
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: UG5vw9D0KgHdmq15mCSZu/EnFJ+hLBdlZ0RWALluttE=
Subject key identifier: 3B:61:EE:0A:89:78:B4:34:8B:90:A9:08:1A:58:C4:56:51:1F:F9:AB
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 0199FC58E182AAF8F2289C5A94A822DFBB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: 3DiMTps+HP1uFAYDc7aSvMiKB6nhCcIUOXRaV+ZELus=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e1:82:aa:f8:f2:28:9c:5a:94:a8:22:df:bb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=3b61ee0a8978b4348b90a9081a58c456511ff9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:2e:d3:40:71:1d:6d:95:fa:76:57:cf:32:
fa:2e:88:d1:4b:17:20:90:95:6c:6e:01:9f:3d:cf:
83:82:a1:b1:07:27:b8:84:f3:99:90:eb:87:34:e5:
82:d5:2e:ba:d3:69:c2:2b:40:54:8b:25:ea:b5:f5:
79:91:62:ae:c4:a6:70:70:e6:4c:c7:e0:08:35:10:
34:57:3c:1c:6b:0b:74:98:94:f3:a6:26:3e:7e:5e:
0e:c6:1a:d1:9b:f3:25:78:0d:0a:7b:69:f8:3c:2c:
96:c4:9c:60:3d:8d:f3:b6:cc:08:22:1e:dc:96:82:
cc:a5:2f:bb:04:4a:6c:ca:4a:5b:c0:eb:5f:26:30:
bb:1b:b9:df:50:fa:52:98:c9:70:53:d3:2b:28:d9:
00:8f:54:b0:b4:bb:41:16:05:ab:a2:6d:21:c3:d2:
c6:17:28:1f:7c:dd:c2:d4:86:ed:68:18:9e:62:55:
6a:61:aa:0b:0d:ad:4e:97:0e:2b:44:ac:f3:e6:d6:
66:70:ab:c4:8e:03:e3:cf:76:1b:bc:14:a2:82:c7:
0f:ec:6b:b0:9b:7a:d9:72:1b:a1:7c:7c:e8:67:76:
6f:de:a0:55:8a:84:6f:66:58:95:bf:e7:42:9d:a2:
13:d9:d3:87:ac:ec:a0:ca:39:ec:01:54:b1:56:c2:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:EE:0A:89:78:B4:34:8B:90:A9:08:1A:58:C4:56:51:1F:F9:AB
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:48:49:e4:06:ca:d6:59:21:ba:0a:ce:c7:83:4d:ba:92:74:
ca:59:39:37:bb:c7:23:06:23:f4:3a:9e:31:a1:e7:48:e4:d9:
54:77:07:dd:c6:a0:c5:89:c4:21:90:8c:47:f7:cd:a5:28:cc:
5e:15:6f:a1:1a:59:83:08:f7:6b:2e:03:31:2d:f7:3a:80:ed:
45:b7:e0:9c:a1:4d:65:f8:a4:3c:8e:14:02:e2:ea:c8:cc:c7:
20:69:b4:fb:8d:1e:7c:65:11:01:2e:1a:85:92:96:d5:73:11:
c8:e5:92:48:bf:19:97:45:a3:0e:4f:61:c0:f9:cb:7c:c2:43:
6f:fa:82:aa:4a:4d:b4:96:d0:fc:8a:9c:ea:a8:06:80:a8:0b:
4f:bc:46:41:7e:2c:a1:9a:1d:66:df:26:28:92:81:88:f4:19:
62:53:fb:8d:60:ad:02:ca:10:48:82:0a:c9:65:20:4c:6e:e1:
4f:1d:2d:30:53:3e:f8:6b:8e:2a:1d:e5:8f:10:58:31:e1:cc:
fb:c9:2a:43:7f:ee:e3:a0:7a:35:84:24:00:84:42:6a:f3:db:
73:8b:3e:d1:e1:41:8c:23:46:7b:ce:32:7c:6a:d8:a9:0b:cb:
3e:cc:9c:a0:14:c5:89:df:96:d9:dd:83:bc:a6:4a:41:a2:f0:
f0:0e:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:13 2025 by rpki-client