Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: Cfd9nvCSCsW2/h5og0I3a5cFWIUKTxb12FsFDnXEtYo=
Subject key identifier: 62:A6:8C:CF:E8:D8:C5:D3:4A:78:7E:BE:91:3D:4F:56:05:55:BB:42
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 0199221E476B42EECEFC061F23177F1C7D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 03:00:33 +0000
Manifest this update: Sun 07 Sep 2025 03:00:33 +0000
Manifest next update: Mon 08 Sep 2025 03:00:33 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: J6/zwg2KtFTLBleBSmQOtqAt9qUv35PBFeI923R3baU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:47:6b:42:ee:ce:fc:06:1f:23:17:7f:1c:7d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Sep 7 03:00:33 2025 GMT
Not After : Sep 8 03:00:33 2025 GMT
Subject: CN=62a68ccfe8d8c5d34a787ebe913d4f560555bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:5c:38:f1:e8:68:31:34:31:a4:1b:40:8b:
c3:58:14:ce:08:dd:27:41:03:6d:fa:b1:ca:94:dc:
c5:ac:e6:99:78:ab:3f:43:c6:47:e5:e7:b8:c6:d7:
4c:15:9a:f6:bd:22:a4:a3:d2:a7:91:dd:47:a8:27:
e2:1b:99:5a:e0:bc:ec:3a:1a:76:23:b2:c4:eb:d6:
82:44:15:56:76:29:cd:c5:fa:e2:1f:9c:1b:e7:87:
e0:2f:2c:63:09:a5:9f:c6:9a:ed:df:8a:51:60:2b:
e4:75:25:14:2b:6d:f9:b5:16:bf:5e:90:a4:99:4b:
e1:75:f6:aa:86:3f:68:30:f4:9e:0d:f1:c2:32:43:
15:53:01:34:7d:e6:24:bf:24:72:4b:f4:53:96:84:
ed:82:c4:11:7f:7c:ec:f6:f9:e4:83:52:f2:24:85:
24:c3:5f:bc:49:9d:53:a5:86:58:a0:29:3a:68:48:
7d:1b:a7:09:96:f9:bc:9c:eb:65:0f:26:23:f2:4e:
64:ac:37:be:08:44:5d:5e:77:55:25:fc:69:88:43:
e4:ea:e1:ba:5b:f4:92:cb:c6:4e:29:6d:79:7f:4b:
8a:bc:d6:25:29:d9:34:d6:01:39:9e:83:38:cd:a0:
73:d9:a0:be:59:7c:79:26:a1:7c:75:12:0e:fe:13:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:8C:CF:E8:D8:C5:D3:4A:78:7E:BE:91:3D:4F:56:05:55:BB:42
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:5c:d7:a1:de:c3:a7:ef:7a:87:03:e5:dc:b0:9e:85:5e:
bb:9e:5d:cb:a2:5b:c6:8f:45:bc:1d:51:a8:9e:de:ed:e3:d9:
01:9a:a6:7d:d1:7f:4f:f8:82:58:b8:76:d8:1e:76:1c:b3:72:
27:14:c4:02:00:f9:8f:15:bc:1b:ed:41:ac:65:88:ec:ee:d0:
6e:20:ba:9e:35:26:f4:0b:5d:d3:4a:84:cb:fc:fd:86:52:e7:
e1:1b:0a:31:91:99:b9:41:49:e1:1c:6a:25:4f:5f:b2:93:e2:
9a:63:c9:3b:dc:1c:83:82:de:fe:72:bd:04:2b:44:e5:80:5f:
04:5c:90:2c:4f:c6:18:8d:2c:f4:8d:18:d5:ad:ed:1f:5e:2f:
da:26:1e:35:a0:18:c6:4c:69:37:8b:83:94:e5:70:1b:a9:11:
f6:1f:23:50:76:86:4f:52:cd:17:64:32:84:e1:34:73:15:54:
36:84:25:5c:75:37:85:bb:2c:28:d6:70:7a:01:83:a2:7f:f8:
6a:5c:ff:d2:ee:2d:e6:34:88:22:f9:a4:af:1c:9e:21:06:81:
a6:cc:c9:cb:fb:b0:29:ae:25:46:3c:87:aa:16:fd:2d:1c:4a:
cc:e8:09:27:71:08:6b:17:08:a6:dc:88:bb:8c:0d:3b:88:cd:
7c:95:80:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHkdrQu7O/AYfIxd/HH2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOWY5MzAwMmQ3OGU4ZTQwZGE1NjBjNDI5MWZiODMwZDky
ZGZmNjYwHhcNMjUwOTA3MDMwMDMzWhcNMjUwOTA4MDMwMDMzWjAzMTEwLwYDVQQD
Eyg2MmE2OGNjZmU4ZDhjNWQzNGE3ODdlYmU5MTNkNGY1NjA1NTViYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrRcOPHoaDE0MaQbQIvDWBTOCN0n
QQNt+rHKlNzFrOaZeKs/Q8ZH5ee4xtdMFZr2vSKko9Knkd1HqCfiG5la4LzsOhp2
I7LE69aCRBVWdinNxfriH5wb54fgLyxjCaWfxprt34pRYCvkdSUUK235tRa/XpCk
mUvhdfaqhj9oMPSeDfHCMkMVUwE0feYkvyRyS/RTloTtgsQRf3zs9vnkg1LyJIUk
w1+8SZ1TpYZYoCk6aEh9G6cJlvm8nOtlDyYj8k5krDe+CERdXndVJfxpiEPk6uG6
W/SSy8ZOKW15f0uKvNYlKdk01gE5noM4zaBz2aC+WXx5JqF8dRIO/hORRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKmjM/o2MXTSnh+vpE9T1YFVbtCMB8GA1UdIwQY
MBaAFAKfkwAteOjkDaVgxCkfuDDZLf9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2Yt
NWYyNjM1NWM4YTc0LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2YtNWYyNjM1NWM4YTc0
LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK35c16He
w6fveocD5dywnoVeu55dy6Jbxo9FvB1RqJ7e7ePZAZqmfdF/T/iCWLh22B52HLNy
JxTEAgD5jxW8G+1BrGWI7O7QbiC6njUm9Atd00qEy/z9hlLn4RsKMZGZuUFJ4Rxq
JU9fspPimmPJO9wcg4Le/nK9BCtE5YBfBFyQLE/GGI0s9I0Y1a3tH14v2iYeNaAY
xkxpN4uDlOVwG6kR9h8jUHaGT1LNF2QyhOE0cxVUNoQlXHU3hbssKNZwegGDon/4
alz/0u4t5jSIIvmkrxyeIQaBpszJy/uwKa4lRjyHqhb9LRxKzOgJJ3EIaxcIptyI
u4wNO4jNfJWAFA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:21 2025 by rpki-client