Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier: tzdoWswYwJGNJY05xvBlQx0sQ1CwiSoflqeVbOc6Is4=
Subject key identifier: 89:C4:81:67:52:B7:BF:C6:64:BB:C7:11:B9:06:5A:FA:11:83:08:DD
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 0198936D67B2D0CADF87EDDFD9A594D373A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number: 013D
Signing time: Sun 10 Aug 2025 10:01:17 +0000
Manifest this update: Sun 10 Aug 2025 10:01:17 +0000
Manifest next update: Mon 11 Aug 2025 10:01:17 +0000
Files and hashes: 1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: EHIH8cvhZ8n0fAJa4xN3DQxamnQZ9V9UvI6i0Tdp2eE=)
2: tIh3EbNG8PyhR2bhdKGu98lXfi0.roa (hash: WvckFFiPzlkbuyQKqzi40xspGv9L4xehhqGGvB5LMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:67:b2:d0:ca:df:87:ed:df:d9:a5:94:d3:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Aug 10 10:01:17 2025 GMT
Not After : Aug 11 10:01:17 2025 GMT
Subject: CN=89c4816752b7bfc664bbc711b9065afa118308dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:66:2b:8d:83:ee:16:14:a7:ce:68:e0:71:
b1:14:9c:1b:c3:92:4e:8f:63:38:83:8f:20:c1:0c:
24:e0:df:ac:5e:9e:db:2d:f4:93:44:2b:56:21:0c:
e4:57:2b:df:98:7e:f1:b0:ad:75:4f:f1:37:dc:d5:
ab:de:29:0b:89:da:a7:33:6c:cc:ad:fd:2d:84:11:
f4:58:ca:f2:61:4e:38:51:a4:c6:fa:49:60:7f:46:
07:90:a2:d5:79:6a:9e:1d:33:a0:60:2b:5f:51:6e:
11:e6:2f:8a:a5:a4:ad:4e:ba:ff:29:0b:a6:44:71:
4d:83:24:a4:7a:2c:c5:bf:6c:05:12:f7:9b:4a:88:
6b:27:11:2f:db:59:a7:54:c3:16:76:24:56:91:8b:
08:f2:f1:ea:c2:ce:9d:66:d4:ca:85:2f:d9:2e:ff:
c9:98:69:28:0e:bd:ec:c3:0a:7f:7a:07:e8:63:c8:
6c:81:68:b7:5d:9a:80:79:51:c4:fa:07:0c:ab:26:
1a:8c:fc:63:6e:83:1a:f2:a2:d7:79:8a:0f:bf:9e:
6c:ef:a3:3c:c5:30:b1:ae:b9:8e:23:48:5a:3b:be:
fa:94:c7:10:06:bb:86:0b:9a:fa:b1:48:b5:77:74:
bc:43:58:74:0f:2e:9d:82:2e:e6:75:62:b8:59:b3:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:81:67:52:B7:BF:C6:64:BB:C7:11:B9:06:5A:FA:11:83:08:DD
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d2:59:db:aa:1a:9a:70:77:19:ac:50:68:5b:7c:1d:a2:ca:
d9:90:ad:55:af:70:67:44:4d:cc:4a:6c:5f:01:b1:c2:28:94:
23:2c:dc:df:c5:06:87:23:0f:5c:00:b2:86:ff:cb:d4:57:3c:
23:e0:c6:40:4e:49:e3:28:a9:9b:b9:e6:1c:56:87:02:63:78:
12:99:fa:63:b3:7b:d5:2d:eb:34:65:2b:be:ef:c4:48:bc:25:
43:53:6a:30:b5:de:6c:46:6a:b5:a2:23:c2:22:f3:e3:b3:9a:
36:c3:71:bb:15:38:f1:42:b2:c7:54:04:b3:05:f3:90:10:11:
0d:0e:80:10:6f:0d:22:32:0c:8c:10:eb:5d:a6:25:ba:fe:a9:
20:a6:14:3e:74:a9:c5:1d:e2:c9:0b:21:ed:64:5b:4c:50:3f:
c5:d6:95:f5:5a:da:da:d0:04:fe:a5:5c:04:16:c3:00:0e:0b:
31:e7:f2:1d:51:b1:4c:82:77:20:af:8d:11:0d:cb:13:c2:dd:
7a:85:eb:50:5e:99:5e:5d:62:81:b9:0f:f9:ee:3a:b2:9e:71:
d1:2c:09:12:33:9f:58:97:ed:22:fe:0f:da:be:31:bd:9b:4d:
1f:80:ed:5b:36:82:6b:4e:cd:ad:5d:12:39:7e:4d:92:9a:22:
56:aa:15:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbWey0Mrfh+3f2aWU03OnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWMxZmFhOTc4M2RmYWIyYjdhNTNkYTNmYjBmZGVmNGNj
ZmVhZTUwHhcNMjUwODEwMTAwMTE3WhcNMjUwODExMTAwMTE3WjAzMTEwLwYDVQQD
Eyg4OWM0ODE2NzUyYjdiZmM2NjRiYmM3MTFiOTA2NWFmYTExODMwOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0xmK42D7hYUp85o4HGxFJwbw5JO
j2M4g48gwQwk4N+sXp7bLfSTRCtWIQzkVyvfmH7xsK11T/E33NWr3ikLidqnM2zM
rf0thBH0WMryYU44UaTG+klgf0YHkKLVeWqeHTOgYCtfUW4R5i+KpaStTrr/KQum
RHFNgySkeizFv2wFEvebSohrJxEv21mnVMMWdiRWkYsI8vHqws6dZtTKhS/ZLv/J
mGkoDr3swwp/egfoY8hsgWi3XZqAeVHE+gcMqyYajPxjboMa8qLXeYoPv55s76M8
xTCxrrmOI0haO776lMcQBruGC5r6sUi1d3S8Q1h0Dy6dgi7mdWK4WbORSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInEgWdSt7/GZLvHEbkGWvoRgwjdMB8GA1UdIwQY
MBaAFGqcH6qXg9+rK3pT2j+w/e9Mz+rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYt
ZDJiYjdjNzk1YTg2LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYtZDJiYjdjNzk1YTg2
LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9JZ26oa
mnB3GaxQaFt8HaLK2ZCtVa9wZ0RNzEpsXwGxwiiUIyzc38UGhyMPXACyhv/L1Fc8
I+DGQE5J4yipm7nmHFaHAmN4Epn6Y7N71S3rNGUrvu/ESLwlQ1NqMLXebEZqtaIj
wiLz47OaNsNxuxU48UKyx1QEswXzkBARDQ6AEG8NIjIMjBDrXaYluv6pIKYUPnSp
xR3iyQsh7WRbTFA/xdaV9Vra2tAE/qVcBBbDAA4LMefyHVGxTIJ3IK+NEQ3LE8Ld
eoXrUF6ZXl1igbkP+e46sp5x0SwJEjOfWJftIv4P2r4xvZtNH4DtWzaCa07NrV0S
OX5NkpoiVqoVfw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:30 2025 by rpki-client