c5:cd:db:2d:d1:40:41:04:1c:9f:4d:e7:f1:
20:6a:02:de:ca:12:1a:61:2f:4d:e8:90:54:6a:96:1f:fc:64:
dc:dd:c8:6a:ee:1e:2c:6c:02:ec:ef:8a:36:b4:5c:cf:68:f4:
ab:d8:48:3c:5e:8e:ab:b5:eb:9e:e5:5b:f8:a4:5f:64:10:0d:
d3:fc:70:ab:2f:89:50:60:77:07:1e:ce:2e:68:5a:7f:11:8b:
d0:d2:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:11 2025 by rpki-client