Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: eix75C+G8shkaemAAoePG85rBdvajcfUVczfjPhHY5U=
Subject key identifier: BB:63:26:3A:5A:99:EC:AB:50:FB:2C:C1:6A:AC:33:D7:B4:92:3B:59
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 0198D85082E50429ADE16047764C072D675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 19:03:31 +0000
Manifest this update: Sat 23 Aug 2025 19:03:31 +0000
Manifest next update: Sun 24 Aug 2025 19:03:31 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: xkrQbHaVBwr6s/0b2CTzHb5KR4tLnvv9E5zovo+zwPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:82:e5:04:29:ad:e1:60:47:76:4c:07:2d:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Aug 23 19:03:31 2025 GMT
Not After : Aug 24 19:03:31 2025 GMT
Subject: CN=bb63263a5a99ecab50fb2cc16aac33d7b4923b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:f3:a5:0d:45:33:fe:e6:e6:50:3d:d2:c0:
46:bd:ab:65:46:d4:9a:f8:c2:43:5e:24:e1:d0:bc:
7e:ec:e4:87:36:52:56:3a:48:e0:9f:7d:ba:00:3e:
92:6a:fc:08:ab:37:85:90:5c:54:09:96:84:3a:40:
ee:77:74:82:25:b7:d9:b1:28:6c:5f:bb:62:10:83:
40:ec:36:ec:c4:94:90:c9:a5:5b:3f:ba:ac:20:03:
4d:70:5c:9e:3f:e6:b4:fc:a5:54:31:ba:ad:f0:6a:
88:7c:ec:a6:e8:e8:1f:cb:d9:56:70:2b:bb:11:73:
d8:e6:0a:cc:7c:33:32:28:9e:5c:0d:58:6a:a1:a4:
08:42:23:7c:21:17:1f:eb:11:fc:78:c9:c4:fe:0b:
98:72:48:5c:4e:9b:3c:b7:17:cd:35:b5:ae:23:7f:
e9:49:21:8d:3a:1c:d2:3a:ee:54:53:bd:f9:7e:de:
32:26:ea:bb:95:c7:47:32:88:99:04:13:ee:98:fa:
2e:d3:8c:43:8f:00:38:9d:62:b7:28:01:e3:26:5f:
b4:59:36:14:da:28:00:11:79:7b:73:bc:97:ad:17:
10:69:33:f3:e9:23:40:a8:3f:fa:08:83:02:b4:5b:
a9:d7:79:28:48:b9:8e:93:5b:9d:1f:2e:b1:f9:a2:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:26:3A:5A:99:EC:AB:50:FB:2C:C1:6A:AC:33:D7:B4:92:3B:59
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:04:05:23:f7:8c:64:ec:e5:46:4d:98:a6:a9:b9:6d:95:
4c:e5:b1:37:43:20:6c:82:87:56:f5:b4:30:32:81:22:3f:f7:
f9:a7:12:e8:cd:0b:7f:b7:5c:08:d1:97:9f:57:34:55:ad:3d:
f7:f8:a6:84:5f:20:c0:d8:40:fa:51:4b:5e:79:07:c6:3d:e7:
00:bd:d0:5f:07:f9:e4:f4:19:ad:7e:92:61:c8:51:ba:6a:8f:
0d:01:0b:53:e6:99:37:43:ed:5d:dc:d2:22:29:ac:bd:2f:5b:
28:4a:27:ba:ec:10:b9:f2:2c:ae:be:c3:4e:90:d4:e3:29:d5:
4d:04:c0:8a:60:33:bc:37:c3:0c:13:25:ab:fa:5f:69:01:de:
b2:de:47:72:cf:02:64:14:09:66:1c:0f:4e:5c:15:f4:40:20:
95:11:57:4e:b3:7b:67:ef:b2:fd:72:13:97:4b:a3:ff:9a:dc:
b6:7f:15:44:e9:78:dd:7d:38:c4:de:23:17:9b:38:21:93:4a:
b6:ee:4f:48:c9:3b:c3:16:37:17:78:f4:42:d6:20:c2:4c:2d:
00:fa:f2:61:f2:59:e7:95:67:6f:da:c7:e4:63:17:79:94:76:
fa:6d:a4:a2:2b:72:31:5a:45:55:cc:14:23:70:c1:e1:82:1e:
b2:e5:c1:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUILlBCmt4WBHdkwHLWdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjUwODIzMTkwMzMxWhcNMjUwODI0MTkwMzMxWjAzMTEwLwYDVQQD
EyhiYjYzMjYzYTVhOTllY2FiNTBmYjJjYzE2YWFjMzNkN2I0OTIzYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseHzpQ1FM/7m5lA90sBGvatlRtSa
+MJDXiTh0Lx+7OSHNlJWOkjgn326AD6SavwIqzeFkFxUCZaEOkDud3SCJbfZsShs
X7tiEINA7DbsxJSQyaVbP7qsIANNcFyeP+a0/KVUMbqt8GqIfOym6Ogfy9lWcCu7
EXPY5grMfDMyKJ5cDVhqoaQIQiN8IRcf6xH8eMnE/guYckhcTps8txfNNbWuI3/p
SSGNOhzSOu5UU735ft4yJuq7lcdHMoiZBBPumPou04xDjwA4nWK3KAHjJl+0WTYU
2igAEXl7c7yXrRcQaTPz6SNAqD/6CIMCtFup13koSLmOk1udHy6x+aK9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtjJjpameyrUPsswWqsM9e0kjtZMB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaoEBSP3
jGTs5UZNmKapuW2VTOWxN0MgbIKHVvW0MDKBIj/3+acS6M0Lf7dcCNGXn1c0Va09
9/imhF8gwNhA+lFLXnkHxj3nAL3QXwf55PQZrX6SYchRumqPDQELU+aZN0PtXdzS
IimsvS9bKEonuuwQufIsrr7DTpDU4ynVTQTAimAzvDfDDBMlq/pfaQHest5Hcs8C
ZBQJZhwPTlwV9EAglRFXTrN7Z++y/XITl0uj/5rctn8VROl43X04xN4jF5s4IZNK
tu5PSMk7wxY3F3j0QtYgwkwtAPryYfJZ55Vnb9rH5GMXeZR2+m2koityMVpFVcwU
I3DB4YIesuXBFg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:29 2025 by rpki-client