Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: FHMdJGTW3ox6zU03ERXY9ivOFiCuT6MNC2OJgoWiQkY=
Subject key identifier: E2:B8:BB:3B:C5:44:A9:A8:67:6F:C4:F4:1C:42:3D:CA:33:C2:B0:7D
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 019A4EF41B775680E93362E2B59113CBD6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: eolGRtOGY1NYW3s7VUibpyQ1HoCiGSL8CSQWFNZWIJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1b:77:56:80:e9:33:62:e2:b5:91:13:cb:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=e2b8bb3bc544a9a8676fc4f41c423dca33c2b07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:19:e3:cd:1b:e5:45:8b:50:7e:30:94:9c:
f8:0b:c1:50:92:fe:26:25:c3:b2:ba:3d:11:8b:df:
65:73:3d:e2:59:20:2f:a6:a9:e7:fd:2b:bd:79:a1:
e2:f3:a5:a9:b6:8b:c8:9b:71:eb:33:b1:57:e7:a6:
a6:fd:65:7d:2f:b1:ab:c0:cf:a4:a9:3a:a1:67:de:
17:03:4b:90:31:be:64:ff:49:c0:21:f5:25:94:88:
b1:08:a6:c5:41:3b:9a:07:19:a1:73:6b:0d:99:4c:
c5:75:a2:e4:43:7f:ee:70:01:20:46:28:44:66:d4:
f0:fa:60:d6:49:0c:e1:82:c5:24:a3:9f:4e:52:7f:
4c:99:4d:62:0c:a6:0f:01:e2:b2:06:4b:4d:f7:9b:
5b:52:8a:9c:8f:09:42:4c:54:da:6e:94:41:a7:8c:
fb:b6:3f:2d:63:f0:56:b4:10:2f:a0:d6:eb:68:e1:
67:a4:92:11:20:15:16:a1:a2:20:52:33:df:f7:83:
09:47:ac:ca:31:f1:9f:84:bc:c7:17:e2:b3:eb:f2:
65:0b:b6:0d:7d:03:7c:cc:36:48:c7:2b:a2:33:4b:
79:71:1b:02:8f:29:26:df:43:05:47:d3:5e:e5:91:
b0:fa:57:e0:47:83:1a:c0:34:6d:82:ea:2c:48:1f:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:BB:3B:C5:44:A9:A8:67:6F:C4:F4:1C:42:3D:CA:33:C2:B0:7D
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b9:e3:87:cc:06:39:db:5f:69:2e:fc:dd:d7:a5:3b:77:4d:
2d:21:51:f1:ff:4e:3a:9b:9a:a8:e7:45:57:ef:9c:d1:78:b6:
ee:53:48:31:23:26:46:6f:0b:39:f4:29:91:eb:36:ef:87:9f:
fb:fc:e9:b7:27:5b:ac:9e:f3:23:2b:dc:8e:1e:03:e8:c7:3d:
6d:e8:7d:33:26:45:76:a9:8d:23:4d:7e:da:b1:20:22:b8:47:
fa:e9:34:e0:2d:f4:6a:70:44:dd:16:f7:3d:44:48:92:09:ea:
e5:ca:ab:b8:98:85:5d:b1:60:d3:a5:87:5d:fe:00:11:ff:f6:
f0:10:cc:01:a7:23:5f:5b:6d:65:1d:a6:da:b3:96:f0:72:32:
cf:51:0b:26:83:ec:a7:36:4c:9c:db:ff:c9:50:08:d9:6d:b9:
fc:20:4d:1d:70:ad:98:4e:03:a6:4b:b6:4f:9f:1d:06:12:4b:
84:b2:bb:29:50:f4:6e:78:16:6b:06:e2:ae:8e:86:d3:23:54:
0b:8d:15:ab:2c:67:e6:e0:b2:a8:0b:72:40:9e:9f:7b:ea:20:
23:88:54:9d:c2:a3:ab:0f:2b:b9:cb:bc:ad:c4:d7:26:6c:27:
8e:21:08:9b:60:e9:ce:ce:0d:f6:ef:fc:be:86:b8:68:7b:37:
3c:6b:73:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:42 2025 by rpki-client