Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: 4IZkY23P5dPoQRGIThQL+EmlcoTPVXjSr6z84S1uJlU=
Subject key identifier: 84:62:D7:2F:EF:7C:1D:BB:9B:A9:7A:99:9E:35:2F:D8:A9:12:49:19
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 01976F2CCF5DF754E9794522C4808B6CFE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:01:36 +0000
Manifest this update: Sat 14 Jun 2025 16:01:36 +0000
Manifest next update: Sun 15 Jun 2025 16:01:36 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: jS8WxTUrl/gLsSboyYwCd2bYrpMBPkHVYoXPxwEc6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:cf:5d:f7:54:e9:79:45:22:c4:80:8b:6c:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Jun 14 16:01:36 2025 GMT
Not After : Jun 15 16:01:36 2025 GMT
Subject: CN=8462d72fef7c1dbb9ba97a999e352fd8a9124919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:71:dc:45:70:4b:21:0a:05:8f:c0:d7:06:
3b:af:9a:8e:e4:d8:c3:cc:30:84:fe:27:71:c3:d0:
2c:7a:16:2f:ef:60:ce:94:19:b3:7e:b1:ac:2b:8b:
b1:9c:d1:7c:9d:22:f6:5c:14:23:46:4c:54:f6:96:
25:b4:eb:d7:7d:e7:c0:de:0c:1e:81:11:a3:ea:51:
44:a2:7d:03:25:3d:80:cf:89:aa:05:72:2b:a6:57:
33:9e:03:c2:d0:77:1f:87:a1:f4:ce:97:d5:82:b5:
ca:c2:06:ee:e5:1d:65:a3:c1:31:3d:70:bc:9d:f5:
12:1a:fe:84:23:70:62:31:d9:69:32:51:c4:9d:ed:
fc:36:80:82:6b:54:f1:17:e9:47:ea:dd:6c:e6:7a:
c5:c2:67:b8:3b:c7:ed:42:bf:d7:18:a6:75:11:d9:
de:9d:a6:f4:1c:f1:c0:05:2e:f0:9b:83:25:6b:1b:
9b:a5:94:7d:25:41:20:ec:7b:05:53:42:97:29:05:
b4:a9:ee:ee:f0:ee:1c:91:26:f1:b6:8e:68:89:2d:
f2:ca:e8:89:f8:57:cb:c8:dc:c6:65:91:ec:32:52:
4a:48:c8:ed:cf:3c:a4:61:ed:48:a5:38:e7:4f:e4:
2c:aa:24:57:b0:a6:86:43:c7:0c:92:31:f5:e3:17:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:D7:2F:EF:7C:1D:BB:9B:A9:7A:99:9E:35:2F:D8:A9:12:49:19
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c2:b9:a2:16:f3:3e:b8:01:ca:69:68:ed:f8:4c:38:fd:ad:
9d:4e:94:98:fd:c3:22:c2:bd:5b:d5:d2:3f:99:88:61:e0:48:
f6:78:66:db:cc:90:0b:ec:3b:cf:99:3b:97:0a:03:a7:57:17:
d5:8d:6f:e3:c1:b5:5f:05:5d:d5:77:e0:4d:23:72:7a:6e:f9:
f5:fb:28:bb:1b:8f:eb:1f:bf:b8:a3:9c:08:89:21:0a:4d:fe:
e1:75:00:94:11:9d:9a:ef:da:e3:b0:b9:55:b3:e7:70:7d:25:
d2:0b:a4:f9:9c:7e:cf:69:88:fc:40:c6:4c:00:cb:5d:95:ce:
93:0e:01:1d:5e:4f:d4:aa:69:20:01:fb:97:a0:73:03:02:f9:
d8:43:31:24:f1:ca:c5:30:20:20:3a:47:e4:dc:6b:31:81:4e:
9d:d3:09:f0:46:b7:82:88:96:da:06:b6:41:7f:0f:36:26:34:
71:07:59:7e:9b:c2:75:88:90:ac:f1:69:c4:1e:e4:59:f8:32:
fb:91:71:a3:8e:ee:13:7f:fa:a3:a8:a7:3e:14:80:7d:bf:1d:
38:58:cf:b9:31:29:e4:1f:85:ac:89:11:a9:94:29:99:7f:98:
f7:13:ab:57:60:65:6b:14:d2:4d:59:82:28:77:e2:a8:2b:9f:
42:20:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:00:49 2025 by rpki-client