Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: 1lySNARrVw7XJId7kpkjJLmSyDJySYwj8tdvez5/32M=
Subject key identifier: 29:9D:3E:38:8A:13:65:40:A4:2A:6F:C0:6C:96:88:A7:EC:E0:DE:68
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 01987418BF113660EB5B5170B671E7F8E967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0D07
Signing time: Mon 04 Aug 2025 08:00:35 +0000
Manifest this update: Mon 04 Aug 2025 08:00:35 +0000
Manifest next update: Tue 05 Aug 2025 08:00:35 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: PZwFK85r2EwtI1YkAIYuLMNliapZO9LEMBgMdFxUlaY=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:bf:11:36:60:eb:5b:51:70:b6:71:e7:f8:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Aug 4 08:00:35 2025 GMT
Not After : Aug 5 08:00:35 2025 GMT
Subject: CN=299d3e388a136540a42a6fc06c9688a7ece0de68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:2b:34:7e:44:4b:96:6a:38:10:49:32:7d:
fc:d0:56:ba:44:25:fe:cc:13:5f:31:53:80:c9:82:
e1:47:79:1a:cc:1b:60:0b:aa:12:85:30:78:18:51:
35:aa:8d:c8:97:c4:b7:3f:b6:2c:5f:29:4b:18:cd:
50:e7:4e:5b:94:c6:1a:a4:d8:d4:5f:94:1b:84:47:
20:c9:14:be:db:6b:c3:a8:d1:66:65:ec:c9:50:f5:
94:f7:24:37:0b:b6:c2:f8:44:a6:1c:b8:28:53:7c:
0a:9f:1c:01:96:61:31:02:be:f8:88:20:bf:e5:01:
ad:17:03:07:78:72:fc:c7:69:f1:ac:a0:a5:f9:2e:
f4:43:23:0c:e0:4a:d8:68:39:e1:77:ab:c4:eb:c9:
1c:56:24:6e:a4:51:67:c5:8d:81:c1:3f:81:29:80:
d3:40:c6:e9:a2:aa:30:42:57:0b:1f:93:d1:2e:d6:
fa:ed:9c:90:2d:77:05:11:5f:a9:64:56:54:13:01:
39:9c:7f:39:44:fc:22:9e:b3:a3:bf:a1:1b:b5:88:
a3:b0:7e:a3:1a:73:dd:e2:a0:43:83:da:55:b9:54:
62:52:de:15:b3:48:25:75:2d:87:5f:b5:35:6c:39:
1c:54:ef:55:86:8f:8e:49:ac:99:a1:47:c4:70:ef:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:3E:38:8A:13:65:40:A4:2A:6F:C0:6C:96:88:A7:EC:E0:DE:68
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:f7:50:a2:5f:3c:e9:e6:55:72:4f:c4:5b:c3:27:77:8c:
6d:8e:c0:f5:bb:ae:0a:9c:c9:2f:2c:73:44:dc:48:c7:57:bf:
ea:e8:f9:31:57:6c:60:78:4f:4c:03:1b:d8:73:20:ff:56:1e:
31:dc:7b:6f:36:30:85:48:7b:c1:2b:e1:11:2a:6d:44:55:05:
5d:f4:2f:29:98:0e:bf:c9:e7:11:cc:f9:36:87:48:36:0a:cf:
5c:62:4a:fe:05:b1:29:51:98:19:f9:c9:e5:18:83:a4:d7:af:
3c:79:66:96:80:bc:f6:21:70:e8:1c:b6:f2:74:40:fa:03:02:
5e:b2:fc:c1:38:43:68:8a:e6:5e:ca:94:1b:83:bb:04:0b:32:
62:da:89:c0:7c:02:e8:af:75:de:15:94:6b:d6:a3:d0:0c:8a:
9f:98:d1:28:bd:01:7a:52:d6:50:5b:6a:e1:61:08:5e:b3:b3:
03:13:a4:2a:a5:37:85:9d:9f:8e:ec:82:d0:6f:b7:e4:3a:45:
4a:02:fa:22:6e:72:b4:fe:86:a7:f0:31:c6:f9:86:bd:6e:7a:
15:a1:dc:28:eb:a1:3e:4f:32:88:2a:80:51:32:da:9c:6d:0c:
6f:17:da:96:a8:cb:66:f7:8e:ab:2c:90:8e:df:88:7d:ad:b7:
b2:25:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:08 2025 by rpki-client