Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: zTaq1+feOaOMFjtnbDhEFSMmFuRtSlIKy3WisL1IBaA=
Subject key identifier: 0A:74:0D:68:B4:F0:37:B5:1E:71:DD:B6:A3:4C:2A:D2:25:BA:5A:47
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019874501D7DE1B41E5B79AD5662408CD254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:04 +0000
Manifest this update: Mon 04 Aug 2025 09:01:04 +0000
Manifest next update: Tue 05 Aug 2025 09:01:04 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: FMD2Pst8JeH3RaEw04oMYxUmbX7E7/gvVPfq+hbIdus=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:1d:7d:e1:b4:1e:5b:79:ad:56:62:40:8c:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Aug 4 09:01:04 2025 GMT
Not After : Aug 5 09:01:04 2025 GMT
Subject: CN=0a740d68b4f037b51e71ddb6a34c2ad225ba5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:60:e1:46:93:00:fe:98:77:69:45:94:7c:
3d:0b:1a:fe:ec:74:38:4a:95:1c:93:7d:a1:a4:b4:
4e:82:8b:1e:d5:3b:8e:b0:69:cc:c1:24:1f:3e:7e:
ae:1a:c4:83:16:18:d5:10:aa:96:15:eb:19:1d:3b:
cd:10:0e:ef:dd:f1:f1:61:9f:fb:9c:8b:aa:92:3c:
15:63:d4:22:63:32:91:d4:16:ce:98:8a:82:8b:5f:
c8:05:cc:ac:8e:15:4f:e7:6e:c1:d2:58:fc:6d:cd:
e4:51:37:c9:83:5a:4c:51:2a:5f:d3:fd:95:c8:18:
14:fc:8d:7a:ca:de:40:86:36:ca:15:e5:cc:c0:84:
56:e5:a9:38:d2:39:e7:5f:28:63:fe:fb:48:f9:82:
92:07:d4:44:95:64:cf:7f:71:98:40:ac:39:90:81:
66:0a:b6:04:67:2e:29:51:44:43:56:6c:a2:be:c2:
b0:e3:4d:ec:ea:1a:48:27:dc:28:a3:e1:28:47:18:
5c:ad:17:33:76:6f:bc:4f:41:af:5c:e7:2e:71:58:
3a:d6:c8:b0:73:3c:51:b2:6c:0d:45:61:4a:55:fb:
67:15:eb:d9:fe:c4:f6:0c:b5:0e:0d:39:83:cb:ba:
af:c7:90:ab:ae:65:9c:8a:e3:ea:35:75:b5:f6:e1:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:0D:68:B4:F0:37:B5:1E:71:DD:B6:A3:4C:2A:D2:25:BA:5A:47
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8d:32:99:ed:33:86:5f:a1:4a:4e:2b:e1:30:0a:88:ac:6a:
8c:3c:66:8f:42:b7:b0:57:ea:87:31:ce:98:0f:88:18:40:ad:
e9:9f:9c:21:c1:8d:60:95:02:1a:02:86:61:80:f8:40:17:d4:
b3:c8:06:a4:67:1f:b4:b9:bc:22:7f:ae:15:d9:2f:a5:20:59:
40:c7:6e:fe:fb:58:ec:95:4a:c7:c3:c4:9e:a7:49:a4:dc:1f:
16:95:a6:34:6e:11:10:18:61:71:9f:37:0f:84:f2:39:24:26:
73:ac:a8:a4:54:b4:ed:86:2e:5e:24:0b:5c:91:08:b5:2a:37:
1f:4d:77:a8:dd:9f:4f:76:b3:c5:1f:a3:7f:ea:19:84:86:2f:
23:8c:f9:7b:53:46:2d:6e:df:6a:19:04:da:29:a4:51:96:5a:
30:33:e9:90:fa:76:c7:ca:bb:a8:fa:8c:59:96:9f:ef:c6:82:
69:bd:5f:97:6d:d2:db:cf:47:8a:a6:e7:4e:54:be:43:6b:4c:
7c:96:20:db:7c:f9:09:62:85:48:40:aa:ad:c8:c8:b1:22:b0:
f1:46:1f:ff:7a:b0:f1:af:a1:4c:7a:08:61:c6:97:a8:06:94:
bb:9a:0b:ca:e0:a8:46:f0:3f:cc:49:c5:b7:b8:8d:50:61:c7:
11:46:d8:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UB194bQeW3mtVmJAjNJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl
ZWM1YjEwHhcNMjUwODA0MDkwMTA0WhcNMjUwODA1MDkwMTA0WjAzMTEwLwYDVQQD
EygwYTc0MGQ2OGI0ZjAzN2I1MWU3MWRkYjZhMzRjMmFkMjI1YmE1YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosVg4UaTAP6Yd2lFlHw9Cxr+7HQ4
SpUck32hpLROgose1TuOsGnMwSQfPn6uGsSDFhjVEKqWFesZHTvNEA7v3fHxYZ/7
nIuqkjwVY9QiYzKR1BbOmIqCi1/IBcysjhVP527B0lj8bc3kUTfJg1pMUSpf0/2V
yBgU/I16yt5AhjbKFeXMwIRW5ak40jnnXyhj/vtI+YKSB9RElWTPf3GYQKw5kIFm
CrYEZy4pUURDVmyivsKw403s6hpIJ9woo+EoRxhcrRczdm+8T0GvXOcucVg61siw
czxRsmwNRWFKVftnFevZ/sT2DLUODTmDy7qvx5CrrmWciuPqNXW19uEZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp0DWi08De1HnHdtqNMKtIlulpHMB8GA1UdIwQY
MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt
OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl
LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY0yme0z
hl+hSk4r4TAKiKxqjDxmj0K3sFfqhzHOmA+IGECt6Z+cIcGNYJUCGgKGYYD4QBfU
s8gGpGcftLm8In+uFdkvpSBZQMdu/vtY7JVKx8PEnqdJpNwfFpWmNG4REBhhcZ83
D4TyOSQmc6yopFS07YYuXiQLXJEItSo3H013qN2fT3azxR+jf+oZhIYvI4z5e1NG
LW7fahkE2imkUZZaMDPpkPp2x8q7qPqMWZaf78aCab1fl23S289HiqbnTlS+Q2tM
fJYg23z5CWKFSECqrcjIsSKw8UYf/3qw8a+hTHoIYcaXqAaUu5oLyuCoRvA/zEnF
t7iNUGHHEUbYAA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:36 2025 by rpki-client