Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: +a6QEcw5QhJ8EqpeNT3LtNHBtYbQwQXtHX23vHfNoBQ=
Subject key identifier: E0:B5:81:6C:C2:B7:6D:C6:65:D8:D4:88:D3:98:B8:7C:22:27:61:69
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 0197B6A246817CF0C8B58C1FEA97311EF551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: diQ7dLU35+X+aCB8NlZeXit8hmSm6VldsPSoM9I3DoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:46:81:7c:f0:c8:b5:8c:1f:ea:97:31:1e:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=e0b5816cc2b76dc665d8d488d398b87c22276169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:6c:6d:b0:ae:99:db:5e:4c:c4:64:57:04:
a5:e5:e8:e5:f5:0d:e3:ad:1b:f8:1d:cc:c6:da:e1:
30:be:5d:f4:5d:01:7c:fb:04:06:35:d0:7e:8f:dc:
ba:1a:0c:4a:c8:24:cc:26:3f:5c:dd:d6:e7:2f:2a:
73:cc:22:58:f7:41:f3:8e:aa:a5:74:29:05:1e:3d:
a3:eb:01:35:9a:1b:63:49:6b:7f:8f:82:be:71:21:
57:20:56:7d:2a:a7:70:c3:22:19:a2:ba:fd:7b:90:
3e:80:f7:2c:52:7f:16:8d:ce:1d:66:f3:43:05:f5:
dd:0a:25:23:6f:44:c9:b8:3a:74:b3:4f:41:4b:7d:
49:8e:a7:72:6e:fd:10:2b:24:9b:ca:47:88:5e:35:
61:5a:bb:2d:b5:2e:a5:6a:df:10:92:f2:78:b3:64:
30:21:16:b4:a4:0f:e0:31:3c:78:73:6b:62:04:72:
fa:54:90:1b:62:ad:87:a3:41:14:17:7c:34:72:5d:
28:36:60:89:bf:92:fa:e1:3a:4c:93:ac:6b:bb:00:
df:c4:4c:9a:ab:74:99:85:54:f6:7f:3c:31:f9:fb:
86:4b:f0:8f:c7:0f:cd:80:25:e3:47:9c:cd:0c:5e:
f5:33:55:b3:cf:12:8f:22:ce:9c:9d:a0:c2:7b:2f:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:81:6C:C2:B7:6D:C6:65:D8:D4:88:D3:98:B8:7C:22:27:61:69
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4a:32:ce:bf:ba:3b:bf:b2:2d:66:67:6c:b2:ea:df:50:55:
bb:52:db:5f:61:10:d5:e7:d6:1f:ea:f0:0d:9f:f7:94:c1:73:
c7:6e:da:cd:3f:01:32:10:52:11:fd:df:96:e9:5d:a2:b0:2d:
40:24:58:ab:2d:bc:67:9a:b4:28:af:54:a7:3d:dc:1b:2c:ab:
bb:43:e3:d7:a4:e4:c2:22:77:cf:3c:e4:e7:10:8a:0d:51:d5:
8e:1a:c3:1a:3f:5d:ba:f7:fd:05:de:e3:d6:af:0f:6c:8c:2c:
63:0b:17:d8:03:4d:56:31:e4:8d:a1:9c:f1:d9:a4:9b:b9:4d:
ef:53:f6:cb:4d:f9:b7:e7:a2:13:cb:7e:04:88:49:4d:66:15:
07:98:35:bc:17:77:f4:d3:7f:25:53:52:96:7e:f8:79:9a:2b:
cf:40:86:bb:fb:91:fa:ea:d1:cc:fa:5d:1f:b9:ab:c3:7b:8a:
13:f4:a9:de:8a:dc:b5:ca:ec:14:12:81:5c:49:ce:6d:44:d7:
1e:8e:02:45:e4:57:e4:f2:d7:61:71:1c:ad:17:f8:5e:7e:b7:
65:f9:33:31:15:3f:07:1d:67:ee:e2:c5:42:c0:a3:b9:0c:b3:
a3:ae:f0:0b:95:dc:ab:35:00:e9:a9:11:4e:5f:84:1c:39:3e:
93:28:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:25 2025 by rpki-client