Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier: 4V+aKYJtCbByNhdgsZkAIyRhQqCfTKZgynP0G1L6wEc=
Subject key identifier: E4:29:F6:E4:CD:24:20:24:65:52:37:9D:FF:29:44:1B:E2:12:B1:4A
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 0197C0ED4A261581C2848D7B89AD2F81F1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number: D0
Signing time: Mon 30 Jun 2025 13:01:05 +0000
Manifest this update: Mon 30 Jun 2025 13:01:05 +0000
Manifest next update: Tue 01 Jul 2025 13:01:05 +0000
Files and hashes: 1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: Uf3chlIjTFvcYhHmGHLS7sAeh2F2KltwjRKZCZQ2bVg=)
2: tIh3EbNG8PyhR2bhdKGu98lXfi0.roa (hash: WvckFFiPzlkbuyQKqzi40xspGv9L4xehhqGGvB5LMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:4a:26:15:81:c2:84:8d:7b:89:ad:2f:81:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Jun 30 13:01:05 2025 GMT
Not After : Jul 1 13:01:05 2025 GMT
Subject: CN=e429f6e4cd2420246552379dff29441be212b14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:36:66:bc:4d:af:77:5e:25:9f:fb:44:4d:
d7:83:3b:94:c5:87:9e:a8:ad:71:36:2e:90:2e:1f:
05:6f:cd:03:88:5b:6b:4c:6b:e1:e5:3b:ea:39:44:
48:63:00:a5:60:37:3c:6a:e6:aa:9f:7e:f9:1e:f9:
f8:2a:5e:db:6a:b9:79:8e:e3:51:f8:0f:fb:f9:a9:
89:50:f4:58:8c:ac:6c:72:1a:40:ce:3e:ac:f3:a1:
20:d1:10:5b:ba:0e:66:f1:84:65:4a:f6:68:0b:da:
80:66:96:7f:5c:be:3c:c6:cd:c9:f2:94:50:8d:25:
5c:62:02:fc:21:3e:b0:3b:a8:5e:d0:75:cb:78:97:
3b:dc:7a:68:0b:a3:5d:9c:0c:5b:47:ed:0e:62:af:
b1:97:bb:ed:95:91:28:62:42:61:44:69:8e:5c:9b:
0c:a2:8b:60:a2:92:68:57:01:78:1d:90:6b:52:3f:
6b:22:8c:92:c4:95:52:88:35:3e:c2:e2:88:e0:40:
4a:36:b2:9c:92:31:63:ee:93:b0:0e:5e:13:4d:1e:
9b:fe:1d:28:a5:82:e4:55:4a:44:1d:3c:48:72:c8:
e8:ed:cf:33:41:0d:45:31:a4:fc:09:3c:03:e4:84:
2c:d3:e6:08:47:7d:82:27:5d:ef:c5:e0:b7:81:3e:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:F6:E4:CD:24:20:24:65:52:37:9D:FF:29:44:1B:E2:12:B1:4A
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:ac:5e:7b:5c:3c:57:f7:87:1f:6b:f0:29:6c:9a:1a:18:
fc:fd:ae:87:ac:06:f0:a3:e0:cf:4c:f9:88:e4:bf:d8:8e:15:
7d:e1:b5:a0:94:da:1b:e8:c9:71:ec:f6:17:31:66:fc:26:c1:
6d:2b:15:05:ff:74:a5:97:06:33:88:ca:90:58:57:6d:a0:f3:
cf:90:32:49:34:6a:d7:d3:5a:b2:f5:2f:8d:d5:8e:e2:85:27:
a5:21:01:9e:9e:5f:68:82:4f:e2:7c:07:a3:ee:73:c1:64:61:
cf:f0:c9:e5:a6:d2:71:eb:92:cf:93:7c:2f:f6:c6:42:21:20:
eb:b0:19:2f:76:9c:77:38:4f:70:16:f6:55:29:9e:5d:a7:d1:
eb:8d:bb:5f:d0:06:90:f0:61:dc:d3:84:26:98:14:22:e0:c3:
dc:93:db:3f:ec:48:65:51:ef:e5:67:4c:b3:79:2e:31:11:fc:
52:9f:94:6c:1f:f4:2d:e4:f4:ec:07:a2:cd:b0:e5:60:29:47:
26:3d:ec:a0:b4:a8:18:cb:cb:7f:6e:e6:51:92:c6:a4:69:63:
a4:30:b6:5a:b4:73:bc:f1:41:3d:80:c4:49:cf:60:b9:a8:26:
ab:cf:d1:42:ed:b1:0c:3a:a0:87:8e:ff:a4:d5:12:25:c9:65:
27:c5:74:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfA7UomFYHChI17ia0vgfHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWMxZmFhOTc4M2RmYWIyYjdhNTNkYTNmYjBmZGVmNGNj
ZmVhZTUwHhcNMjUwNjMwMTMwMTA1WhcNMjUwNzAxMTMwMTA1WjAzMTEwLwYDVQQD
EyhlNDI5ZjZlNGNkMjQyMDI0NjU1MjM3OWRmZjI5NDQxYmUyMTJiMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjs2ZrxNr3deJZ/7RE3XgzuUxYee
qK1xNi6QLh8Fb80DiFtrTGvh5TvqOURIYwClYDc8auaqn375Hvn4Kl7barl5juNR
+A/7+amJUPRYjKxschpAzj6s86Eg0RBbug5m8YRlSvZoC9qAZpZ/XL48xs3J8pRQ
jSVcYgL8IT6wO6he0HXLeJc73HpoC6NdnAxbR+0OYq+xl7vtlZEoYkJhRGmOXJsM
ootgopJoVwF4HZBrUj9rIoySxJVSiDU+wuKI4EBKNrKckjFj7pOwDl4TTR6b/h0o
pYLkVUpEHTxIcsjo7c8zQQ1FMaT8CTwD5IQs0+YIR32CJ13vxeC3gT6bWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQp9uTNJCAkZVI3nf8pRBviErFKMB8GA1UdIwQY
MBaAFGqcH6qXg9+rK3pT2j+w/e9Mz+rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYt
ZDJiYjdjNzk1YTg2LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYtZDJiYjdjNzk1YTg2
LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPusXntc
PFf3hx9r8ClsmhoY/P2uh6wG8KPgz0z5iOS/2I4VfeG1oJTaG+jJcez2FzFm/CbB
bSsVBf90pZcGM4jKkFhXbaDzz5AySTRq19NasvUvjdWO4oUnpSEBnp5faIJP4nwH
o+5zwWRhz/DJ5abSceuSz5N8L/bGQiEg67AZL3acdzhPcBb2VSmeXafR6427X9AG
kPBh3NOEJpgUIuDD3JPbP+xIZVHv5WdMs3kuMRH8Up+UbB/0LeT07AeizbDlYClH
Jj3soLSoGMvLf27mUZLGpGljpDC2WrRzvPFBPYDESc9guagmq8/RQu2xDDqgh47/
pNUSJcllJ8V0xw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:20:41 2025 by rpki-client