Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: bOm/C7Ht7mVq0QVvRwu5ElHsBCO8LxMj3D4SgIMUbh4=
Subject key identifier: 2B:4A:25:85:70:67:EE:DA:F6:04:AD:F2:A2:6D:6C:B5:A4:9E:19:E3
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 019874F499F098C8FE062990612A4D24CE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0CE6
Signing time: Mon 04 Aug 2025 12:00:43 +0000
Manifest this update: Mon 04 Aug 2025 12:00:43 +0000
Manifest next update: Tue 05 Aug 2025 12:00:43 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: VId2KKlBWIx/SfDDwtCno9IdR8sRqYKOTYJaMwmdj3c=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:99:f0:98:c8:fe:06:29:90:61:2a:4d:24:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Aug 4 12:00:43 2025 GMT
Not After : Aug 5 12:00:43 2025 GMT
Subject: CN=2b4a25857067eedaf604adf2a26d6cb5a49e19e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:fc:d0:21:48:a3:4e:be:a1:43:9f:f3:91:
1b:2b:22:00:c6:5f:7f:9e:b6:d7:99:59:1e:ee:1f:
8b:db:73:b9:f0:02:8d:11:9f:6a:62:26:73:55:6c:
a7:bb:61:f9:a5:c4:5a:10:12:d0:9d:37:f3:93:d2:
47:76:f6:9f:17:db:80:23:4d:ee:00:42:c8:40:14:
b8:3b:83:03:8b:41:88:24:a1:0c:7f:62:da:1a:24:
52:a3:7e:a0:c4:d2:08:64:74:90:df:2f:0e:fb:30:
78:c5:96:e4:b4:57:a0:d1:a7:df:87:33:fb:95:08:
55:2e:ef:66:28:86:03:d7:f0:76:ee:ca:48:40:61:
10:c2:51:d3:32:aa:6b:58:79:33:37:7c:9a:e1:d0:
0e:82:68:43:07:32:19:d2:9b:03:38:ef:19:8a:34:
aa:6a:73:fb:c5:3c:90:f8:22:4e:fb:2e:d5:14:e2:
97:a0:08:7c:be:1a:5e:77:2b:83:19:6a:44:a5:dc:
35:d5:50:6a:74:2d:4f:81:f9:68:74:4e:7c:64:a3:
da:18:9e:a0:14:3b:3f:82:04:50:bc:31:b5:a2:83:
73:df:dc:ce:0f:34:e4:84:69:cd:3c:b4:fa:e6:c6:
15:b5:a4:d7:88:14:3d:cf:38:cf:18:54:9f:d7:ca:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:25:85:70:67:EE:DA:F6:04:AD:F2:A2:6D:6C:B5:A4:9E:19:E3
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:96:56:0f:c0:1c:37:d5:77:df:3d:a2:5d:e5:6b:ba:eb:
04:5b:44:e3:ea:9d:f1:86:2b:a1:cf:b8:2f:d4:ef:18:97:1c:
c7:e9:b3:60:e3:6e:f6:25:72:1c:a6:7e:56:75:e0:5a:94:ea:
5a:f1:7d:29:b1:b7:b2:76:20:69:9a:31:9f:7d:95:e1:69:18:
82:e3:7b:d8:6d:58:12:b6:07:dc:90:f0:88:20:fa:b0:0c:c0:
b8:03:7b:a7:e0:c4:f5:34:a1:17:e5:31:6a:3f:a6:62:cc:99:
7c:d7:0a:ee:c5:ca:38:9d:a3:6a:d3:19:54:35:58:bd:90:92:
97:f3:e4:e4:d2:69:27:22:3d:5c:2c:69:f2:7a:8a:e6:f4:cf:
a9:25:14:9b:e2:44:03:a2:b8:ba:01:5a:27:f6:9d:51:9d:a4:
04:44:cc:50:eb:a8:d0:7f:d6:4f:51:2f:36:03:0c:7c:32:34:
c5:bd:86:36:66:a9:1f:2e:ab:21:6b:fa:c8:4e:f2:d2:92:24:
4e:4f:db:ea:97:6c:0b:4c:dd:79:46:8b:f4:db:ba:b1:fe:ed:
3f:48:ea:55:c6:0f:a9:1e:90:b1:57:6d:ed:1f:5a:ee:3b:5e:
49:79:ea:8a:0f:38:0f:3a:9c:c4:de:6f:a9:13:d0:e3:6e:3c:
10:99:15:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09JnwmMj+BimQYSpNJM5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2
NjU5ZWMwHhcNMjUwODA0MTIwMDQzWhcNMjUwODA1MTIwMDQzWjAzMTEwLwYDVQQD
EygyYjRhMjU4NTcwNjdlZWRhZjYwNGFkZjJhMjZkNmNiNWE0OWUxOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5r80CFIo06+oUOf85EbKyIAxl9/
nrbXmVke7h+L23O58AKNEZ9qYiZzVWynu2H5pcRaEBLQnTfzk9JHdvafF9uAI03u
AELIQBS4O4MDi0GIJKEMf2LaGiRSo36gxNIIZHSQ3y8O+zB4xZbktFeg0affhzP7
lQhVLu9mKIYD1/B27spIQGEQwlHTMqprWHkzN3ya4dAOgmhDBzIZ0psDOO8ZijSq
anP7xTyQ+CJO+y7VFOKXoAh8vhpedyuDGWpEpdw11VBqdC1PgflodE58ZKPaGJ6g
FDs/ggRQvDG1ooNz39zODzTkhGnNPLT65sYVtaTXiBQ9zzjPGFSf18o82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtKJYVwZ+7a9gSt8qJtbLWknhnjMB8GA1UdIwQY
MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt
OTQxNzdmOGQ4NzdjLzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj
LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw+WVg/A
HDfVd989ol3la7rrBFtE4+qd8YYroc+4L9TvGJccx+mzYONu9iVyHKZ+VnXgWpTq
WvF9KbG3snYgaZoxn32V4WkYguN72G1YErYH3JDwiCD6sAzAuAN7p+DE9TShF+Ux
aj+mYsyZfNcK7sXKOJ2jatMZVDVYvZCSl/Pk5NJpJyI9XCxp8nqK5vTPqSUUm+JE
A6K4ugFaJ/adUZ2kBETMUOuo0H/WT1EvNgMMfDI0xb2GNmapHy6rIWv6yE7y0pIk
Tk/b6pdsC0zdeUaL9Nu6sf7tP0jqVcYPqR6QsVdt7R9a7jteSXnqig84DzqcxN5v
qRPQ4248EJkViw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:10 2025 by rpki-client