Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: niNmSC4BXRtjShampw2eaT/CIxzNE4Hi2HiVT7EcPDY=
Subject key identifier: 22:D8:AB:57:78:93:87:1B:85:BC:65:21:FF:C8:9E:FD:10:34:8A:DD
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 01976D3E659F570E5185C45A247C82EC517B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:35 +0000
Manifest this update: Sat 14 Jun 2025 07:01:35 +0000
Manifest next update: Sun 15 Jun 2025 07:01:35 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: tQ84bcX67Q/W83WPTXfANmd/0yeP8OHgxBo1d60KPMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:65:9f:57:0e:51:85:c4:5a:24:7c:82:ec:51:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Jun 14 07:01:35 2025 GMT
Not After : Jun 15 07:01:35 2025 GMT
Subject: CN=22d8ab577893871b85bc6521ffc89efd10348add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:69:72:a5:92:c4:b7:f0:87:95:6a:14:62:
33:2a:49:82:7e:d7:b1:24:20:53:e8:fb:4d:60:b4:
bb:77:6d:08:b6:c6:a3:24:bb:34:7b:c3:a8:2c:e0:
d2:d3:3d:50:93:22:69:5d:71:75:19:30:87:0b:f0:
3c:dd:db:c3:4f:56:97:a4:b1:7f:53:26:ab:79:56:
65:8d:a2:44:d7:b4:62:d1:8f:b5:ce:88:fb:3f:b9:
0a:7c:69:4e:f5:b7:63:c0:88:45:04:14:53:20:ae:
f5:15:c8:2c:64:11:36:b6:f3:d5:2d:0a:df:dc:f6:
c0:6f:bb:d7:d6:1a:17:9e:06:97:03:24:ec:45:ed:
69:c1:f7:1f:96:9c:24:7e:2c:b9:ac:9b:3f:f9:bb:
4b:55:e9:c5:f6:f3:65:16:1c:fe:27:29:34:e2:72:
5f:4a:f6:5f:78:eb:7b:1c:74:79:d5:8c:70:10:c2:
f2:04:3d:63:09:54:3c:d3:fd:82:37:79:66:57:d3:
7f:18:39:e1:d7:2d:ea:98:92:c9:45:12:4f:0e:d4:
6c:cf:59:50:ce:5c:fc:e0:a6:cd:f7:ff:b9:c8:82:
fa:47:fd:de:27:df:bd:fb:06:18:ea:11:ac:ca:de:
5f:36:5b:c9:d5:22:2d:02:c2:df:8a:f5:d2:02:50:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:AB:57:78:93:87:1B:85:BC:65:21:FF:C8:9E:FD:10:34:8A:DD
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:38:0d:da:e2:db:76:ed:26:ae:c6:27:d4:3a:85:93:e9:f7:
75:01:04:69:b7:8d:52:cc:04:c3:f1:f6:56:57:e5:8e:b1:d2:
24:3e:8b:ba:09:75:ef:ca:e1:a4:8d:4f:6a:75:2a:1f:40:8e:
a0:7c:a3:09:e9:f9:25:cd:ee:95:ce:04:1b:31:7e:27:a1:8d:
f2:47:41:ad:f6:31:26:7c:48:cd:89:f5:18:fd:2e:a6:a0:5c:
02:cf:7e:7a:30:d5:82:62:32:72:8e:89:ec:c6:77:7a:7e:b8:
29:2a:9f:5d:ab:ae:13:4a:9c:52:72:1a:a2:c5:fe:ce:86:e6:
b8:30:61:e2:67:0f:84:31:37:67:63:0e:b1:8a:f0:da:7e:b4:
b9:ab:c4:3a:77:87:3c:8e:fa:a9:83:6a:f3:d5:46:49:a5:81:
ec:84:36:29:bd:de:3e:da:c0:bc:d8:f1:f4:7b:7a:20:c9:df:
6c:10:e4:ac:b0:a6:ef:87:28:31:d6:dd:30:ad:29:14:42:49:
9c:e4:9f:b3:e1:59:6f:29:91:32:6a:e9:4d:c4:ba:3d:03:fd:
17:8a:06:bf:c0:be:d9:d5:41:6c:5a:b0:22:6c:a6:48:28:86:
c5:87:05:3a:d0:db:66:1d:ce:84:7f:ce:64:43:fc:7e:9d:9c:
5b:65:e8:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPmWfVw5RhcRaJHyC7FF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjUwNjE0MDcwMTM1WhcNMjUwNjE1MDcwMTM1WjAzMTEwLwYDVQQD
EygyMmQ4YWI1Nzc4OTM4NzFiODViYzY1MjFmZmM4OWVmZDEwMzQ4YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQBpcqWSxLfwh5VqFGIzKkmCftex
JCBT6PtNYLS7d20ItsajJLs0e8OoLODS0z1QkyJpXXF1GTCHC/A83dvDT1aXpLF/
UyareVZljaJE17Ri0Y+1zoj7P7kKfGlO9bdjwIhFBBRTIK71FcgsZBE2tvPVLQrf
3PbAb7vX1hoXngaXAyTsRe1pwfcflpwkfiy5rJs/+btLVenF9vNlFhz+Jyk04nJf
SvZfeOt7HHR51YxwEMLyBD1jCVQ80/2CN3lmV9N/GDnh1y3qmJLJRRJPDtRsz1lQ
zlz84KbN9/+5yIL6R/3eJ9+9+wYY6hGsyt5fNlvJ1SItAsLfivXSAlB6JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLYq1d4k4cbhbxlIf/Inv0QNIrdMB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzgN2uLb
du0mrsYn1DqFk+n3dQEEabeNUswEw/H2VlfljrHSJD6Lugl178rhpI1PanUqH0CO
oHyjCen5Jc3ulc4EGzF+J6GN8kdBrfYxJnxIzYn1GP0upqBcAs9+ejDVgmIyco6J
7MZ3en64KSqfXauuE0qcUnIaosX+zobmuDBh4mcPhDE3Z2MOsYrw2n60uavEOneH
PI76qYNq89VGSaWB7IQ2Kb3ePtrAvNjx9Ht6IMnfbBDkrLCm74coMdbdMK0pFEJJ
nOSfs+FZbymRMmrpTcS6PQP9F4oGv8C+2dVBbFqwImymSCiGxYcFOtDbZh3OhH/O
ZEP8fp2cW2Xojw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:35 2025 by rpki-client