Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: DjEJiGo6WmT4eyohwL54xPg/sY4RL08lDcK9cRNXM2U=
Subject key identifier: 4E:7C:58:C6:28:92:FD:AC:41:42:2B:35:48:1D:3D:6A:76:F3:92:3A
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019A119655F55B1909652AB8E253C7580624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 16ED
Signing time: Thu 23 Oct 2025 15:00:56 +0000
Manifest this update: Thu 23 Oct 2025 15:00:56 +0000
Manifest next update: Fri 24 Oct 2025 15:00:56 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: jOxsvDiJ+8tlCS/2l4yojP+/0pgsg5nDcSADNQyx+tI=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:96:55:f5:5b:19:09:65:2a:b8:e2:53:c7:58:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Oct 23 15:00:56 2025 GMT
Not After : Oct 24 15:00:56 2025 GMT
Subject: CN=4e7c58c62892fdac41422b35481d3d6a76f3923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:85:7e:89:26:88:11:94:6e:fb:03:96:1c:
8c:4b:7d:e4:84:a4:95:2f:34:bc:83:26:f3:4e:4a:
a8:dc:31:21:6c:36:3d:50:7c:67:23:5f:df:db:20:
5c:2e:d8:9b:5e:76:c8:47:0b:6c:23:9f:b1:d3:8c:
23:00:10:f8:f8:e1:69:c2:8c:76:cf:0c:58:06:0c:
1a:b4:d6:57:5d:95:c1:cd:9d:97:02:49:39:a1:3d:
c6:0e:f5:d3:73:33:2e:8c:fb:bd:f3:81:26:f8:ca:
e1:46:58:2b:b4:21:25:67:48:db:ce:e5:3c:d8:c7:
67:d6:8b:a0:7b:ba:71:ae:de:96:3f:97:5a:e3:f5:
ff:95:2e:77:c2:3e:18:93:6c:1c:74:0a:f3:94:3b:
c2:56:97:b0:38:58:b3:ab:d0:aa:0f:05:56:97:cc:
05:a3:ef:de:42:8b:09:33:8b:16:6d:8e:60:5c:7a:
2b:38:50:a5:67:12:15:e2:94:f1:26:11:da:5d:6e:
6b:17:8f:90:b3:48:8f:1c:3b:e6:73:02:cc:74:6c:
27:e8:b6:b8:54:23:c1:9e:5d:96:1a:37:72:53:04:
f2:d9:26:aa:97:af:6c:44:c0:c7:ed:b2:e2:0f:03:
17:d5:4e:00:30:78:aa:1d:0c:22:2c:59:5a:17:bd:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:58:C6:28:92:FD:AC:41:42:2B:35:48:1D:3D:6A:76:F3:92:3A
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:be:4f:c6:74:80:88:d7:ec:69:9e:93:3f:34:45:58:32:
a4:97:9f:b3:f2:05:69:20:9b:81:e9:2c:bb:3b:61:bd:1c:87:
0e:d6:72:ff:8c:2a:7c:0f:76:68:12:82:f3:02:06:12:9b:eb:
92:d0:40:e4:e7:61:6f:69:3c:41:d3:d5:3f:80:2c:37:0d:9f:
21:52:23:76:70:8b:84:c4:e2:8d:c7:6c:4a:58:8b:26:b4:ff:
47:b2:27:ea:cf:aa:84:e6:23:2c:21:2e:eb:05:61:9d:89:b6:
b8:b2:3b:4b:80:1c:f1:d9:0c:28:0c:f6:05:43:e8:1b:ed:5a:
4f:e4:8c:9b:5a:09:fc:bb:38:dd:e8:e9:c1:bc:ab:4e:d3:b7:
67:3b:ea:a9:4d:75:64:cc:8d:cd:49:16:d2:b8:3d:97:30:da:
6e:73:6d:c3:cf:12:60:39:83:c4:fa:f2:8a:e0:62:7f:0e:76:
2a:96:e3:79:be:d9:cd:3c:ce:39:cb:e0:e3:c2:8a:33:89:29:
8e:7e:07:68:c1:08:d3:26:71:87:5f:6a:b9:f4:d2:7d:b9:4a:
46:7c:73:1e:60:d2:24:14:d6:7f:ab:cc:7a:3c:20:eb:45:cf:
1c:6e:55:dd:cb:df:6d:6b:8c:e3:3a:52:d0:97:52:60:34:f4:
1e:fe:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:10:35 2025 by rpki-client