
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier: aFGq5RNRKjLJOrtKdIrLbNGf3NyuK3u6hGuV4mrf4eU=
Subject key identifier: A9:20:67:43:E0:51:2F:DF:D4:52:BB:63:7C:B3:7C:A3:9E:2A:22:F3
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial: 0197B7451C57B867C411E69C135D8DBC4412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number: 017C
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: JoqDIS21oi6JG0om49J9vUFJ/0KpzYt0Cw5mVa8Gpok=)
2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1c:57:b8:67:c4:11:e6:9c:13:5d:8d:bc:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=a9206743e0512fdfd452bb637cb37ca39e2a22f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:f2:d6:67:11:7e:ea:22:7e:e5:59:f0:70:
24:6b:31:bc:7c:f2:f7:9d:7e:40:86:21:35:c1:0e:
b2:ab:23:e8:66:8f:a5:05:8c:85:14:cf:60:a4:79:
0f:53:39:2d:8d:8f:6c:ba:08:10:43:f5:ab:ec:52:
06:4a:0a:d5:c2:9d:44:f8:c4:d6:e5:7e:92:de:26:
99:0d:cb:4a:6b:46:f4:f6:d3:4b:c6:05:3a:cb:33:
22:6e:b9:83:0d:0e:b5:08:b8:db:46:ff:ce:b2:a1:
dc:46:56:ec:62:b6:58:9c:f9:4c:58:cd:9e:58:c7:
4e:43:b5:21:7d:98:78:f9:ca:5b:df:00:6e:34:31:
bb:0a:bd:9c:ad:cd:15:d5:2c:48:81:0f:fa:c2:86:
48:24:16:3d:5c:14:b7:20:ec:70:7e:db:ff:90:3d:
3a:67:63:74:b1:81:01:31:55:32:8f:ca:03:5d:d9:
2f:8a:d4:a9:6c:2d:a0:f0:be:e8:c8:b7:01:cf:bb:
18:98:42:f3:4b:d6:2a:26:52:a5:b5:14:b5:8d:55:
f6:94:d7:e2:7c:c7:b0:e3:e8:67:64:a6:a3:cb:66:
5f:a9:11:4b:65:f1:d3:00:60:ca:5e:1c:f8:bb:5e:
da:ff:b1:78:27:ad:92:b5:ea:aa:51:8c:fa:e5:08:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:67:43:E0:51:2F:DF:D4:52:BB:63:7C:B3:7C:A3:9E:2A:22:F3
X509v3 Authority Key Identifier:
keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d4:cb:63:5d:d6:5c:3d:a0:a6:86:a6:7a:c7:ea:3c:62:0f:
52:25:8c:c8:ea:3b:a9:0a:0d:db:33:3b:0c:bd:9a:29:58:2c:
eb:ea:55:1a:31:90:ed:7b:4d:5a:2b:b4:e0:be:0c:73:a5:bd:
b4:55:5e:de:e2:be:14:db:11:10:b5:d9:ca:9e:0f:82:c0:f0:
7e:42:3f:54:65:0c:b4:15:66:e5:7b:ea:0d:95:2f:e2:c7:51:
eb:20:5f:5b:c3:76:9d:85:a8:87:cb:93:bd:77:66:4b:03:c9:
67:ab:97:12:46:e0:76:4e:2c:90:a8:73:82:36:01:28:e3:00:
8f:aa:7c:2f:2e:76:de:e3:05:02:1c:c1:78:07:ca:e1:72:4c:
51:2a:fc:2c:fa:12:ca:0f:11:42:6b:72:9e:db:89:6e:0b:76:
2c:1b:6a:a3:80:ec:f0:a2:a9:f7:5e:b0:1b:1a:bf:6f:19:56:
60:61:78:0c:37:38:09:40:ab:44:06:bc:ec:c3:04:99:0e:8d:
f4:94:98:3f:28:88:6b:77:7a:05:c7:68:8e:02:f7:93:94:61:
8c:d0:41:fd:83:0e:f7:b0:c7:60:c9:ff:52:62:d9:42:d6:fa:
b1:60:2b:90:af:77:a1:09:7f:58:ca:34:ae:bd:ec:62:d1:b3:
5b:84:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client