Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: bVGmvN5TjTycPDR3P/3VRDmvO+uS2C2c6TWNj30Iryg=
Subject key identifier: E1:2B:9E:D5:DD:9A:6F:59:DE:2E:E8:83:00:A5:03:9C:16:5C:F9:D6
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 0197B70E51D529921562A42E55B5AE023F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: jiVXNB3vr5pc1/dmaqRocGjHSzKCecp1NYKdnqfaHy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:51:d5:29:92:15:62:a4:2e:55:b5:ae:02:3f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=e12b9ed5dd9a6f59de2ee88300a5039c165cf9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:55:bd:f3:e8:ef:54:02:77:64:07:ec:3b:
b7:19:28:7d:7e:95:cb:f3:bc:35:80:24:47:50:0c:
af:72:f1:76:35:49:0c:a4:8d:45:5f:02:e0:91:1a:
9c:6f:e8:05:3a:38:a7:a1:bc:2c:74:c6:f4:fc:27:
c2:2d:b0:ec:8e:31:c3:b0:ca:e8:3f:bb:0a:78:f3:
eb:f5:11:c3:46:22:48:3c:05:ed:4e:a0:5e:4f:c2:
0f:e8:38:0a:c5:58:94:93:cc:9f:02:a5:d9:63:8a:
0d:68:f7:e2:7a:f1:ff:e8:b5:bb:06:fc:70:5b:b7:
32:b8:ca:9e:d3:77:48:c0:35:f7:48:9f:20:30:8e:
a7:db:ba:e2:26:96:d2:ff:25:46:bb:d4:d9:78:98:
92:c4:61:08:b7:a1:cc:8c:e4:36:e4:d8:1a:ae:56:
6b:b4:e2:ac:82:95:df:5b:25:72:cb:a2:de:30:2f:
0d:09:54:fa:c2:44:d8:c1:73:11:63:ad:f6:e4:c0:
bf:8c:7f:ba:a8:73:73:61:a0:ce:2e:cf:ea:f8:31:
b0:28:5a:80:f4:2e:54:9c:ce:52:0a:4c:f5:3c:b6:
e5:fb:6b:bb:94:3f:75:b8:76:8a:2c:42:a0:85:e1:
86:5d:07:16:2b:27:59:51:e3:49:4b:6f:a1:9b:e7:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:9E:D5:DD:9A:6F:59:DE:2E:E8:83:00:A5:03:9C:16:5C:F9:D6
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:16:7b:be:2c:67:99:7b:69:99:bb:e2:7f:81:f2:6f:4e:
4a:17:17:06:f3:c7:89:16:3f:6a:4c:24:86:fc:be:6c:0d:13:
0f:5a:27:0f:8f:15:f4:f6:00:24:86:6e:d6:ec:ee:6f:f3:49:
47:9b:4b:db:58:15:81:a9:9b:ca:c8:69:d2:60:5f:c3:e5:a3:
44:2e:7e:2c:0c:02:55:db:34:34:ea:3c:73:ca:33:8d:76:25:
03:b1:80:78:28:20:ea:b3:7e:c1:f9:c9:8a:f8:3b:b1:b3:e0:
d8:03:6f:b5:e2:10:4f:a9:f3:c4:04:ea:52:ea:c9:25:29:85:
b0:34:ec:df:dd:49:d3:bb:37:eb:ac:b9:82:c0:12:fe:6b:fc:
e8:6b:cb:a3:3b:ff:c6:37:72:9b:8d:38:cf:71:d7:ff:fc:11:
d1:86:05:7a:d1:0b:cf:13:08:b5:f5:56:3b:f3:cb:f9:7c:3d:
12:e6:71:f2:36:62:05:d7:c0:78:2a:cc:0d:8b:d4:95:e6:42:
23:91:9b:80:5d:f6:51:2b:b7:57:39:fb:57:53:b4:5c:4b:d7:
4c:ba:b2:bf:3a:ee:58:29:86:5e:38:1e:77:9a:c4:6c:25:22:
40:03:7a:4a:51:93:6a:2f:55:27:e2:42:f7:8e:1d:bd:96:d3:
45:fa:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:48 2025 by rpki-client