Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier: eaLPqMIn4Q7nZGWAGxJnaXCsDmVYiBiTJHDvhWmf7EY=
Subject key identifier: 9E:A6:7A:1F:48:5B:86:75:B9:29:1E:B8:23:80:CB:76:8A:7B:DA:B6
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial: 0199FC8FA66A764500C1278572A7248A11BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number: 02A9
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: ciJFVmBUnRuszLhY4m3T3jJWdDvcu7V7D/youTm+TM8=)
2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a6:6a:76:45:00:c1:27:85:72:a7:24:8a:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=9ea67a1f485b8675b9291eb82380cb768a7bdab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:5b:25:53:0e:90:e4:1a:d8:3e:24:40:d5:
56:e2:ea:6b:2e:52:7c:0e:54:76:c6:cf:6b:73:5b:
f1:ac:a1:04:fd:db:4a:99:5c:06:fa:e8:f9:ce:49:
ad:48:e8:2e:ba:99:b1:0f:6e:46:18:ce:a6:7c:ca:
72:a8:f8:fb:2c:f7:b0:de:65:0d:ce:35:87:47:19:
47:02:9a:a4:63:54:df:d6:7c:55:29:92:21:3a:ef:
66:bf:40:42:0d:2b:57:04:c3:c3:e0:fa:82:7c:3d:
19:5d:33:84:9a:6b:d6:e5:9d:3b:83:fd:e7:35:c1:
82:bd:32:66:79:a1:27:b9:0c:a3:e1:d2:7a:5e:4e:
f8:78:87:55:99:b6:9c:a7:b8:46:6f:f2:e1:c7:63:
10:05:bd:70:03:fd:fe:0c:19:86:e4:3c:01:17:8d:
8c:0a:eb:8b:3a:46:8d:a6:80:d0:fb:78:73:e2:f4:
e4:55:bc:06:13:cc:28:53:8d:c0:13:39:d6:cd:0c:
24:bb:56:f4:db:47:df:78:10:2f:de:df:6b:91:46:
0b:69:89:7c:71:5b:8e:01:4a:7e:60:36:8b:be:6b:
85:81:23:46:76:fc:c0:0e:a8:e4:2a:e3:c3:13:fa:
c0:85:1f:89:36:ab:f6:ef:fa:4a:6e:5d:f8:79:6c:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:7A:1F:48:5B:86:75:B9:29:1E:B8:23:80:CB:76:8A:7B:DA:B6
X509v3 Authority Key Identifier:
keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:f5:6d:99:e6:2e:f6:61:6e:9f:29:62:67:eb:5a:41:8f:
20:28:6d:7d:90:2a:52:bb:83:e2:40:10:c6:55:8b:5a:eb:50:
b7:69:2e:2d:9d:51:27:6a:d6:18:26:dc:47:be:ff:1b:89:01:
9e:4b:26:b2:f1:ea:f0:b2:be:1e:44:7f:ba:e9:55:9c:c0:0e:
6a:ea:96:a6:4f:28:95:f1:55:4c:26:bb:91:4a:3e:fa:8d:90:
dc:fd:a0:a1:ef:ea:a3:e5:65:3a:f0:39:08:bd:2f:af:08:dd:
02:bf:a0:df:1a:e1:ee:18:af:40:d8:90:54:08:2a:d5:95:95:
02:28:19:1e:2a:5a:99:cb:49:ca:6f:0e:a9:ef:33:f7:eb:c0:
88:78:98:7b:41:ce:0f:69:89:d6:c3:79:25:f6:00:5d:73:c9:
cc:a9:e5:4e:33:b8:ae:70:8c:0f:c1:d1:ea:47:d2:e1:0e:8a:
67:d7:c5:3b:82:50:cf:cf:2d:74:d5:b8:2b:ce:0c:49:b5:b2:
b0:66:a4:19:45:6c:d3:df:95:58:3c:72:0e:d3:bf:cf:76:6f:
81:5d:c5:03:8f:d5:87:cd:aa:84:87:fc:39:d1:d2:2e:d1:4a:
79:57:15:bf:02:5e:3d:59:6f:c5:5a:11:01:d8:8c:2d:60:16:
de:78:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:53 2025 by rpki-client