Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: 6eLAR4JiFueJFGOz3gGJjPXXz8X0c3XrSkCgS6kE+ck=
Subject key identifier: 70:7A:FB:9B:80:35:04:40:2A:2D:53:AD:03:4C:7C:E1:B8:4E:7D:EB
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 0198D4E06CC74068F1442FA7E734D334EDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: ySCoeakVHjRW1qhJNpo4jPCruBvGdg7nStPq3c1gb10=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6c:c7:40:68:f1:44:2f:a7:e7:34:d3:34:ed:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=707afb9b803504402a2d53ad034c7ce1b84e7deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:f1:31:1c:85:c0:45:d6:70:01:9a:87:60:
a6:c5:6c:9a:0f:f6:bd:d5:47:5c:21:e9:c8:6f:59:
b2:ac:5d:41:c7:93:59:07:e2:a6:b2:ba:3e:4f:19:
4d:a9:64:54:cc:ea:e2:4c:e0:5b:1b:e2:c8:b6:f5:
f3:27:7f:5d:2f:50:6a:8d:30:3c:77:c9:05:2b:a0:
ed:a5:55:a9:73:c7:ac:7a:e8:59:46:84:e5:22:62:
30:6e:1f:11:2c:d4:82:ef:ef:21:39:f9:ad:1d:60:
85:c7:a8:93:67:c8:c3:c3:aa:1a:fb:a6:38:71:f7:
fc:ed:14:1f:dd:4e:65:96:9b:b4:02:72:f6:54:9d:
18:4e:1b:03:f2:22:08:c9:b6:35:18:67:fc:96:56:
72:d0:80:70:ef:b5:35:8e:05:d3:a8:07:9f:00:fc:
b4:54:32:1f:4f:1b:43:ff:3e:ff:bc:0e:4e:ed:95:
c7:91:7a:04:1e:bc:d2:5c:d7:c7:59:22:2a:ef:39:
a5:75:c7:74:48:f7:02:1b:7c:51:fb:b2:88:a8:d2:
fe:f7:c4:a4:31:6e:1d:78:ec:f6:44:2c:f2:3f:80:
42:2c:ba:f3:59:af:01:92:13:38:af:af:0e:87:a1:
cd:5f:ec:f4:1e:87:00:13:85:d9:1b:bb:ee:02:c5:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:FB:9B:80:35:04:40:2A:2D:53:AD:03:4C:7C:E1:B8:4E:7D:EB
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:a1:1b:e3:49:96:e0:02:75:91:1a:7c:1e:de:1b:9e:29:9c:
bc:18:e6:fb:15:bc:59:10:d9:fc:89:1a:3c:1e:fd:dd:0a:01:
f0:49:49:d1:47:90:6b:81:82:30:d9:f1:6e:6c:05:00:69:f2:
54:b7:cc:38:5f:2c:7b:4d:f5:8a:0b:9d:57:66:94:d2:6f:ee:
f3:ec:3b:03:27:12:d2:89:85:07:d4:1e:ac:ac:eb:1e:5f:9a:
77:00:e5:ad:00:75:56:9c:b5:9a:65:d6:04:e8:d2:4e:e2:64:
8c:98:10:ed:e7:ae:92:39:22:22:55:b2:2f:49:94:54:a9:23:
44:95:08:c1:08:44:e2:29:ee:16:24:d3:f9:46:bb:a6:35:4d:
c3:6d:b2:57:5f:ab:01:6b:f6:ff:27:2c:99:ae:d4:5d:5f:f4:
6e:5d:c0:12:4e:9c:75:63:76:35:50:b4:de:94:c1:f9:e8:7e:
00:b5:42:1d:9d:e1:5d:58:f2:c3:f2:6f:73:b3:f3:d8:34:06:
57:8a:f1:f0:20:14:38:99:df:42:6f:e5:e6:ca:de:07:aa:86:
d4:c1:c4:25:6b:6b:46:ff:28:b9:f6:4e:b6:a9:0c:48:8d:d0:
7a:03:39:b6:23:28:f0:a1:04:3e:74:aa:9d:62:04:77:d3:f3:
f1:de:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:15 2025 by rpki-client