Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: LG3GABXD2DcqXF7C4oCxzSEyn4fZ0clWVAhZESlWhr0=
Subject key identifier: C8:28:97:2D:4A:05:81:89:7F:6D:7D:6A:E1:88:63:57:50:D4:21:F2
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 0197B6D7344628EFCC61CD0BCE4E4E8B6376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0CA5
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: UbKjrAnNmudH0BnKuzC0wrxsem7KTCJR9ZQOHlsOlMU=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:46:28:ef:cc:61:cd:0b:ce:4e:4e:8b:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=c828972d4a0581897f6d7d6ae188635750d421f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:cb:64:27:b8:e9:48:f7:eb:9b:76:85:00:
4a:a7:20:a0:c7:93:8a:33:ef:40:86:95:c4:61:97:
52:9e:a2:c4:dd:ea:16:90:40:9c:2e:fb:73:95:5e:
9a:b7:71:1e:8b:70:61:39:55:ce:b0:88:c9:2f:3e:
0e:3f:55:fa:49:12:45:8c:5b:5c:d4:f4:72:71:bb:
2d:3b:5f:26:16:fa:7e:31:60:58:76:f1:f2:16:8a:
a3:60:75:14:b7:eb:bb:16:c6:d0:f7:6f:f2:01:a5:
95:b6:16:8f:8a:fa:b3:42:12:c3:fd:74:ab:89:1f:
07:86:4c:b9:48:1e:c4:0e:d9:5a:a0:4b:d5:15:ba:
6a:fe:a5:35:1e:2f:a9:b7:b6:23:47:95:9a:7b:46:
1e:85:76:a5:51:46:54:fd:1f:d0:37:06:09:55:0e:
1a:f4:c4:f3:6a:4b:e9:8c:d7:5a:4c:4e:02:5c:c6:
62:c3:8f:30:84:a0:01:9e:d7:67:43:04:04:c3:70:
51:57:ba:67:94:40:f1:1f:38:24:d9:da:d1:bb:54:
82:b0:9c:26:9f:24:5c:66:38:53:a9:92:e8:f9:fb:
5d:2d:c9:30:18:91:1d:32:eb:3d:dd:1f:6a:64:a9:
67:80:d5:f7:ad:81:79:dd:25:3e:cb:5b:42:0e:a6:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:97:2D:4A:05:81:89:7F:6D:7D:6A:E1:88:63:57:50:D4:21:F2
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:93:da:fd:1d:cf:e2:9d:a9:bf:30:8b:02:b1:9a:e4:ae:f8:
42:e1:9d:39:7b:fc:e7:08:f5:38:5d:dd:33:4b:1f:48:4a:eb:
18:bd:ac:a4:d9:b6:9a:87:8b:fe:b1:f5:c5:e0:50:82:57:fe:
a8:90:bd:bf:10:64:c8:d1:2a:94:88:0b:db:8d:d5:fb:ad:77:
05:90:4b:2e:23:9f:0b:40:df:e1:b9:ce:07:20:43:3e:d9:ab:
f0:9a:dd:e8:e5:5d:d2:47:81:5d:eb:62:4f:d9:85:e6:9a:ee:
58:ba:c8:f3:ff:3e:e5:c0:7d:d5:b2:74:db:44:f7:16:bc:be:
1b:6d:7b:3b:fd:3b:16:f9:6b:6b:33:9b:f7:fb:76:73:f2:f2:
7b:df:4b:9b:43:8b:72:7b:b8:6b:32:3d:af:10:ef:03:b5:d4:
0e:81:0b:97:ea:4e:07:7a:aa:91:32:fa:d6:3d:4e:1e:79:c0:
c1:61:38:03:0a:4e:e0:c9:4c:ed:9e:07:f3:c7:c9:43:b7:dd:
b6:7a:2d:b2:ad:97:e7:d9:7d:03:6b:3f:60:60:5d:b4:6d:75:
c6:dc:56:06:64:27:ae:bf:b6:df:53:a0:21:aa:6f:1c:7f:21:
b0:c4:ba:ef:0d:bd:53:ef:e4:8d:db:96:53:6f:d2:99:79:c8:
f0:40:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:38 2025 by rpki-client