Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File: APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier: 1I0p9Y8fFusmVPNUotLRsZZMAwztZfuV6wxLV/5d5x0=
Subject key identifier: 71:06:48:AA:01:0F:BE:DF:30:59:33:E1:DE:A9:92:14:11:56:21:9B
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 01976FD0B2F154A37EDC425FC1C1F944B445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number: 14E5
Signing time: Sat 14 Jun 2025 19:00:37 +0000
Manifest this update: Sat 14 Jun 2025 19:00:37 +0000
Manifest next update: Sun 15 Jun 2025 19:00:37 +0000
Files and hashes: 1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: nxDuY4mvTmy13RUM/5fMDT+MgDMw1bye86+KnMmdY+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:b2:f1:54:a3:7e:dc:42:5f:c1:c1:f9:44:b4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: Jun 14 19:00:37 2025 GMT
Not After : Jun 15 19:00:37 2025 GMT
Subject: CN=710648aa010fbedf305933e1dea992141156219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:71:10:8f:73:f9:5a:04:68:53:00:21:83:
a0:16:9c:c5:da:db:16:56:53:ce:d0:7f:6e:30:a6:
33:9a:63:61:2d:4c:34:77:b0:e7:94:c2:45:3f:ae:
2a:57:d2:c4:a8:9e:ba:0c:b3:63:5e:b5:fc:6f:c2:
5b:14:fb:a1:c7:d1:49:55:a0:e1:95:80:a7:88:0a:
6b:46:d6:f9:0a:23:03:d4:38:d3:4c:d0:93:d1:fb:
0e:92:4a:80:50:9e:4f:71:6c:4c:2c:e8:22:7c:b2:
92:75:28:64:cb:ba:77:e3:e8:fe:4b:88:7b:3f:b3:
ee:86:42:8a:2d:3d:33:03:9e:52:b0:92:db:6d:56:
31:b9:0d:df:ab:b6:bf:ad:3e:e0:24:11:6f:1f:12:
8d:9a:c3:d0:ce:1d:78:e0:e4:18:32:33:18:b6:b9:
f3:72:f1:43:df:50:7a:01:c9:3d:22:46:ad:62:99:
25:08:00:1d:d5:be:64:08:26:cd:2c:9a:f7:36:21:
d1:8d:b3:0c:47:17:99:c9:8e:d8:02:1b:9c:09:d7:
80:6c:79:f4:4b:1d:42:fc:1c:6c:f6:a1:78:21:e4:
4c:ec:de:1e:fe:e0:be:0a:89:ff:fe:ed:75:8f:84:
56:76:02:fd:a7:86:bf:3f:e9:24:73:02:55:10:e4:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:06:48:AA:01:0F:BE:DF:30:59:33:E1:DE:A9:92:14:11:56:21:9B
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:88:0e:da:01:fc:b2:b9:56:9d:ba:b5:1e:1f:1a:d7:bd:7e:
54:3a:24:c6:8a:65:fa:71:12:6b:6e:cb:00:4f:e6:dd:b1:c2:
28:5a:eb:ae:79:f9:13:32:11:7e:e8:93:31:80:26:40:7a:56:
fd:5c:c7:f2:be:d2:b9:b8:65:dd:a0:b2:ce:10:f6:43:a3:14:
23:de:e7:9d:72:be:85:3b:e5:ff:65:95:53:49:d7:04:95:f4:
9d:d6:38:3d:2e:d1:9b:15:3e:4e:93:9b:99:1c:19:9c:a3:1f:
a3:d5:7a:63:05:ef:e4:3c:99:bb:c7:58:df:fd:8f:26:43:23:
6b:02:a2:59:7b:51:0a:8d:8a:83:e0:b3:2c:e7:0d:78:c1:22:
25:47:f4:10:b4:e8:55:e7:56:3d:d6:f1:a2:ac:0f:02:95:aa:
7b:f7:4e:b0:cb:0d:d1:2a:da:e6:0f:cf:1c:ea:f4:ec:df:56:
be:69:83:23:11:8b:2e:e8:b5:83:4d:a6:58:f7:4c:5d:e9:94:
b5:aa:12:52:62:7a:8a:c7:bb:3a:0a:78:05:48:a5:aa:31:56:
53:05:01:4f:05:25:86:84:8e:3b:f2:0c:69:1e:89:f9:d4:de:
ae:b8:50:1c:50:72:f9:07:98:60:6d:6e:94:a7:8d:c7:40:a1:
3c:b3:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:42:14 2025 by rpki-client