Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: HUOPnHWfwLOT6EJ4rJimkbUAOIMFtseDsF+ht730GUI=
Subject key identifier: 28:6A:68:BC:02:1C:FA:BB:98:0D:78:62:12:0B:27:52:26:00:8C:A4
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019A4EF5A7681C871569F01261FD04AF63E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: 5EXWkP762Aon9viRbYz51eoak4vBn2LrgvkC7TO3Zy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a7:68:1c:87:15:69:f0:12:61:fd:04:af:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=286a68bc021cfabb980d7862120b275226008ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:2b:4d:49:dc:01:c1:19:09:41:fd:d4:0c:
93:e6:69:c9:06:9b:81:85:e7:50:3f:4d:4a:9f:9e:
d3:17:63:c1:f8:69:e2:ec:3e:d4:d7:df:a6:71:d7:
f8:7d:ea:16:a9:37:10:fd:31:0a:62:11:2f:1d:e1:
76:3d:9e:8d:b2:83:e0:01:75:fb:5d:27:2f:ac:f4:
a7:0c:5e:2f:21:08:31:e1:2a:2c:d9:c3:4e:03:b2:
af:2e:53:f2:1f:13:7f:92:b3:b9:73:8f:77:54:d4:
a1:50:3b:46:b0:ba:81:e7:f8:f9:68:ed:d4:90:79:
89:fd:30:48:c4:94:dc:72:e8:e8:64:fd:52:bf:1c:
34:f3:89:cb:df:1a:f7:c1:d3:bc:ba:80:9d:e1:05:
08:a6:f8:86:08:b8:cf:0c:95:90:03:5b:07:ac:b2:
c7:24:59:e0:8e:53:e2:37:c3:d0:4c:22:9a:0f:87:
dd:8c:97:99:d1:96:de:eb:33:ad:a8:07:f5:93:f8:
7e:f5:a6:a6:eb:f4:fc:4b:18:31:98:ff:e4:5e:9e:
3b:94:21:78:c5:47:5a:fb:8d:6f:ba:7a:01:78:6e:
87:9c:4b:b9:9f:c5:28:ed:f6:0d:cf:e6:df:aa:84:
15:e1:ab:d2:31:f6:c6:9f:f3:93:2e:9e:d8:b5:17:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:68:BC:02:1C:FA:BB:98:0D:78:62:12:0B:27:52:26:00:8C:A4
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:b5:27:17:9f:84:24:e1:96:8b:82:fc:ae:d1:a4:86:6f:
0c:8b:d6:32:91:2c:cf:4d:57:33:98:fd:86:66:32:30:a1:dc:
da:0d:fc:5b:a7:e5:c7:64:bb:6f:c2:ec:11:92:ad:1b:d2:3c:
85:c7:46:4f:89:8a:ec:e8:77:25:75:dd:43:52:37:ab:91:d4:
80:7d:c9:00:b9:5a:eb:aa:f5:d8:0e:cc:15:6e:b1:fd:31:db:
a8:08:e8:d2:20:7a:fb:78:a5:e9:ee:c8:ca:bb:97:63:61:91:
5a:f6:9c:b0:35:57:ff:c1:b7:f2:5c:a8:7c:c6:ae:49:29:05:
58:c9:8c:c5:70:f0:80:a8:bb:ae:fc:89:fd:0f:2d:ad:c4:12:
9e:41:0b:23:ea:0f:ae:12:f4:34:e9:39:48:01:d0:fb:27:d7:
3b:6d:ec:fb:39:c2:5d:73:16:38:8c:5a:c7:15:ef:33:c1:db:
f8:5e:48:3a:4b:a0:a4:ee:58:ba:b2:16:cd:67:b2:da:48:43:
9e:78:4d:eb:cb:a0:88:e6:86:06:1c:6a:f6:41:e1:16:e8:9e:
6d:da:22:b7:fe:c9:a5:7b:f0:e3:1d:18:b6:60:65:09:36:d8:
42:68:f0:4b:a3:4c:a0:e6:54:94:28:d8:b1:9a:0a:d0:f7:c6:
f7:3f:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:27 2025 by rpki-client