Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: y6bIAr2ErMEE0YqjdUbIt5crKhxBMcu35qFxQCpvckA=
Subject key identifier: F9:A0:F8:3D:D0:65:C9:36:7C:E9:71:A1:AD:65:52:73:50:5B:AC:99
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 0198D583A20EB614E22E923315F057A014E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0D18
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: hC9Ic7zhvT4cxh2fO1UDtGPoiZs+MrBXw3pG1q8c6Fg=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a2:0e:b6:14:e2:2e:92:33:15:f0:57:a0:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=f9a0f83dd065c9367ce971a1ad655273505bac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:7b:3f:f5:03:2e:96:2d:d1:25:72:61:82:
18:0f:78:f2:a1:af:60:68:1d:2c:56:cc:1f:39:12:
73:04:f6:2d:85:25:0a:7e:44:e4:04:a0:9e:02:7a:
b6:f7:c2:f8:b5:8b:52:c4:38:af:95:86:d6:f1:90:
c2:40:ed:c0:ea:53:28:ee:40:30:3b:11:e6:bd:fe:
c6:e6:01:de:ab:cc:f1:b0:bd:fa:32:98:74:78:78:
60:94:44:8a:31:1a:03:40:21:91:db:d4:8d:33:bd:
b0:fd:8e:bd:6c:0e:d3:a4:67:db:db:31:ef:26:7d:
07:65:67:76:d0:bd:0a:84:9f:e6:2c:d0:c7:90:e8:
ca:b7:bb:6f:53:2d:8c:d1:36:cc:e6:ad:4c:cf:cc:
6d:ad:03:5a:88:1f:7e:35:51:3c:8a:44:a2:63:a4:
0b:1d:fb:e3:68:3a:81:8e:a3:f0:15:54:94:8e:13:
d0:81:d7:aa:c4:91:46:a6:80:c1:4d:cb:7c:37:57:
48:f7:2c:0a:ae:16:81:5d:83:1c:2c:57:93:af:6e:
20:86:64:0b:7d:8a:a4:3a:fe:18:70:bb:4f:b8:6f:
06:77:75:cc:6a:6e:91:4c:de:82:52:73:a0:c4:11:
14:71:c7:c4:e7:ce:d0:e7:fc:fd:7f:87:37:9f:43:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:F8:3D:D0:65:C9:36:7C:E9:71:A1:AD:65:52:73:50:5B:AC:99
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:2e:b1:e6:bf:28:b0:25:57:9a:79:6d:5f:90:9c:d9:a4:
23:e7:4b:06:a7:02:75:80:db:2a:7d:06:4a:1b:a1:3d:73:17:
22:f9:06:13:48:fd:36:e7:f9:38:ba:69:a4:24:97:30:45:3c:
7c:a5:13:c7:c9:9b:b5:70:a0:ba:50:d7:e3:ff:f7:0e:1a:7f:
19:9a:19:23:eb:fc:9a:56:12:f4:07:40:9f:23:f2:60:fa:09:
23:10:f3:fd:eb:4b:6f:5f:7e:84:24:06:c8:84:cb:d7:8d:95:
68:a6:6e:11:32:15:15:1c:4e:05:cf:39:77:bf:09:3c:84:34:
f2:f1:55:3c:80:ee:3a:54:59:26:d0:c5:89:09:24:ff:49:9b:
8b:67:0d:a2:7c:63:04:cd:50:76:ac:9a:40:7f:45:a1:89:2b:
b7:da:c7:d8:52:87:3f:4e:b5:67:4f:1e:50:08:4b:86:df:48:
4a:39:5e:d0:fc:fe:94:b7:10:19:f9:03:de:a1:08:76:60:70:
c9:c3:e2:d9:c1:9a:b1:5a:7c:21:83:e0:cb:e2:d9:72:b2:25:
ab:53:23:1e:62:f4:f1:66:6e:c7:79:95:0b:85:56:6a:df:67:
92:64:5d:10:72:60:2f:92:49:5c:b1:b6:27:b9:b7:bc:81:e9:
e4:28:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:04 2025 by rpki-client