
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: DyuVXRU/LGvnOcraauxzecZ4GWqqA0wS4eov456XBzM=
Subject key identifier: 15:9F:EF:9C:40:BF:85:72:2F:9C:07:26:EB:2A:4A:74:DA:17:3A:E5
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019873E3A645AD4AF77C67A2EA06BF6280BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:02:35 +0000
Manifest this update: Mon 04 Aug 2025 07:02:35 +0000
Manifest next update: Tue 05 Aug 2025 07:02:35 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: h0wWChbQ5QmNJE86gz0RyQMVijk2dcIuMigSCygbsTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a6:45:ad:4a:f7:7c:67:a2:ea:06:bf:62:80:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Aug 4 07:02:35 2025 GMT
Not After : Aug 5 07:02:35 2025 GMT
Subject: CN=159fef9c40bf85722f9c0726eb2a4a74da173ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:ba:29:df:4b:5d:81:87:5a:c5:41:5d:17:
01:70:a0:5d:48:4b:01:21:ca:11:d8:a5:80:69:94:
7c:49:24:3e:96:00:ad:af:ca:9c:d5:3e:e2:a7:83:
f3:37:5c:7c:bf:ed:f5:6f:f5:49:f1:67:1d:4f:be:
66:50:b3:9d:d8:0c:90:8c:ab:ec:13:1d:f7:58:59:
0c:39:89:93:63:f6:f1:25:ce:50:29:54:2c:9b:df:
bc:a5:b0:db:f3:6b:c4:04:17:6f:a0:90:d8:f5:5f:
22:c1:95:6c:c1:16:e1:91:68:07:97:00:e3:f9:8e:
cb:45:21:a9:5f:13:a7:ad:01:d1:ba:9a:47:c5:d8:
8e:9f:6e:c0:e9:59:87:07:94:7c:9d:65:44:9c:da:
42:c1:ef:a8:01:96:53:39:06:da:d9:8c:10:7c:e3:
c0:ad:c3:99:b6:f1:92:18:bf:c7:ec:77:3d:8d:15:
da:fa:d1:10:a9:3c:ec:dc:af:96:9c:6c:fa:d0:d0:
77:59:b6:29:c4:d5:57:5f:9d:fd:62:38:f8:f2:b6:
47:b2:e7:54:f9:11:b7:a8:e4:5a:dc:50:01:76:6e:
21:0e:25:42:51:0d:2e:4c:35:e0:89:8a:0b:03:94:
83:e2:8f:98:1d:c3:5b:a3:b4:c9:d6:19:2e:a8:63:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9F:EF:9C:40:BF:85:72:2F:9C:07:26:EB:2A:4A:74:DA:17:3A:E5
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c1:a0:61:b3:a1:1e:34:f4:1f:93:84:ca:39:c2:04:30:84:
ff:e0:ce:e5:52:3c:71:5a:0e:cf:38:f9:6e:c4:1a:8c:96:42:
87:37:a8:d2:3a:e9:24:ab:fd:d9:0e:c4:2d:22:1c:b5:5a:98:
29:94:46:48:24:83:2c:3a:53:97:83:4d:f6:2d:dd:94:be:0d:
34:a6:8b:67:98:ec:c1:a3:4e:1b:a3:91:4d:b9:80:ab:b7:08:
00:67:7d:ee:cf:c7:b1:0b:74:89:58:63:99:32:86:81:c9:08:
5b:25:6a:06:60:0a:8a:ac:61:9c:7f:19:98:49:46:fc:82:60:
a4:69:98:15:1b:a1:2a:31:63:41:e1:9e:5f:42:98:a5:39:33:
28:33:99:79:52:a4:6b:1b:d0:2f:09:e8:ce:c0:1f:3f:47:d6:
23:fa:6a:4d:b0:db:16:0e:49:ef:bd:65:cc:92:4f:24:bf:f6:
3e:ce:a0:a9:55:a3:00:61:65:dc:d0:bb:6b:b4:ff:a0:03:70:
7f:cc:7c:c5:7c:c9:60:e8:3f:41:ba:d7:8a:4c:48:e0:5d:ea:
97:73:b7:7c:4b:00:94:4c:d9:36:68:93:85:62:ab:af:7c:c3:
e9:3d:be:a8:ef:df:29:9f:d3:21:c6:c7:7f:c2:58:6b:58:ee:
38:7a:d7:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz46ZFrUr3fGei6ga/YoC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjUwODA0MDcwMjM1WhcNMjUwODA1MDcwMjM1WjAzMTEwLwYDVQQD
EygxNTlmZWY5YzQwYmY4NTcyMmY5YzA3MjZlYjJhNGE3NGRhMTczYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLm6Kd9LXYGHWsVBXRcBcKBdSEsB
IcoR2KWAaZR8SSQ+lgCtr8qc1T7ip4PzN1x8v+31b/VJ8WcdT75mULOd2AyQjKvs
Ex33WFkMOYmTY/bxJc5QKVQsm9+8pbDb82vEBBdvoJDY9V8iwZVswRbhkWgHlwDj
+Y7LRSGpXxOnrQHRuppHxdiOn27A6VmHB5R8nWVEnNpCwe+oAZZTOQba2YwQfOPA
rcOZtvGSGL/H7Hc9jRXa+tEQqTzs3K+WnGz60NB3WbYpxNVXX539Yjj48rZHsudU
+RG3qORa3FABdm4hDiVCUQ0uTDXgiYoLA5SD4o+YHcNbo7TJ1hkuqGMqEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWf75xAv4VyL5wHJusqSnTaFzrlMB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzsGgYbOh
HjT0H5OEyjnCBDCE/+DO5VI8cVoOzzj5bsQajJZChzeo0jrpJKv92Q7ELSIctVqY
KZRGSCSDLDpTl4NN9i3dlL4NNKaLZ5jswaNOG6ORTbmAq7cIAGd97s/HsQt0iVhj
mTKGgckIWyVqBmAKiqxhnH8ZmElG/IJgpGmYFRuhKjFjQeGeX0KYpTkzKDOZeVKk
axvQLwnozsAfP0fWI/pqTbDbFg5J771lzJJPJL/2Ps6gqVWjAGFl3NC7a7T/oANw
f8x8xXzJYOg/QbrXikxI4F3ql3O3fEsAlEzZNmiThWKrr3zD6T2+qO/fKZ/TIcbH
f8JYa1juOHrXZA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:49 2025 by rpki-client