Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier: bN8bAw1l4JuZfrQhRXOYfa2ojdSyMuWjoUfXtDORxoI=
Subject key identifier: 61:B7:D8:6C:46:64:D8:A1:38:39:0E:6E:30:4C:83:63:8E:E0:36:E8
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial: 019A725CA6C091CF2DB6BADE64C821792C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number: 02E6
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: w55U7E9wtbYIYs/YmRh3SPverF8yPKCam7oI9/BRMmI=)
2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a6:c0:91:cf:2d:b6:ba:de:64:c8:21:79:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=61b7d86c4664d8a138390e6e304c83638ee036e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:4f:e9:0c:05:ab:3e:75:73:fe:e6:55:26:
46:4d:06:f7:b8:0e:93:a0:4b:fe:a7:2a:07:d4:2c:
36:9a:bf:31:4f:5c:25:4b:c4:5e:15:3d:a0:e3:53:
48:38:17:ee:0d:1e:db:07:04:c3:e0:9e:78:8a:11:
12:e6:5f:48:d7:8e:9c:af:05:c4:d5:1f:b0:53:b6:
af:2a:46:44:be:c9:c4:14:c1:73:9b:55:8b:d8:f5:
19:36:db:b9:d3:e2:a4:41:c6:0a:1d:2c:9f:be:42:
e5:34:8d:80:5e:e7:8f:2c:9f:bf:f2:5f:e2:43:66:
56:42:9e:79:59:58:d3:00:82:c4:a7:1a:af:1f:3e:
da:5f:a6:64:50:89:67:0c:b4:7a:7c:61:9f:f4:7c:
db:6c:03:6a:2d:e8:c9:21:22:21:03:89:41:ed:98:
c6:93:9d:55:d0:35:5d:c3:6c:6e:ef:4f:79:01:f6:
c5:e5:fa:f5:01:b7:23:4d:60:ba:23:54:f7:53:3c:
d5:9f:04:d2:56:d3:bb:23:04:56:8c:ce:85:ad:77:
26:7e:a1:37:23:6e:12:cd:2f:c7:9b:bf:5c:62:e4:
93:64:97:26:82:7b:c5:b0:f3:c1:4d:08:d5:40:26:
46:18:b1:4a:29:f4:01:ef:b2:94:05:34:d0:44:3e:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:D8:6C:46:64:D8:A1:38:39:0E:6E:30:4C:83:63:8E:E0:36:E8
X509v3 Authority Key Identifier:
keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:3d:a6:a0:49:94:9d:a1:71:ad:06:11:18:95:a3:d9:1a:
40:40:bf:e5:88:02:68:15:bb:60:5c:13:3d:07:c4:5c:a0:f1:
b8:6a:43:d3:c5:aa:09:ff:20:8c:9d:7d:c3:61:99:62:fd:0e:
12:07:9c:66:fb:69:74:b7:79:d1:04:2a:07:6d:2e:d4:88:d6:
fc:c4:1a:3b:e8:1a:c4:0b:c8:4b:04:98:b3:8a:64:85:5f:ab:
72:2f:1b:99:52:85:67:83:37:d7:c7:be:00:f5:e4:73:d7:00:
86:3f:6c:9b:e0:c4:90:88:88:b6:0a:63:73:86:f7:f4:38:dd:
e3:3c:0f:1c:60:ce:4c:ca:42:56:d1:78:d6:2d:ad:d9:63:7c:
89:a1:49:4e:39:be:6b:f0:20:f3:ef:4b:77:41:7d:1a:bb:28:
dc:27:01:e7:d8:ab:59:66:5f:a0:12:b8:30:b9:f9:f2:d2:26:
00:fb:cd:87:e2:ea:db:11:52:31:bf:d0:77:7e:ec:24:f1:b0:
62:8c:2c:93:eb:f5:18:1a:c8:35:83:13:f4:e1:12:d8:ee:cf:
92:42:5a:d9:85:1f:44:8f:cc:0e:7c:85:06:99:fa:93:7b:c7:
7b:38:74:da:11:bb:ff:26:39:46:4e:e9:ac:2f:73:cf:be:a1:
44:7e:c6:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKbAkc8ttrreZMgheSw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz
ZTZhOTgwHhcNMjUxMTExMTAwMTA1WhcNMjUxMTEyMTAwMTA1WjAzMTEwLwYDVQQD
Eyg2MWI3ZDg2YzQ2NjRkOGExMzgzOTBlNmUzMDRjODM2MzhlZTAzNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhP6QwFqz51c/7mVSZGTQb3uA6T
oEv+pyoH1Cw2mr8xT1wlS8ReFT2g41NIOBfuDR7bBwTD4J54ihES5l9I146crwXE
1R+wU7avKkZEvsnEFMFzm1WL2PUZNtu50+KkQcYKHSyfvkLlNI2AXuePLJ+/8l/i
Q2ZWQp55WVjTAILEpxqvHz7aX6ZkUIlnDLR6fGGf9HzbbANqLejJISIhA4lB7ZjG
k51V0DVdw2xu7095AfbF5fr1AbcjTWC6I1T3UzzVnwTSVtO7IwRWjM6FrXcmfqE3
I24SzS/Hm79cYuSTZJcmgnvFsPPBTQjVQCZGGLFKKfQB77KUBTTQRD4JCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG32GxGZNihODkObjBMg2OO4DboMB8GA1UdIwQY
MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt
ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2
LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+89pqBJ
lJ2hca0GERiVo9kaQEC/5YgCaBW7YFwTPQfEXKDxuGpD08WqCf8gjJ19w2GZYv0O
EgecZvtpdLd50QQqB20u1IjW/MQaO+gaxAvISwSYs4pkhV+rci8bmVKFZ4M318e+
APXkc9cAhj9sm+DEkIiItgpjc4b39Djd4zwPHGDOTMpCVtF41i2t2WN8iaFJTjm+
a/Ag8+9Ld0F9Grso3CcB59irWWZfoBK4MLn58tImAPvNh+Lq2xFSMb/Qd37sJPGw
Yowsk+v1GBrINYMT9OES2O7PkkJa2YUfRI/MDnyFBpn6k3vHezh02hG7/yY5Rk7p
rC9zz76hRH7GFA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:59 2025 by rpki-client