Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: teD46v6PBGywarIWdLjnp+bn4ON18Pjtr4LBz/TDk2Y=
Subject key identifier: 10:37:11:7E:BE:9E:49:D8:E8:D6:3B:13:D4:C6:B6:58:33:5B:4C:FD
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 0197B77C12CB76B896B1B371B0E13F85C27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: RUr1tQsert+cL9hdi6giewSat4IGU3kD15y3XPbjvPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:12:cb:76:b8:96:b1:b3:71:b0:e1:3f:85:c2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=1037117ebe9e49d8e8d63b13d4c6b658335b4cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:47:d7:a6:ab:35:bf:47:17:d4:d0:8c:52:
b5:fc:42:b8:d1:1b:13:74:4d:43:d2:05:2e:92:c0:
f3:c2:c7:e1:af:04:22:97:e6:88:27:e0:4a:b7:90:
20:3e:46:1c:15:11:be:6f:bd:6b:96:69:11:54:86:
52:2e:45:36:b2:5b:f2:97:a5:c6:5d:9a:1c:21:12:
64:ec:47:48:c1:c8:ac:43:ef:38:e1:15:0b:b8:64:
d2:e1:e6:b6:3c:05:bf:da:4e:76:08:c3:e9:ee:75:
7d:e1:9c:16:2c:09:ce:82:96:05:59:d8:67:b0:e0:
bc:06:57:f9:0d:53:62:66:e3:54:04:d4:e4:8e:6a:
12:de:8c:ef:ad:ec:05:54:c8:57:e3:85:b0:91:c5:
6e:b0:db:93:f0:43:f3:e4:74:a5:15:2e:1c:2e:3e:
d8:3d:74:60:7a:a0:63:9c:7c:8b:e9:b7:8e:48:b1:
df:92:33:7b:32:85:36:03:7b:5c:22:9b:b8:f8:c9:
a4:e7:f0:c2:37:77:28:f1:4c:53:58:7a:bf:e1:e0:
db:d6:ff:f7:6d:d7:d4:36:c7:fb:2e:2f:81:df:82:
d4:bf:97:38:a5:2e:09:22:19:15:7e:c8:4d:60:e7:
2f:b2:b6:fe:96:85:0f:e2:89:e9:26:6a:f4:b9:ad:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:11:7E:BE:9E:49:D8:E8:D6:3B:13:D4:C6:B6:58:33:5B:4C:FD
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:63:8f:2f:f2:e3:c9:a1:f1:af:b7:ac:4c:31:35:5a:90:61:
c8:2d:49:29:a7:74:7f:b0:b9:50:39:2c:6f:ea:b7:37:11:fd:
22:9c:05:42:f8:86:9b:c5:82:98:09:6b:54:41:63:d8:4f:fb:
ec:a2:e0:8c:c7:d0:cf:a4:08:46:33:cb:97:c0:81:5d:37:a5:
9f:7c:50:68:76:45:8d:1f:b5:0d:af:df:0d:87:2d:ae:68:7e:
e7:cd:cd:d6:df:73:48:74:0e:09:71:28:09:50:79:e4:bc:cc:
e7:e3:6c:40:9e:c9:28:12:cd:7d:88:86:bd:4e:a1:87:d5:f9:
70:04:bc:1e:37:0d:f1:c1:09:fb:ad:85:11:78:9c:f5:15:70:
ff:8f:93:15:0c:72:53:5d:90:18:40:ba:6c:0a:9e:bc:4c:1b:
2e:d1:3d:87:08:44:e9:c5:47:44:49:de:6a:0e:3e:ae:07:37:
68:b8:1e:66:b2:39:19:99:d4:9d:76:25:a6:d6:42:dc:d3:da:
a6:7b:bc:31:53:a3:3b:6c:cd:47:06:a8:71:bd:29:89:4b:8e:
66:45:70:79:58:5a:04:f8:0a:9b:b8:00:ca:e9:75:4b:2e:0d:
9d:e0:93:3f:a9:8e:65:c5:da:82:ca:56:bb:03:8c:24:48:c5:
68:52:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:44 2025 by rpki-client