Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: juNrOZnrlVLwHar3Rz8nnvIaFapMfXYZKu2RV4/Vkg4=
Subject key identifier: 55:05:3D:D7:59:A5:DF:34:49:F7:AC:73:31:BC:72:3A:91:05:A7:1B
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 0198D660E5243206F86B535ACD3EB1B832E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: c34wHOTqM582MY9I7e2IFtvGZ+qZFFVTbybp0FMIraI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e5:24:32:06:f8:6b:53:5a:cd:3e:b1:b8:32:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=55053dd759a5df3449f7ac7331bc723a9105a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:e6:6a:b4:e7:6c:35:93:f0:2d:9d:2f:e2:
00:d1:9e:0f:0b:7b:7e:c8:b1:fc:74:40:4a:63:4f:
0b:34:7a:ee:49:72:2e:df:48:3d:b3:0e:4d:e2:e1:
a1:c1:94:b0:08:15:dc:75:ba:2f:ba:35:97:9e:6d:
5a:36:e3:80:f9:8c:cf:74:80:05:3a:97:91:58:f0:
29:8c:4e:c3:71:df:72:06:e4:f1:02:2d:80:bb:80:
f6:7d:aa:c7:e1:fb:a3:0f:70:be:25:1a:6a:c0:f7:
8a:3f:08:fa:50:b8:27:1d:0f:cc:7a:78:e6:a3:93:
96:03:f8:0f:a8:ca:be:0f:c7:5b:bb:a5:bc:38:e1:
0e:b7:e8:2b:15:b5:0e:74:0b:41:36:f7:82:04:74:
a1:07:9a:fe:ea:00:cc:85:f9:6a:40:62:51:52:23:
c0:df:dd:b4:a8:0e:83:ee:9e:56:43:18:1f:87:c8:
4a:02:a8:90:51:1a:99:8c:bb:ab:ff:58:75:82:f0:
6d:d8:6c:5f:6b:b9:a9:81:2f:50:44:0c:01:69:85:
88:3c:ae:2a:e2:30:40:95:3b:9f:7a:eb:59:d5:d7:
26:a0:61:0f:69:32:4e:e7:da:32:05:ed:16:da:25:
ea:39:7a:37:28:bf:79:80:10:15:f8:df:52:d6:18:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:3D:D7:59:A5:DF:34:49:F7:AC:73:31:BC:72:3A:91:05:A7:1B
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:07:7d:3c:82:65:1f:d6:13:29:5f:00:56:4c:dd:a4:f5:
e9:3e:15:12:c8:1f:fe:e1:17:6b:32:67:6b:3e:b2:fd:a9:a0:
3e:ec:37:62:9d:e6:8f:f3:93:a6:b9:2c:d8:0b:e1:8f:a4:f7:
a3:f4:90:91:d2:65:d9:27:da:d3:3f:80:92:12:65:37:24:08:
24:3f:75:08:6a:63:c7:21:d8:92:a5:37:61:57:79:0d:9b:ae:
7c:91:1d:6c:4a:b2:a9:63:2c:76:57:c9:14:d8:19:68:97:ea:
ef:bb:13:83:72:58:e7:f1:21:73:a8:51:9e:ed:fb:a3:18:c9:
6b:8b:a5:cd:f5:a1:42:d6:97:be:c3:22:b3:3d:74:fd:c7:91:
36:7a:e4:d1:16:14:d3:f5:d4:f2:d0:c4:f8:af:38:bc:99:c7:
7a:f2:fe:41:a3:4e:49:67:e6:8b:0a:23:3b:62:fc:ec:e6:b5:
f9:7f:71:bf:39:12:d5:c6:5d:fe:81:80:71:37:ee:b5:af:af:
0b:ff:89:e8:d5:f3:53:87:c9:87:b3:be:67:b1:e6:e5:5a:72:
54:f2:5d:64:0b:4c:0d:c3:85:be:2c:2b:73:93:b9:d9:6d:ef:
70:c7:e7:66:77:01:0f:bd:15:c5:d0:5f:a8:78:4d:74:5a:19:
b6:d1:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:35 2025 by rpki-client