Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: bQU226wGlKAh6yjENCv60gMqEp4wBl0sWRrNRxJk7K0=
Subject key identifier: CF:30:01:0F:D2:51:F6:B2:7B:8F:59:99:0D:54:81:BA:22:31:85:23
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 019883C2FB37C9DCCFCCFF48AF336D6BC124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0371
Signing time: Thu 07 Aug 2025 09:00:50 +0000
Manifest this update: Thu 07 Aug 2025 09:00:50 +0000
Manifest next update: Fri 08 Aug 2025 09:00:50 +0000
Files and hashes: 1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: 8oxcd+5oDieYtkagRgcnU9U1DIaiissgJMuboS1So8A=)
2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c2:fb:37:c9:dc:cf:cc:ff:48:af:33:6d:6b:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Aug 7 09:00:50 2025 GMT
Not After : Aug 8 09:00:50 2025 GMT
Subject: CN=cf30010fd251f6b27b8f59990d5481ba22318523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:20:98:5f:97:2d:d4:f7:a0:db:1a:a5:8e:
d2:a6:db:99:f0:da:06:c5:55:11:14:1d:d0:40:93:
8c:53:83:a3:01:4b:17:48:c2:f9:31:62:db:7b:ee:
1c:c2:1b:b0:ff:a4:5c:21:f7:de:d3:f4:a9:dc:8b:
7a:0e:e1:27:be:58:cc:80:cc:df:33:d7:bd:c3:1b:
ee:63:f9:0c:e7:36:63:eb:ac:df:b1:b7:3f:f9:22:
a1:52:79:dd:a0:ab:e6:b0:b8:1b:63:e9:c4:5b:43:
22:ac:0f:51:c4:2d:f2:02:30:da:d3:be:d7:cf:34:
f8:80:ec:52:08:cc:c5:e8:bd:05:5b:df:4d:68:eb:
66:1d:f8:24:e5:06:87:09:bf:77:e4:21:0f:23:34:
5b:bd:41:0b:a1:70:e0:19:5d:58:bf:35:67:c7:73:
d9:52:0a:11:73:4c:68:cf:4f:9f:b1:ea:bb:14:cf:
6c:a8:ff:38:91:07:23:49:e4:37:65:91:d5:54:a3:
af:f1:55:11:94:36:ff:cb:53:b0:52:e1:c7:42:98:
57:63:bd:f4:85:df:50:34:e6:72:2b:9b:79:96:c1:
d4:eb:25:57:b5:08:3e:87:3c:dc:83:30:fb:a8:5a:
97:0d:8b:33:4e:85:3e:ff:d5:61:79:cc:fe:35:c8:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:01:0F:D2:51:F6:B2:7B:8F:59:99:0D:54:81:BA:22:31:85:23
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2e:47:ca:07:8a:d7:74:64:a2:8e:7d:0e:b0:fa:39:69:3d:
fd:6d:f2:02:2d:23:82:b3:20:27:5b:6b:e5:7e:4e:59:b2:51:
e5:f9:d1:16:56:f9:73:fa:e2:dd:a2:54:f7:93:92:60:6f:9a:
8a:6d:52:96:c2:0c:15:12:03:b3:1f:0b:ed:ae:36:95:34:e3:
b0:af:53:e6:dc:94:fd:62:46:d2:c5:f8:84:61:20:d8:3c:5e:
96:9e:79:8c:6e:4e:78:b0:09:7e:cd:1b:cc:48:fe:d7:38:09:
5d:20:4a:ac:c0:e4:9c:0b:41:db:6b:70:b3:0e:3e:c2:a0:1d:
1d:71:fc:1f:6b:13:81:28:c4:39:93:e8:c1:35:5d:41:44:39:
45:40:8b:fb:7a:0e:9f:ba:eb:2b:c8:45:5d:47:1e:84:98:83:
a4:ca:69:ed:c7:93:b3:fd:e9:19:6d:53:95:b9:e5:4d:0f:79:
76:9f:99:94:08:dd:e4:79:d7:fd:32:f2:b3:6f:7e:2a:e2:17:
87:54:07:5c:70:8c:68:d4:20:83:78:78:79:f5:e6:c2:9d:1a:
14:38:ce:c6:8b:9f:ef:0d:e2:1b:7b:c9:4d:0d:d5:b0:15:fb:
80:fc:f1:c5:00:80:d1:42:cb:b7:8e:d6:61:93:b0:c5:61:04:
be:02:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:13:04 2025 by rpki-client