Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: /hJcpxh7j8tAQz1KbTMsXTzszgGlohZTW8+zype/9zE=
Subject key identifier: A7:9B:F2:B8:B3:8D:3E:24:89:9D:24:E2:1A:DF:4E:05:95:A0:DC:47
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 019874505E4F43A4CE59FEAEFD41BAFB74F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0C8D
Signing time: Mon 04 Aug 2025 09:01:20 +0000
Manifest this update: Mon 04 Aug 2025 09:01:20 +0000
Manifest next update: Tue 05 Aug 2025 09:01:20 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: lYr08Vzh2EPh8kTwvvJkzIz1/AREqr+HOgmfSAsMmOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:5e:4f:43:a4:ce:59:fe:ae:fd:41:ba:fb:74:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Aug 4 09:01:20 2025 GMT
Not After : Aug 5 09:01:20 2025 GMT
Subject: CN=a79bf2b8b38d3e24899d24e21adf4e0595a0dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:73:7b:e7:62:b3:02:e1:f5:cf:8e:45:69:
81:6e:55:18:47:8d:f3:7e:da:56:27:8d:21:b8:c4:
6d:13:21:30:0b:1e:f9:11:37:84:17:5f:2b:ae:8e:
27:11:3b:cf:4a:31:0d:29:43:86:c7:eb:d7:dd:53:
7d:4d:c2:2b:ac:35:4d:cf:d5:a6:60:0c:07:62:d0:
dc:c5:f7:83:99:55:1b:28:3b:9c:f5:28:0d:c0:1d:
5e:c3:df:55:0c:d4:5d:8c:9e:9d:7f:fe:31:00:86:
54:4c:9e:9d:fa:a0:f1:77:09:c2:d9:94:b3:81:48:
bb:3f:8a:3c:6e:16:78:9e:d0:05:9d:0e:91:c0:d0:
cd:e5:54:90:3e:2b:a8:9c:6c:03:ab:f3:b9:06:81:
df:00:fc:89:ac:e7:ba:6b:47:5e:97:65:89:5e:47:
ed:f0:88:39:7d:db:13:3a:25:df:45:10:e4:b7:5f:
b9:49:6d:8a:18:9f:7e:93:20:70:57:a7:5b:3f:12:
b1:d6:ce:ef:31:24:ec:10:e9:54:c6:00:1b:02:eb:
d4:8a:f7:c8:9c:18:23:cd:3a:4e:5e:3c:bc:81:ab:
c7:97:e2:9d:43:c6:4b:12:f4:37:83:2a:6d:af:f3:
ff:05:de:e0:49:57:4a:43:08:7b:b7:d8:bb:e9:1d:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:F2:B8:B3:8D:3E:24:89:9D:24:E2:1A:DF:4E:05:95:A0:DC:47
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e0:42:71:d9:81:27:a5:58:4d:8e:5e:aa:38:43:35:96:cb:
b2:80:4c:86:b2:55:21:e2:44:fa:73:47:5b:0b:03:da:b8:37:
33:e9:d1:5f:73:0f:de:a2:aa:8b:b2:bb:2c:ea:1c:d1:39:be:
d9:66:9c:3e:f6:ca:81:0a:6e:49:b2:6d:a7:28:fc:27:11:cd:
6a:24:3e:e6:3d:b6:98:c9:22:2f:1b:f0:42:f7:89:7f:0f:81:
af:a4:7f:3a:4b:1b:34:cf:f7:70:d5:a9:6b:35:cb:f2:0a:d5:
f8:55:3c:53:3c:d0:d9:a5:55:da:eb:8b:f8:1d:e6:9b:84:a1:
38:7f:85:39:5b:ef:fc:ac:6c:07:a4:c1:8f:c8:21:bc:ec:60:
dc:52:9d:1a:60:62:b8:72:a7:f3:87:d2:5a:36:12:b7:3b:56:
1f:3e:6b:08:97:c2:30:d2:3f:9b:e0:4e:24:c2:59:61:54:12:
9e:1a:0a:44:49:65:5a:17:b7:fe:93:d8:cf:1b:53:0c:3b:ee:
70:15:22:82:29:f0:39:e4:2c:3b:35:e1:9c:5c:f5:77:b7:ff:
0f:fb:ea:0a:5b:f9:96:17:67:8e:54:a4:d5:09:5f:2d:db:c0:
e4:5f:60:4a:b5:e7:5f:cd:58:3c:cc:50:d7:69:2e:4a:c2:0b:
d9:f2:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:48 2025 by rpki-client