Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: JVgEq9U6w3CSTVpcRtiw6+kiiR4owIhhSSgo7n3RPAU=
Subject key identifier: 1C:32:C7:D9:D1:AA:11:0E:9E:0B:D1:75:22:27:1E:DB:DA:E2:13:6B
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 0198D4DFDFA1870BABFDBE308D92AB5964D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: FHMVsEymzgRGPxfAtcvVVia7TDwHBk62P09wRTdcv9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:df:a1:87:0b:ab:fd:be:30:8d:92:ab:59:64:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=1c32c7d9d1aa110e9e0bd17522271edbdae2136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:e7:90:46:24:92:f4:87:fe:20:de:a2:f6:
54:4f:f9:c3:44:53:d8:e9:48:80:20:8b:6a:69:c1:
a1:85:39:fb:ac:04:b3:ff:03:47:a5:f0:83:ee:ca:
39:35:c2:f4:be:9d:c0:49:0c:7f:21:5d:a6:b6:ba:
39:2b:d2:79:4f:f2:55:80:01:1c:82:41:da:1b:2e:
44:ea:ec:32:5e:52:8c:f7:95:3e:10:0b:b6:11:e2:
3f:33:b5:54:1c:c4:29:53:26:ef:fb:fa:75:3d:d3:
b5:e2:fb:95:5c:2a:53:70:7d:3d:61:66:81:76:b4:
9b:01:f4:8f:51:95:be:62:a3:37:84:54:5b:a3:dc:
ed:0a:15:f8:96:f6:d5:b6:3e:71:1b:13:e2:7e:97:
4d:ad:10:1d:9b:b7:66:da:37:ae:a5:9d:0f:43:6d:
e4:c8:1c:b0:35:3e:58:8d:6b:23:32:1b:63:69:36:
4a:83:ff:fe:38:7a:82:bb:23:83:5e:ab:44:9f:ee:
52:01:6d:b7:22:fa:f5:31:96:88:c6:e8:88:b9:52:
f0:aa:1b:2d:59:d1:18:74:59:7d:37:37:1b:4d:08:
c3:64:27:0c:16:7c:85:6b:65:8d:38:63:37:14:62:
16:38:29:46:ca:4d:63:f1:db:87:bb:a7:57:e7:96:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:C7:D9:D1:AA:11:0E:9E:0B:D1:75:22:27:1E:DB:DA:E2:13:6B
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:02:b5:a5:ee:44:4d:97:10:c2:91:8e:13:32:58:48:09:
78:5d:26:a4:e0:a7:38:ca:5e:ca:94:9b:90:44:ca:d9:41:3c:
3a:11:cf:9b:43:5c:6b:d1:21:2d:50:90:c8:11:c2:72:6c:d1:
f7:a7:c3:87:44:c4:b6:8b:fb:f0:c7:e3:6e:a2:66:b3:db:ac:
5a:ae:9e:03:81:d8:63:ca:7b:0b:c4:b9:d7:d8:5b:a8:00:53:
6e:b3:58:cd:7a:35:e1:4c:8a:ab:c5:63:4d:56:d3:0b:ff:f4:
e8:d6:dd:4a:ae:9a:c0:e3:14:d5:60:3d:f2:d8:d7:26:57:af:
21:c1:48:3b:7f:0a:1f:54:7a:0f:1d:b1:e9:bd:e5:cb:ff:8f:
f5:08:80:78:63:e5:b9:c5:b5:dc:d9:02:8c:0b:44:15:4d:37:
34:de:40:a5:6e:47:4d:3a:51:3f:4a:28:d3:2a:96:3f:bc:3c:
c8:c8:dd:f5:05:16:14:79:34:7e:b5:d4:49:df:47:05:76:46:
97:1c:d1:32:73:7d:c1:5e:dd:ec:11:ae:18:1b:8c:20:20:48:
aa:03:4f:58:be:7d:63:89:93:56:3e:52:61:61:eb:9a:88:34:
d2:b0:f3:40:8f:17:75:cd:13:f3:f1:48:30:44:82:4a:49:b6:
74:de:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:54 2025 by rpki-client