Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: +qgO2pnLwBJ99ylZpnbLLl8jMPE/sMME2ROr74c6K4s=
Subject key identifier: E2:17:36:E8:D4:26:73:56:21:DD:E3:F9:69:C8:1A:03:F6:72:D4:90
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 01987B9D8A8327FE4A9371F5EA330BB273FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 19:02:58 +0000
Manifest this update: Tue 05 Aug 2025 19:02:58 +0000
Manifest next update: Wed 06 Aug 2025 19:02:58 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: 9zTZ2M5xSFGV3QX3VEA16EuYMVVJh5pOLu6J2CIEdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:8a:83:27:fe:4a:93:71:f5:ea:33:0b:b2:73:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Aug 5 19:02:58 2025 GMT
Not After : Aug 6 19:02:58 2025 GMT
Subject: CN=e21736e8d426735621dde3f969c81a03f672d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:6b:06:3f:61:f3:a9:3c:1b:da:62:de:65:
62:6b:81:ca:8a:20:87:b4:88:a8:59:63:89:2b:c4:
5d:17:cf:c9:29:c3:d6:fc:b3:d9:0f:be:9e:58:f8:
f1:aa:10:92:05:c7:11:74:f6:52:84:c1:b4:53:25:
5d:5f:aa:71:a1:af:34:d8:5c:a5:97:3b:88:73:56:
0b:19:3e:1c:8f:b7:47:87:72:66:a8:6b:fb:3f:1c:
42:f1:ca:d4:1c:24:7f:2d:2f:45:6c:94:18:c2:12:
50:10:72:c6:86:dc:26:6d:e9:70:6e:56:50:6b:cf:
e2:06:de:cc:4b:8d:d9:10:32:bd:70:c4:94:cd:30:
36:8a:12:cb:71:27:3b:65:d3:75:64:5b:52:64:5f:
08:bc:5c:2d:e5:92:57:1f:83:82:ff:65:98:bc:c2:
71:45:be:1c:4b:a6:da:31:e1:42:9a:be:f1:b9:9a:
fe:7d:3a:98:be:4f:ab:e4:ce:ef:5a:52:e5:2b:ca:
6a:47:95:6d:37:c4:9f:d3:9d:40:36:49:5c:6c:1c:
c9:62:b5:42:50:d9:5d:ec:17:40:5d:3a:7b:37:74:
73:ae:15:3f:e0:59:1a:69:0f:db:6e:76:6f:a7:99:
d6:9a:f0:aa:19:bf:be:48:fe:43:67:c9:d6:2a:66:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:17:36:E8:D4:26:73:56:21:DD:E3:F9:69:C8:1A:03:F6:72:D4:90
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:8f:8f:b9:a4:92:e6:fb:57:13:5f:d8:fc:70:a7:33:e9:
6c:6f:28:47:90:42:fb:14:28:dd:34:6c:10:6b:fa:0d:ca:0f:
90:5e:22:e0:0e:11:06:6a:42:c7:c4:7a:f8:27:c9:05:6b:e2:
03:9a:de:a5:b8:01:39:a6:98:f0:49:f5:35:93:d2:ea:ac:0f:
08:6e:77:ed:0c:5d:1a:05:d0:fe:cd:68:23:04:29:c6:d4:3e:
d3:23:1e:61:b7:f4:fc:3b:34:41:8a:7d:88:64:81:3b:d8:18:
99:4d:e8:72:d8:2a:19:5e:b4:f0:17:3e:34:e1:d2:48:01:45:
aa:69:95:e2:48:2b:df:57:68:f5:af:bf:1c:3c:bf:c7:66:ed:
77:ef:f1:2d:f1:48:fc:0b:d1:66:1f:08:ea:b3:5d:9e:88:37:
49:50:00:c9:3d:81:a4:08:30:f6:8f:c2:39:4f:64:1f:2f:9d:
7c:96:6d:60:db:50:ab:41:1b:4b:5c:e9:e3:2d:2b:dc:71:27:
f4:f5:96:5a:e9:96:c0:1e:ff:1e:15:72:3e:4e:b5:98:41:7f:
76:07:c3:2e:a5:03:12:6e:db:a9:70:de:bd:95:bd:16:de:c5:
e7:ff:1a:f3:61:cf:74:49:7f:eb:07:ec:68:eb:77:50:7c:1e:
50:c8:47:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nYqDJ/5Kk3H16jMLsnP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZThhMjAyOTc4Njg5YmQ4ZDVmNWU1N2ZjYzFiZmViODY3
YzMyMmEwHhcNMjUwODA1MTkwMjU4WhcNMjUwODA2MTkwMjU4WjAzMTEwLwYDVQQD
EyhlMjE3MzZlOGQ0MjY3MzU2MjFkZGUzZjk2OWM4MWEwM2Y2NzJkNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QNrBj9h86k8G9pi3mVia4HKiiCH
tIioWWOJK8RdF8/JKcPW/LPZD76eWPjxqhCSBccRdPZShMG0UyVdX6pxoa802Fyl
lzuIc1YLGT4cj7dHh3JmqGv7PxxC8crUHCR/LS9FbJQYwhJQEHLGhtwmbelwblZQ
a8/iBt7MS43ZEDK9cMSUzTA2ihLLcSc7ZdN1ZFtSZF8IvFwt5ZJXH4OC/2WYvMJx
Rb4cS6baMeFCmr7xuZr+fTqYvk+r5M7vWlLlK8pqR5VtN8Sf051ANklcbBzJYrVC
UNld7BdAXTp7N3RzrhU/4FkaaQ/bbnZvp5nWmvCqGb++SP5DZ8nWKma47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIXNujUJnNWId3j+WnIGgP2ctSQMB8GA1UdIwQY
MBaAFK/oogKXhom9jV9eV/zBv+uGfDIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTA3YWEtMmFjZC00ZGM3LTlmMGQt
ZDdiMDg5NDhmN2M3LzEvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOTA3YWEtMmFjZC00ZGM3LTlmMGQtZDdiMDg5NDhmN2M3
LzEvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfOPj7mk
kub7VxNf2PxwpzPpbG8oR5BC+xQo3TRsEGv6DcoPkF4i4A4RBmpCx8R6+CfJBWvi
A5repbgBOaaY8En1NZPS6qwPCG537QxdGgXQ/s1oIwQpxtQ+0yMeYbf0/Ds0QYp9
iGSBO9gYmU3octgqGV608Bc+NOHSSAFFqmmV4kgr31do9a+/HDy/x2btd+/xLfFI
/AvRZh8I6rNdnog3SVAAyT2BpAgw9o/COU9kHy+dfJZtYNtQq0EbS1zp4y0r3HEn
9PWWWumWwB7/HhVyPk61mEF/dgfDLqUDEm7bqXDevZW9Ft7F5/8a82HPdEl/6wfs
aOt3UHweUMhHHQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:31 2025 by rpki-client