Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: 0tVIgWwHZ4pxtw5UE8p5xNAilBDVIrkuiBWW+oYDZBU=
Subject key identifier: 18:18:B0:C9:0A:12:97:32:13:AF:1F:93:28:05:64:12:3D:5E:82:C8
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019874BDAB3BAFEF226925D3CEB2DB8CEBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 11:00:43 +0000
Manifest this update: Mon 04 Aug 2025 11:00:43 +0000
Manifest next update: Tue 05 Aug 2025 11:00:43 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: 0DBBF0jdf6u0FTZ8YBVmTZIaT6GkoIMyG0nq7BtJh3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:ab:3b:af:ef:22:69:25:d3:ce:b2:db:8c:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Aug 4 11:00:43 2025 GMT
Not After : Aug 5 11:00:43 2025 GMT
Subject: CN=1818b0c90a12973213af1f93280564123d5e82c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:31:22:d5:3a:53:96:9a:33:4a:ec:2f:40:
36:d8:96:55:d9:7a:11:8a:fc:f9:68:11:f5:9f:4a:
ee:62:5f:5f:6c:eb:ff:9f:d2:7b:9e:4b:9d:d0:3d:
47:a9:46:66:b6:55:f3:0d:a3:d1:23:30:c4:cf:91:
10:ed:a0:3b:7b:d8:88:d5:eb:5d:06:e0:c0:01:ee:
d2:86:68:fd:3b:49:14:9a:ed:5f:ab:24:dc:2f:d7:
17:00:ec:25:79:ae:c3:9a:23:60:17:b4:6f:49:41:
03:46:d6:96:c1:44:8b:72:f0:e1:f1:bc:e9:ef:55:
07:84:15:90:30:b3:58:23:a3:6b:95:80:07:e9:6f:
17:fb:f6:43:68:cf:38:c0:7b:94:25:d7:d8:f9:b1:
0a:75:cc:33:7d:32:a4:e0:d0:60:0f:9f:fc:41:73:
fb:2e:d4:f3:d9:5d:35:46:06:ae:9a:4c:48:70:c3:
10:37:f7:93:ab:a2:31:50:63:20:c7:ce:15:3b:16:
6e:45:ff:58:4c:a0:be:82:35:a0:39:5e:14:87:15:
13:09:00:b8:6d:98:4d:c2:8e:cd:73:7a:b2:8c:2d:
e4:d9:1b:e4:87:e9:80:4f:d0:f5:51:92:57:a0:14:
a3:eb:7b:8c:7c:f4:d6:bf:9e:8a:33:73:41:20:88:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:B0:C9:0A:12:97:32:13:AF:1F:93:28:05:64:12:3D:5E:82:C8
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:58:b2:96:81:fc:3a:27:93:47:1d:99:88:68:7c:d7:8b:
da:56:a1:b6:c9:01:c7:23:26:8d:b6:3e:5e:ba:74:e7:2c:22:
bf:70:d8:e0:cd:13:f1:2a:99:de:0f:fb:88:31:ff:b0:82:69:
1a:3d:8f:e1:5f:db:5d:81:00:b8:c6:3e:d1:ca:ba:84:97:14:
74:6a:25:03:48:11:56:37:d0:8d:47:9b:4d:15:04:12:6c:e6:
e7:09:e1:b1:a8:c9:7b:a9:45:c2:e7:ea:7b:57:6f:48:cc:da:
6b:b3:e0:1f:5b:e1:b1:51:52:d5:1b:0f:f8:0a:37:34:43:45:
8f:3e:2e:b0:97:56:86:82:c5:23:0f:6a:d3:ce:7b:cb:a0:09:
8a:14:27:b1:47:5d:72:1c:bd:5a:bd:c3:cb:0b:88:48:d9:29:
4e:b0:52:d5:2f:98:b4:af:98:ad:b0:06:f7:0b:dd:c5:8f:34:
c3:ed:66:ca:e5:b8:33:bb:ee:d8:57:27:52:8d:c7:28:bc:af:
23:cc:1a:bd:f5:ea:32:a2:1c:46:7e:0d:ef:7d:d5:61:4b:7c:
00:90:a0:8b:6b:26:06:06:a3:32:76:9d:be:0d:1d:e4:12:87:
71:63:7a:49:37:ea:9d:90:fb:5b:3b:0b:8f:67:44:c3:61:2f:
f3:f6:90:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vas7r+8iaSXTzrLbjOv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj
YmEwMjAwHhcNMjUwODA0MTEwMDQzWhcNMjUwODA1MTEwMDQzWjAzMTEwLwYDVQQD
EygxODE4YjBjOTBhMTI5NzMyMTNhZjFmOTMyODA1NjQxMjNkNWU4MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp8xItU6U5aaM0rsL0A22JZV2XoR
ivz5aBH1n0ruYl9fbOv/n9J7nkud0D1HqUZmtlXzDaPRIzDEz5EQ7aA7e9iI1etd
BuDAAe7Shmj9O0kUmu1fqyTcL9cXAOwlea7DmiNgF7RvSUEDRtaWwUSLcvDh8bzp
71UHhBWQMLNYI6NrlYAH6W8X+/ZDaM84wHuUJdfY+bEKdcwzfTKk4NBgD5/8QXP7
LtTz2V01RgaumkxIcMMQN/eTq6IxUGMgx84VOxZuRf9YTKC+gjWgOV4UhxUTCQC4
bZhNwo7Nc3qyjC3k2Rvkh+mAT9D1UZJXoBSj63uMfPTWv56KM3NBIIj4AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgYsMkKEpcyE68fkygFZBI9XoLIMB8GA1UdIwQY
MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt
ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw
LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4BYspaB
/Donk0cdmYhofNeL2lahtskBxyMmjbY+Xrp05ywiv3DY4M0T8SqZ3g/7iDH/sIJp
Gj2P4V/bXYEAuMY+0cq6hJcUdGolA0gRVjfQjUebTRUEEmzm5wnhsajJe6lFwufq
e1dvSMzaa7PgH1vhsVFS1RsP+Ao3NENFjz4usJdWhoLFIw9q0857y6AJihQnsUdd
chy9Wr3DywuISNkpTrBS1S+YtK+YrbAG9wvdxY80w+1myuW4M7vu2FcnUo3HKLyv
I8wavfXqMqIcRn4N733VYUt8AJCgi2smBgajMnadvg0d5BKHcWN6STfqnZD7WzsL
j2dEw2Ev8/aQeA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:57 2025 by rpki-client