Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: sytzlIWME50+XzOkQQwhpBvjyx/57FQZVu0A1eaF6Uw=
Subject key identifier: CC:3D:67:F7:BC:A8:78:72:00:87:88:38:F6:80:6C:25:F6:55:12:5A
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 0198D4E09F5E7BC445A80F9243DB1FF39DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 039B
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: E7ApPsvqB7qkxI11MozRymsdsMGr0bPodtmehZBWcXI=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9f:5e:7b:c4:45:a8:0f:92:43:db:1f:f3:9d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=cc3d67f7bca8787200878838f6806c25f655125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:31:fe:3a:5b:56:bf:55:97:e4:00:15:7f:
32:dc:03:dc:f4:e9:d1:13:85:62:bc:7b:82:2f:80:
26:c1:27:9d:45:92:57:46:07:30:39:59:27:cf:c6:
0d:02:7e:1c:1e:6a:08:94:22:0e:d1:0b:2a:b0:33:
5c:0c:37:cf:21:dd:61:d0:8a:73:b5:6b:5f:f1:5c:
dd:8b:0c:7f:ac:10:3c:80:04:30:4b:0c:b8:66:e9:
ba:dd:a2:dc:4c:e3:5e:b5:d1:39:a3:60:38:4b:57:
84:ad:d3:1a:8d:38:1a:ff:cd:46:b5:51:47:34:ad:
d0:35:28:bb:4c:0a:22:ab:57:32:c1:87:5b:07:dc:
61:44:62:eb:d2:d6:14:f6:6e:06:b9:45:88:24:cb:
6e:06:aa:5c:9c:53:1b:20:a5:e1:c3:6a:84:d6:56:
e1:3f:7e:08:d3:f5:0c:73:e7:8c:47:9d:f8:33:fc:
36:f3:8d:26:70:bb:43:0b:5a:15:5f:cb:b7:2c:7e:
86:d0:f3:71:5b:42:88:ec:b4:32:99:bf:1f:0f:ee:
a1:89:b7:4a:e9:9e:1d:97:88:19:7e:33:ca:3c:7c:
f4:6e:3f:c9:6c:4d:bc:0e:ba:18:73:30:06:80:17:
fb:81:1f:a9:6d:c0:ad:c7:37:37:c9:1e:6d:93:8e:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:67:F7:BC:A8:78:72:00:87:88:38:F6:80:6C:25:F6:55:12:5A
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d1:a2:d6:26:18:af:a1:05:54:01:cb:a4:a5:78:6c:b3:a4:
15:dc:45:95:53:5d:aa:e6:bf:28:be:75:71:c9:0d:5f:69:10:
5c:ec:d8:a9:8e:61:11:1f:2d:79:b2:f7:d6:38:e2:43:0d:2a:
05:e9:ec:26:d3:6a:e6:21:c9:3b:5e:74:2e:6f:b1:2d:13:9c:
b9:e8:60:5d:20:4e:ca:f0:f1:c7:2c:03:8d:20:0f:d8:85:15:
c7:31:1e:4e:08:77:b6:49:eb:b6:5d:3f:98:c0:c5:27:d8:78:
31:7f:19:d5:ee:55:b5:66:95:ad:26:b5:d6:60:7b:44:c0:c1:
3b:45:57:b5:81:3c:78:99:51:e0:d9:84:a8:8a:ee:d8:c6:bf:
d2:fe:72:ec:30:b7:86:ae:13:44:90:bc:55:c5:f7:9a:4a:a8:
30:94:b2:e2:8d:94:a6:c4:8e:23:9b:85:60:50:16:84:d1:dd:
a4:2f:67:e3:8d:b6:e5:9e:d9:4e:50:7c:c1:10:3a:de:80:8b:
7e:a5:56:52:cf:15:fe:76:a3:bc:3a:5b:f3:94:c9:54:12:7e:
ca:1b:a6:95:07:18:00:0f:09:07:90:8d:5c:dc:39:40:ec:18:
68:3c:2b:d5:c1:5c:d4:d5:e3:09:e4:37:b1:31:46:e8:b1:bf:
5b:dc:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:38 2025 by rpki-client