Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: 74LLvChhDcjOK3595NHBghLdZtNq9EY4CiE2LOhTm9M=
Subject key identifier: D2:21:B0:1B:82:F0:28:CF:1A:2C:29:62:6D:07:52:DC:1A:3E:B7:DB
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019771888B99B65FA9EC30B362F344941D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 03:01:03 +0000
Manifest this update: Sun 15 Jun 2025 03:01:03 +0000
Manifest next update: Mon 16 Jun 2025 03:01:03 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: K20Bz53DBYQcbBxqsklIx0QhNOW3XFOw5pHeK+8iIME=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:8b:99:b6:5f:a9:ec:30:b3:62:f3:44:94:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jun 15 03:01:03 2025 GMT
Not After : Jun 16 03:01:03 2025 GMT
Subject: CN=d221b01b82f028cf1a2c29626d0752dc1a3eb7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:83:3d:10:a7:b4:22:6a:7a:7c:3e:44:1f:
07:b8:32:d2:52:47:24:6c:54:70:14:ae:fd:39:96:
8d:d6:15:f4:b2:fc:f0:d8:6d:ae:18:3a:a8:d5:9b:
3e:04:8b:ad:6f:a5:fd:63:37:86:3c:f4:0a:fc:0e:
89:91:48:1e:90:73:92:9c:af:82:f8:f1:6e:4c:1d:
49:95:8a:1c:aa:da:af:21:50:da:10:a9:e9:ce:c9:
ce:f6:03:3a:c1:7a:05:54:2a:b9:32:db:87:e9:72:
3e:ab:95:54:f7:1b:c6:08:eb:ea:78:a3:a2:e7:0a:
df:ec:fd:3f:ea:66:71:a8:17:99:b0:64:ae:df:81:
24:fb:a0:cd:71:2d:c4:a9:cd:66:3a:1b:23:2a:aa:
15:cb:60:93:cb:49:05:05:b7:bc:59:f4:a8:de:46:
49:3b:a5:a2:68:12:99:25:1c:b0:84:7f:13:1a:a7:
ab:d7:06:ba:2b:7a:ec:95:92:88:8e:d2:73:e0:23:
27:28:b0:42:0b:e2:44:ef:2e:c7:75:3d:af:7f:3a:
45:cd:3f:a5:bc:ae:e4:86:8b:ca:c7:46:c6:94:38:
6e:4b:e9:61:0a:8a:e4:56:e0:8c:01:aa:f0:f7:f7:
94:ef:e6:f9:bc:67:e5:da:2a:54:de:94:e4:1d:20:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:B0:1B:82:F0:28:CF:1A:2C:29:62:6D:07:52:DC:1A:3E:B7:DB
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:34:32:fc:bf:1d:cb:b1:5f:6e:2d:ba:6b:12:a6:e0:c3:34:
8c:ec:99:0c:bd:32:22:e7:6d:d2:36:d4:28:d0:39:0f:d9:37:
1b:2c:8c:d2:ca:eb:40:58:c6:8e:16:66:48:14:b1:d7:f2:3f:
64:99:b8:e9:22:d3:ed:ed:91:e5:b9:72:23:d0:05:1a:12:ea:
39:8b:43:b4:6d:fb:c8:2f:fa:0c:17:8e:c3:a3:e2:b7:b7:1f:
fb:9e:90:d6:c2:94:12:cb:ea:39:d0:31:6a:2c:ba:2f:f8:ba:
49:6f:4e:15:32:46:98:b0:29:0d:da:e3:f5:eb:c7:a4:5f:f8:
bc:47:f5:86:28:d3:7d:23:8e:51:f0:69:5e:b6:41:41:1c:cd:
3e:0f:30:36:76:b0:bc:08:15:79:dd:04:8f:c9:69:4d:70:01:
90:52:b3:9a:fb:b3:f5:89:9c:ae:9a:d4:39:0a:be:7f:6b:37:
5a:3e:92:60:a2:fc:89:9e:a1:15:aa:96:99:39:d0:20:2c:7e:
aa:d2:76:5e:0d:18:12:89:b9:6f:50:f7:b8:c5:94:4c:b8:0e:
a4:6c:42:e4:63:6b:e3:97:91:75:88:d9:47:38:a6:28:32:b4:
66:df:a1:eb:35:9e:e2:87:b3:2f:21:10:7a:95:49:fe:fc:e8:
d5:37:a6:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiIuZtl+p7DCzYvNElB09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl
ZWM1YjEwHhcNMjUwNjE1MDMwMTAzWhcNMjUwNjE2MDMwMTAzWjAzMTEwLwYDVQQD
EyhkMjIxYjAxYjgyZjAyOGNmMWEyYzI5NjI2ZDA3NTJkYzFhM2ViN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iyDPRCntCJqenw+RB8HuDLSUkck
bFRwFK79OZaN1hX0svzw2G2uGDqo1Zs+BIutb6X9YzeGPPQK/A6JkUgekHOSnK+C
+PFuTB1JlYocqtqvIVDaEKnpzsnO9gM6wXoFVCq5MtuH6XI+q5VU9xvGCOvqeKOi
5wrf7P0/6mZxqBeZsGSu34Ek+6DNcS3Eqc1mOhsjKqoVy2CTy0kFBbe8WfSo3kZJ
O6WiaBKZJRywhH8TGqer1wa6K3rslZKIjtJz4CMnKLBCC+JE7y7HdT2vfzpFzT+l
vK7khovKx0bGlDhuS+lhCorkVuCMAarw9/eU7+b5vGfl2ipU3pTkHSApvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIhsBuC8CjPGiwpYm0HUtwaPrfbMB8GA1UdIwQY
MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt
OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl
LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDQy/L8d
y7Ffbi26axKm4MM0jOyZDL0yIudt0jbUKNA5D9k3GyyM0srrQFjGjhZmSBSx1/I/
ZJm46SLT7e2R5blyI9AFGhLqOYtDtG37yC/6DBeOw6Pit7cf+56Q1sKUEsvqOdAx
aiy6L/i6SW9OFTJGmLApDdrj9evHpF/4vEf1hijTfSOOUfBpXrZBQRzNPg8wNnaw
vAgVed0Ej8lpTXABkFKzmvuz9YmcrprUOQq+f2s3Wj6SYKL8iZ6hFaqWmTnQICx+
qtJ2Xg0YEom5b1D3uMWUTLgOpGxC5GNr45eRdYjZRzimKDK0Zt+h6zWe4oezLyEQ
epVJ/vzo1Tem3w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:30 2025 by rpki-client