Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: dal0dDau7NxSWpmr2owCA4Bdrq3BBjrR5zMdxU/J6U0=
Subject key identifier: 2F:22:DD:C8:4D:54:3D:C0:A9:B6:8B:24:E4:D1:72:13:08:A2:28:88
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 0197B6A1F2E088D792AABC923AEFE1B44B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: giSZ0dhaKDTY67+KnSwyJ55j/0CCnuARuFai8ckjfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f2:e0:88:d7:92:aa:bc:92:3a:ef:e1:b4:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=2f22ddc84d543dc0a9b68b24e4d1721308a22888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:b3:5e:55:d7:b1:75:89:09:fe:9d:5a:55:
1f:9c:52:aa:72:5a:3f:84:3e:97:ae:53:e8:dc:b5:
56:8e:4c:52:f9:e9:27:88:63:4b:63:b7:6a:d0:2b:
db:5f:00:95:a2:73:a9:3a:52:2a:5e:ec:4c:af:21:
31:4d:8a:d0:d7:90:e9:f4:7d:29:f4:8e:6c:80:71:
61:66:04:61:c4:78:f7:19:ab:96:bc:f6:d1:5e:9e:
03:1c:0f:e0:69:b9:a7:1d:e1:3e:ef:58:07:ac:68:
8e:6f:c4:f4:73:de:e5:c6:e8:30:ca:5a:ff:e2:70:
63:17:c5:7d:88:ed:0d:de:13:91:f0:89:56:bc:0d:
4d:45:05:c4:34:86:8f:28:7f:9b:4f:fb:6a:2c:fa:
9b:35:05:32:14:89:64:31:f4:cd:db:b7:4d:37:3a:
02:0d:e4:b5:ca:b7:15:1c:a7:04:59:99:fc:20:d0:
83:94:12:3e:2c:2e:36:12:93:da:ca:2f:fd:36:db:
25:08:6e:b5:97:77:2b:f6:5a:4d:11:22:2f:fe:e6:
1a:71:07:12:fb:5e:bb:cd:08:ca:c4:fb:83:15:42:
2d:f4:07:cd:ce:9f:38:f9:0e:f1:51:f9:e9:a2:7c:
cf:03:46:43:a0:3e:c9:1b:35:45:1e:21:5e:cc:bf:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:DD:C8:4D:54:3D:C0:A9:B6:8B:24:E4:D1:72:13:08:A2:28:88
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:34:cc:b0:40:fd:8a:15:8b:47:51:67:c6:d0:1e:bc:72:
06:d6:15:b2:31:c1:68:e6:f8:2d:35:83:23:4e:3b:80:87:a4:
a6:52:68:de:68:65:fc:44:47:d0:48:dc:43:70:65:64:c8:d9:
7d:40:0b:1c:b8:89:c8:57:cd:23:5c:06:c7:c9:92:ed:a7:27:
d2:7f:bc:8e:2c:59:3b:27:84:a9:4c:74:f4:f7:76:6c:89:aa:
c8:7e:4b:c7:97:a5:cb:f5:a2:5d:e4:d2:b8:4e:18:67:66:bf:
10:fc:be:b2:ce:99:68:f3:32:eb:f8:28:34:6a:5e:b3:c1:d1:
1e:06:aa:33:1f:23:a0:c3:db:5e:69:44:17:06:ba:0b:6d:5e:
a2:39:a9:98:b0:56:9e:60:ba:d0:39:43:d2:de:54:ec:c0:e8:
8f:4d:ed:14:2a:97:fe:8f:04:fb:ac:ce:a6:3b:57:59:c5:e6:
3f:c5:e8:e4:0c:cd:85:61:1d:47:1d:81:0d:7b:ef:71:bf:b7:
f3:cc:c2:40:fa:e5:f9:96:97:7a:36:35:7f:c8:c4:45:d7:e1:
bf:9a:02:e8:5c:5c:0a:22:9d:7f:3e:f0:ae:bf:42:55:c6:d5:
b7:f1:9f:7c:b8:85:b0:3a:5c:48:ff:26:f8:94:b4:51:63:9a:
ec:c4:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:48 2025 by rpki-client