Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: pGwwdgovJCjoLNoF8PjlCau7XS4gqAI0zxVHxCgH0eA=
Subject key identifier: 8C:70:75:9D:51:26:9C:F3:70:95:B3:BB:94:36:07:E8:60:20:F3:64
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019A72266BAE910B9DFC4936C28157BF4A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: R1+7FFErUXGwVtlQFFt5Bir6yBeMixb3H4M8YOnCcuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6b:ae:91:0b:9d:fc:49:36:c2:81:57:bf:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=8c70759d51269cf37095b3bb943607e86020f364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:1b:09:3c:b9:d4:4c:4b:38:ac:52:0d:e7:
06:72:dc:47:8e:02:49:c3:ec:9a:dd:b3:87:f4:8e:
f7:b7:88:9f:1d:2d:5b:3a:45:7d:47:5b:9d:d9:24:
e6:3f:50:ba:06:5a:81:5e:ab:ca:4b:74:22:73:14:
54:92:ff:61:8e:7f:60:9d:1d:c9:cb:ed:0e:ca:52:
bf:1d:ca:fd:49:e2:62:00:c3:6d:64:7e:20:a2:f2:
65:d2:09:a9:a0:62:6c:4c:e5:ea:94:e6:b1:98:fa:
c9:b5:b2:21:dd:c2:43:b6:a9:26:54:b7:e0:88:89:
5b:d5:59:da:f0:9c:1f:02:56:00:84:9f:63:db:a2:
a8:2b:f0:e6:e0:62:f8:5a:4c:a0:94:b5:bb:46:06:
25:5c:42:f0:f5:c0:6a:04:3f:e2:cd:f8:f0:bc:51:
6b:90:94:94:51:a3:ce:b8:ea:94:aa:03:d3:a1:e4:
18:4d:c1:a7:7b:a6:89:28:c3:0b:c7:c6:2d:7d:8d:
56:dd:93:dd:6e:b9:1b:2b:48:be:a2:1c:17:b0:76:
b5:ac:12:37:7c:1b:79:5e:95:26:80:c6:53:84:2d:
4e:bf:c8:9f:55:b8:b8:1c:a0:ca:8c:14:af:0b:88:
32:6b:d2:a6:28:33:b5:df:c6:d4:a3:24:a7:4c:04:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:70:75:9D:51:26:9C:F3:70:95:B3:BB:94:36:07:E8:60:20:F3:64
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:c7:00:8d:e9:b3:be:d6:4b:ed:e5:86:c3:27:14:4b:a3:
b1:02:64:84:7d:62:a7:5a:b6:5f:b4:e8:e1:23:bf:5d:12:73:
10:c5:ba:e8:e6:9b:47:77:65:2a:a7:8e:9d:3e:ae:ec:4a:b3:
16:0a:8b:e5:c0:f6:8d:5a:e5:0c:f9:46:2a:24:ba:a4:3c:d5:
c8:57:30:d3:33:46:7e:f8:e8:c5:31:eb:4a:ee:fa:57:c7:94:
31:85:78:73:c4:46:18:a5:98:64:6b:34:f3:03:8f:81:ce:98:
47:75:3e:2a:57:d7:4d:68:cf:5d:88:9b:12:04:85:23:d4:e2:
6e:6b:f0:a3:5b:d3:36:de:3c:ec:46:bc:f6:94:96:55:65:42:
db:ac:d2:95:12:8f:c5:c4:16:bf:0a:21:97:7d:5d:31:3c:87:
28:cc:33:10:31:98:c5:83:9d:3a:61:d3:e2:60:b6:3e:a7:43:
89:8f:08:9a:ac:d6:4e:0b:75:eb:95:8c:5e:ff:e3:6a:f8:c1:
df:84:eb:0e:a3:0f:31:04:71:b4:2b:0d:50:51:b0:6a:13:35:
fe:0d:2d:8d:21:26:5c:48:f1:42:18:c8:64:70:96:7d:77:7b:
65:e6:0c:b3:e8:6d:b4:ec:21:c9:f0:8b:63:28:35:d6:d5:cd:
fa:3c:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:59 2025 by rpki-client