Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: PcUeYJvOueg7AtB2HGQI2gxaQxG7nra1JHyhTsK+zf8=
Subject key identifier: 2B:BC:B9:EB:46:E2:C8:73:8E:A7:E6:D2:FE:6E:58:9F:36:3F:C8:E2
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 0199FC58DBBD01372135A8015D036F0ACEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0434
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: qdJ8g5xIjG7SZQ8z8PsiKGYoze09u5Zj+Oc+O06AJpk=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:db:bd:01:37:21:35:a8:01:5d:03:6f:0a:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=2bbcb9eb46e2c8738ea7e6d2fe6e589f363fc8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:37:4d:a1:dc:d3:c0:c3:20:d1:ce:b1:a0:
4a:7f:55:48:fa:00:4d:c3:47:61:e0:12:ed:78:5f:
a2:fc:0d:c0:42:6d:97:d9:d3:bc:b9:1d:f0:03:9a:
d0:47:ca:db:7f:e2:ba:6a:e6:ff:8f:6f:03:80:33:
17:5c:b3:73:68:75:fc:ea:0f:35:21:77:01:a6:f2:
35:f9:9d:58:13:5f:00:0e:5b:5e:99:36:91:29:d7:
2e:f1:2c:be:e5:3e:0a:39:d1:1c:76:14:72:67:22:
41:e5:f1:b5:42:c9:3a:f9:f3:ac:01:c3:7a:7b:b9:
69:c1:89:dc:67:3d:a7:ca:5d:36:20:fd:b0:5b:8c:
e9:16:fb:2c:b6:ca:b6:72:c2:83:f7:53:66:b8:6b:
55:e8:05:d5:01:01:ed:39:8c:a5:41:43:ab:4e:0f:
d5:96:54:e1:9a:30:c4:99:79:59:3a:eb:43:d9:40:
fb:6e:d0:48:03:83:0f:fd:00:85:11:24:c3:f4:a4:
df:c9:f6:42:ee:c6:d2:95:99:b8:9e:a2:27:6a:3e:
b1:78:82:21:4a:8e:8b:d7:fc:21:d3:c1:0f:0e:56:
ce:14:f6:31:26:4f:02:40:22:db:ee:04:0b:dd:39:
c7:f4:a5:60:e8:fd:fc:75:00:78:eb:f0:66:5d:66:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:B9:EB:46:E2:C8:73:8E:A7:E6:D2:FE:6E:58:9F:36:3F:C8:E2
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9a:c5:da:06:81:8a:3a:08:5d:77:14:2b:9c:b6:64:d4:ae:
59:6c:f1:5b:b4:3f:1d:ec:af:2c:a6:94:fe:e6:e3:6d:99:15:
e9:b9:4b:53:55:47:cd:4e:3e:7a:c8:00:94:e1:82:a5:dd:c8:
fc:fe:90:ce:bb:b5:4c:94:9a:5a:1d:1d:7c:d6:50:42:8d:78:
7f:ef:5f:4b:da:a1:d6:fc:a4:22:ce:62:cc:77:54:85:8f:90:
bc:54:28:be:22:aa:9a:0e:20:cd:8b:b7:4b:dc:ff:cc:38:fb:
f5:1c:a0:c3:3f:07:01:90:cd:48:c6:48:4f:5e:90:57:63:79:
9b:5b:94:e0:5d:c6:93:82:b8:04:a4:ee:97:80:c8:be:80:1f:
12:85:ef:6f:9b:e0:83:09:2f:40:e2:e3:5d:c3:11:25:53:d9:
43:69:d5:05:b7:64:62:1f:10:01:67:ec:45:64:9e:49:fd:f5:
af:b8:20:d6:b4:f5:90:d8:d5:25:3f:ac:e3:d4:2f:ed:18:d6:
53:2e:69:bb:66:23:d4:af:26:4e:43:be:3a:29:44:49:14:74:
15:84:b4:65:56:e2:fd:f4:9d:4b:73:37:7c:f4:50:78:e2:de:
c7:54:bb:f3:94:6b:bd:91:e3:67:c2:e1:f6:bc:96:68:79:4f:
26:0e:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client