Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: Rg0wT03Q12rrJaQzCXTMciUd40sVWzX+vh+lZ39Ol1Y=
Subject key identifier: DB:E8:78:ED:80:24:19:72:5C:D7:A7:6B:01:3A:41:AA:AD:CC:E5:3E
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 019A4D747B2C0D733A5D041A8CD4D7C047D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0D82
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: 2rm2cc3+V3oVGuShjt5dy9n2PtpMdpCicqVAW/1TPKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7b:2c:0d:73:3a:5d:04:1a:8c:d4:d7:c0:47:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=dbe878ed802419725cd7a76b013a41aaadcce53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:22:cf:74:c8:24:af:3d:2c:6d:bc:99:af:
3a:2e:a4:7b:c1:55:2c:33:e3:9a:53:c5:50:52:c4:
f3:a7:fc:57:64:08:07:aa:ff:94:ac:0d:8a:74:44:
d6:72:b9:71:38:f8:87:32:d4:47:d7:8b:9e:a7:51:
cf:ec:ef:fa:17:dc:28:f9:41:64:3c:fe:30:11:8b:
8b:57:1a:f9:76:be:41:11:3f:cc:66:92:62:a6:41:
d0:83:87:0f:22:e2:3b:2f:b2:99:21:fa:17:11:0d:
ed:ab:04:f1:33:72:86:00:ec:24:af:1d:72:bb:f5:
0b:52:3f:b2:f9:20:86:57:cd:03:b0:ad:f0:31:7c:
f7:21:83:d1:12:88:af:0b:f1:b5:94:9c:a4:23:c4:
d3:03:c9:97:97:a9:f2:7b:9c:fd:ac:b7:ad:01:51:
af:be:4f:3a:5b:7a:83:d5:e7:d1:eb:ca:eb:81:ec:
e6:79:40:01:a4:67:40:e9:83:34:c1:22:ea:4b:51:
8f:d0:07:74:42:25:6c:c8:f0:5c:37:66:23:c1:9c:
af:96:b9:86:2c:3b:ae:cf:9a:9a:cc:3f:5c:e7:85:
d2:2a:2a:5c:e2:bf:bb:22:05:8f:d1:29:4b:aa:88:
3e:3d:e2:66:f3:af:e8:b9:12:cc:2b:c4:11:26:8c:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:78:ED:80:24:19:72:5C:D7:A7:6B:01:3A:41:AA:AD:CC:E5:3E
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:c1:e2:08:c8:5d:8d:99:a0:79:e1:38:1f:75:b7:36:bf:
aa:9b:07:52:ea:9d:83:d8:c9:d8:4d:3c:96:80:3b:54:91:c8:
02:70:69:33:15:9e:45:4c:dc:71:5e:b6:40:11:0b:9a:7c:de:
0e:81:ad:78:de:b8:fb:cf:b4:ce:fb:ea:e3:7a:e3:f4:c4:7c:
b0:07:09:36:20:a3:76:7e:b4:f1:2a:26:87:4a:2e:7a:7c:f5:
2b:de:9d:39:83:b0:81:03:4e:6e:46:70:76:13:f5:96:4d:60:
38:60:eb:e3:7d:e8:49:70:d2:49:6b:0a:0e:4b:6e:a6:53:44:
ea:57:d3:8e:d3:fc:36:d9:72:a5:96:aa:02:46:9b:60:14:b3:
a7:54:f7:e2:36:7b:1d:d5:65:39:80:29:b9:0d:29:ec:ca:77:
97:64:16:c5:df:1e:89:62:cb:0b:07:df:a7:59:a6:9a:5f:ba:
99:3c:fa:59:99:14:f5:38:ba:4a:dd:7c:68:64:10:86:b8:38:
6f:60:f9:b6:f1:2f:34:08:a7:d6:31:b3:1a:82:a7:a7:0f:e9:
fd:78:45:d1:45:c4:76:d3:09:5d:84:53:c6:88:29:e1:ab:e5:
87:71:a1:42:3f:6e:f2:4f:b9:cf:d4:b8:17:4f:74:65:b8:fc:
1b:09:16:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdHssDXM6XQQajNTXwEfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWQ5OWUxZWIyN2VjN2FiYmU5MzU2Mjc5Yzg0MTFhNDEz
MGZkY2EwHhcNMjUxMTA0MDYwMTEwWhcNMjUxMTA1MDYwMTEwWjAzMTEwLwYDVQQD
EyhkYmU4NzhlZDgwMjQxOTcyNWNkN2E3NmIwMTNhNDFhYWFkY2NlNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX8iz3TIJK89LG28ma86LqR7wVUs
M+OaU8VQUsTzp/xXZAgHqv+UrA2KdETWcrlxOPiHMtRH14uep1HP7O/6F9wo+UFk
PP4wEYuLVxr5dr5BET/MZpJipkHQg4cPIuI7L7KZIfoXEQ3tqwTxM3KGAOwkrx1y
u/ULUj+y+SCGV80DsK3wMXz3IYPREoivC/G1lJykI8TTA8mXl6nye5z9rLetAVGv
vk86W3qD1efR68rrgezmeUABpGdA6YM0wSLqS1GP0Ad0QiVsyPBcN2YjwZyvlrmG
LDuuz5qazD9c54XSKipc4r+7IgWP0SlLqog+PeJm86/ouRLMK8QRJoydgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvoeO2AJBlyXNenawE6QaqtzOU+MB8GA1UdIwQY
MBaAFGqdmeHrJ+x6u+k1YnnIQRpBMP3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXAyWjRlc243SHE3NlRWaWVjaEJHa0V3X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83M2M4ZjAtN2E1YS00YWRiLWExMmQt
YjdkYWYyZTYwZjZmLzEvYXAyWjRlc243SHE3NlRWaWVjaEJHa0V3X2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83M2M4ZjAtN2E1YS00YWRiLWExMmQtYjdkYWYyZTYwZjZm
LzEvYXAyWjRlc243SHE3NlRWaWVjaEJHa0V3X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFzB4gjI
XY2ZoHnhOB91tza/qpsHUuqdg9jJ2E08loA7VJHIAnBpMxWeRUzccV62QBELmnze
DoGteN64+8+0zvvq43rj9MR8sAcJNiCjdn608Somh0ouenz1K96dOYOwgQNObkZw
dhP1lk1gOGDr433oSXDSSWsKDktuplNE6lfTjtP8NtlypZaqAkabYBSzp1T34jZ7
HdVlOYApuQ0p7Mp3l2QWxd8eiWLLCwffp1mmml+6mTz6WZkU9Ti6St18aGQQhrg4
b2D5tvEvNAin1jGzGoKnpw/p/XhF0UXEdtMJXYRTxogp4avlh3GhQj9u8k+5z9S4
F090Zbj8GwkWvQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:31 2025 by rpki-client