Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: CIeyeCyAkLvWyLWC9paNvaX6UxG35KknQ4cHiWnaPT0=
Subject key identifier: 22:14:7F:BA:63:DF:4D:BE:DF:61:23:DD:55:50:5B:8C:A9:45:F7:A7
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 019A00D9FA93E03802006A07B13A75CC3927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0DB3
Signing time: Mon 20 Oct 2025 09:01:16 +0000
Manifest this update: Mon 20 Oct 2025 09:01:16 +0000
Manifest next update: Tue 21 Oct 2025 09:01:16 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: sbAJ4yyEw0YjUZ5nDnZFbgDljqxA+SwQKzNTpHyhVi0=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:fa:93:e0:38:02:00:6a:07:b1:3a:75:cc:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Oct 20 09:01:16 2025 GMT
Not After : Oct 21 09:01:16 2025 GMT
Subject: CN=22147fba63df4dbedf6123dd55505b8ca945f7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:bb:71:14:db:f9:88:14:d9:28:df:b1:9a:
97:d9:ee:fb:14:74:99:3c:c5:72:12:f4:77:1b:32:
77:d3:3e:8b:84:87:d3:ef:09:3e:c4:48:bf:d6:77:
a1:bc:cc:7a:25:23:e7:f7:d5:90:72:b9:57:ea:59:
3c:f5:59:c5:8a:dc:91:6b:2f:38:57:8e:2e:27:7f:
ae:96:05:d1:9a:5e:f6:8a:47:62:11:87:56:58:fd:
ef:71:2e:a5:17:75:16:90:7a:48:a0:2e:56:1b:64:
06:a9:cb:fe:1b:3e:a7:75:3e:18:8e:77:93:bb:b4:
8e:9b:41:c7:e4:ae:41:19:78:c0:76:9c:a8:b9:19:
0a:99:0c:c9:56:7f:0b:41:70:63:ad:c2:54:3d:95:
04:08:ed:4d:2f:f6:46:95:5b:f7:00:33:30:98:17:
b9:9f:1c:24:11:0d:ee:69:c5:07:87:47:fd:d5:b4:
96:14:8f:f7:31:86:f5:0e:95:24:bc:10:f9:71:6b:
42:af:79:a8:f8:d8:df:7b:8f:2c:43:a1:9d:3c:8b:
41:7c:51:1c:dc:00:06:4e:bf:7b:1a:9b:cb:2d:20:
58:ce:b1:3a:c0:a6:ae:03:b0:af:74:87:46:d3:af:
7b:4c:79:fb:6c:b8:20:c6:ad:a7:2d:55:aa:bb:8f:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:7F:BA:63:DF:4D:BE:DF:61:23:DD:55:50:5B:8C:A9:45:F7:A7
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:85:5d:b0:d2:95:fa:41:d6:8c:6c:92:cf:18:65:ba:8f:4c:
95:3f:16:3c:bb:46:20:09:d3:4f:73:9c:4b:b1:12:ee:89:79:
0b:2a:69:62:08:b0:c8:c0:93:45:4e:7f:4d:ab:ef:cb:7c:f3:
b7:3a:3e:c0:6d:44:42:70:14:01:c7:c3:17:ad:c3:82:28:b9:
a3:07:6c:a8:c1:7e:f0:b0:b0:1c:dd:27:4b:a0:9e:3d:c8:c0:
85:82:cb:8d:0a:ab:b1:48:0b:8f:4a:22:d9:cf:df:b8:67:69:
fe:4f:65:01:d4:34:03:28:f7:d4:8e:ff:d4:44:3f:ee:98:a7:
2e:0c:93:ce:ee:e2:6b:a3:c3:82:b8:04:79:39:00:25:b1:41:
ea:b8:d1:7f:b6:78:84:85:ce:4f:ca:45:be:34:60:95:5b:b6:
ff:2d:cd:3f:f0:0f:3b:72:2e:83:88:a0:e7:d9:cf:89:a6:ff:
d4:fb:08:a4:56:da:71:7c:8c:bc:bf:21:31:49:65:a0:d4:9f:
96:56:ac:16:3f:48:6e:ab:d4:74:49:c3:15:e0:0d:5a:79:64:
32:fc:c8:6f:c6:17:60:90:f0:5e:0c:38:81:94:78:4c:b7:37:
1f:17:fd:0c:c0:be:6d:89:1e:70:40:7c:e2:c9:0b:05:88:63:
f6:a9:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:22 2025 by rpki-client