Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File: APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier: SZ4DM7LEXab27KP7gxz9XJg48pWPa8WPU+2dzTfEOnM=
Subject key identifier: A8:A6:48:9B:44:A8:D4:4E:C5:F6:81:4D:B9:29:BB:FD:20:F6:24:17
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 01987298878FF9DDBEA05F629187DD1AEFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number: 156B
Signing time: Mon 04 Aug 2025 01:00:55 +0000
Manifest this update: Mon 04 Aug 2025 01:00:55 +0000
Manifest next update: Tue 05 Aug 2025 01:00:55 +0000
Files and hashes: 1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: O7h540/PPeCzAyNIo1RNVE84/Ar5XUY7qESJP5tAHZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:87:8f:f9:dd:be:a0:5f:62:91:87:dd:1a:ef:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: Aug 4 01:00:55 2025 GMT
Not After : Aug 5 01:00:55 2025 GMT
Subject: CN=a8a6489b44a8d44ec5f6814db929bbfd20f62417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:66:c8:15:58:cd:2a:68:4a:21:1e:97:7e:
a1:9c:51:23:4c:5c:08:9e:de:ec:9c:ac:b1:7e:35:
fc:b2:2f:c3:e9:2e:c7:e3:ac:6b:de:1a:37:ca:9a:
e4:f9:db:9c:36:8b:9a:80:ac:86:47:7f:ee:2e:d4:
f1:ca:17:4a:5f:f9:c7:f4:dc:35:1c:88:88:6d:4e:
9a:5e:c4:63:4f:e9:48:af:b1:50:12:75:2e:d7:c2:
17:ac:44:a3:63:8b:56:67:6c:fe:13:12:f8:07:34:
94:fe:67:48:38:8d:1d:99:b1:25:17:f4:80:6d:45:
23:2e:77:61:c9:21:15:2a:08:71:0e:4b:20:29:6e:
ed:e1:b3:eb:ad:f7:5b:84:b3:87:8b:cc:80:5c:25:
c9:fb:50:38:b7:a8:a4:96:12:c6:e8:7a:bb:4d:79:
3c:03:8b:70:0c:6d:1f:d3:a9:e0:f2:11:5d:17:f2:
cd:89:11:69:40:be:31:74:e3:74:d9:3c:db:6f:ba:
03:6b:61:ab:53:6c:9b:6b:63:85:26:04:65:44:24:
da:d8:f4:13:7b:0a:0c:df:89:98:54:b3:ad:26:52:
2f:03:5b:14:9f:97:48:52:f6:87:80:f8:d0:cd:95:
ba:2c:6e:58:94:3d:78:9f:5a:41:fa:48:67:a9:9f:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:48:9B:44:A8:D4:4E:C5:F6:81:4D:B9:29:BB:FD:20:F6:24:17
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:00:82:76:0d:8b:75:c8:a8:12:6e:2d:3d:83:ee:42:3f:90:
71:60:99:43:09:b6:be:89:48:b5:c7:23:1d:9f:ff:35:10:0c:
a9:93:e3:ce:4b:b5:eb:da:2f:6a:95:b2:39:ed:7e:11:4e:31:
78:cd:1f:d7:bb:9f:34:fd:e0:20:ad:6b:30:58:5a:dd:27:57:
ee:f1:da:85:6d:4a:2f:f6:65:e8:34:1f:6a:e7:07:26:bf:26:
be:42:6e:52:02:4e:f4:30:96:d9:76:7a:bc:f9:66:a4:75:b5:
79:d2:d1:14:4f:bf:52:be:ca:51:81:58:8f:4a:de:cf:ec:06:
60:67:68:eb:fe:d5:7c:9b:ab:88:f7:c1:4a:89:62:c2:2c:c1:
2d:ac:84:cf:2a:d5:e4:6d:79:58:71:3e:88:13:7e:62:9b:f5:
7d:33:e4:d8:f2:74:89:64:5f:fb:fb:3c:f6:de:f1:4b:e9:1a:
43:16:3a:ae:8b:39:ff:cd:28:d0:c2:03:33:ed:a5:6a:88:7e:
d3:68:be:a2:e3:aa:48:c2:19:e3:65:d8:70:4b:60:db:ea:45:
75:e5:55:be:56:84:fd:28:39:57:fe:b0:c7:32:00:71:66:8c:
22:ee:46:1c:54:bb:7e:4b:a1:9c:59:74:41:70:76:97:d6:35:
42:b6:20:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:55 2025 by rpki-client