Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: lQ4ndDdha4vlE643DLI27pS5CzzyqeTYopFrHnBSuEQ=
Subject key identifier: FD:E3:BC:D4:78:57:77:D0:8D:16:DC:DC:53:7A:5D:D5:C2:5E:37:EA
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019A05FF497D361B68142663AF1D0A95D339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1676
Signing time: Tue 21 Oct 2025 09:00:07 +0000
Manifest this update: Tue 21 Oct 2025 09:00:07 +0000
Manifest next update: Wed 22 Oct 2025 09:00:07 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: I+fw4UlVFKBBLRsPw6J0wh+4KdPEfO7hmdLeUeM2Kdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:49:7d:36:1b:68:14:26:63:af:1d:0a:95:d3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Oct 21 09:00:07 2025 GMT
Not After : Oct 22 09:00:07 2025 GMT
Subject: CN=fde3bcd4785777d08d16dcdc537a5dd5c25e37ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:fc:95:3c:b9:ff:d1:c5:4c:16:c4:70:d5:
2d:dc:9d:c3:2d:80:86:31:14:f8:4b:9f:dc:2b:2b:
a1:f7:81:8b:16:98:a9:4b:3d:b6:fc:77:8f:47:6a:
dd:db:69:4f:12:5b:e0:2b:b6:d3:ec:29:d3:5c:03:
a8:0c:73:4a:f4:a6:ae:a9:5e:f3:9a:01:6c:a2:71:
10:87:ea:bb:78:57:ff:90:f7:75:a3:0a:80:6d:8f:
d0:24:2c:09:69:cb:95:ef:d1:22:c3:4e:a0:87:1c:
14:c2:f6:98:a3:4b:3f:f0:4a:f3:6b:a3:cf:f0:e6:
50:46:25:46:c7:2f:28:cd:55:1b:16:38:d3:85:21:
e2:53:44:8e:53:bf:40:ec:b1:d4:4d:42:89:93:76:
05:b9:1c:1b:5e:ee:f5:89:f6:07:28:c1:95:92:0a:
f3:11:49:8c:a6:ea:27:67:43:ed:30:12:a8:b5:24:
27:2d:9d:7d:ce:ed:67:d0:63:10:e8:d5:c6:97:26:
be:df:1b:50:3b:35:75:88:2c:2e:e9:bd:13:4f:05:
35:56:98:ab:4e:6a:c8:a7:08:4a:16:b9:54:72:c2:
82:ba:47:a9:3a:43:fe:b0:b6:4c:ad:93:fe:c1:11:
3b:27:69:d0:20:f6:4d:be:1d:15:86:60:05:b8:d8:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:BC:D4:78:57:77:D0:8D:16:DC:DC:53:7A:5D:D5:C2:5E:37:EA
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:06:99:6f:0c:9f:f3:dd:e2:0c:6e:59:a9:bb:e6:c7:66:
bd:37:07:2b:16:52:c5:96:19:85:cc:9e:65:a0:bf:b3:d5:71:
ca:2b:22:ce:2c:80:9a:59:77:53:21:c7:2b:c5:da:f0:7f:7f:
a4:1d:03:78:7d:6a:a3:8c:01:a3:99:a7:d4:38:44:c2:75:4f:
90:31:96:4d:0e:28:aa:e5:64:0d:ba:92:b5:d0:52:8e:17:08:
88:5e:60:b0:a2:e3:e0:97:ea:ea:fb:d9:cc:71:82:72:28:00:
28:66:dc:10:ff:0e:44:e8:f4:04:9b:34:20:2a:4f:7b:f1:7e:
74:55:21:39:77:cd:fd:55:1f:d8:43:37:bf:3b:df:73:59:ff:
47:72:66:ec:6c:c6:36:23:39:01:e7:85:62:85:d5:1f:c5:1d:
4c:26:e4:a8:33:5f:6c:16:03:85:e1:fc:b3:a2:ea:21:88:6c:
75:db:94:42:d4:3d:79:30:db:a1:bb:e2:c9:7f:ab:cc:5f:f1:
88:d4:d9:47:a1:c0:95:6b:44:17:ad:86:90:05:5e:c9:ad:45:
8b:2b:c5:5b:16:59:0e:fe:53:63:27:28:b5:20:98:f5:9a:0a:
c7:78:90:1b:72:c6:08:1f:c2:2b:ac:8e:53:ab:2d:d7:75:c9:
3b:08:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:08:17 2025 by rpki-client