Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: 7p7uPo/bE6Lq63u6oPcbMydSpfmpEcyc9wRRgVtv61I=
Subject key identifier: 2B:3F:F5:77:C9:B7:38:10:EC:57:2B:D2:81:B0:ED:45:4F:5B:E5:8D
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 5A5663BE27D28F8164425EF95D0C3CA6A24D11BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 0799
Signing time: Fri 08 Aug 2025 04:28:35 +0000
Manifest this update: Fri 08 Aug 2025 04:23:35 +0000
Manifest next update: Sat 09 Aug 2025 05:18:35 +0000
Files and hashes: 1: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
2: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
3: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: ImPxPM0NUTun3splVMd5smdBOjZutVPiF7NU1VHcRBw=)
4: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
5: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:56:63:be:27:d2:8f:81:64:42:5e:f9:5d:0c:3c:a6:a2:4d:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Aug 8 04:23:35 2025 GMT
Not After : Aug 9 05:18:35 2025 GMT
Subject: CN=2B3FF577C9B73810EC572BD281B0ED454F5BE58D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:9d:88:4a:8a:9c:b7:2b:73:d1:63:fe:d1:
1c:b8:3c:17:7a:fe:59:3d:0f:d1:98:9f:bb:e3:65:
18:14:d3:13:a3:ac:1d:74:dc:9f:8a:97:cb:2b:b4:
52:3e:ca:47:7f:f4:94:1f:fc:9b:58:5c:da:46:98:
40:7f:04:84:41:30:51:1c:83:39:44:ec:f7:02:ce:
70:b8:16:2d:98:92:30:f6:88:47:59:33:e5:33:df:
b3:52:17:42:9a:31:59:24:8b:4d:ca:2d:bb:e1:67:
95:5c:bb:4e:66:3f:29:66:8b:17:2e:e1:81:38:53:
cd:26:05:35:11:2c:eb:39:ce:ef:58:ac:b0:46:a3:
3d:95:5e:4c:7f:2b:27:2c:5d:03:75:dd:d3:e9:4c:
4d:64:71:45:9c:c6:c1:2e:12:f6:62:8e:c1:7e:a0:
cf:32:d5:df:77:5c:b7:95:b1:9f:59:88:f1:68:31:
cc:cc:6a:8d:4b:30:d6:33:bd:87:cf:aa:11:cb:74:
15:04:7d:f5:3d:6e:1a:a7:64:fb:65:06:d7:19:76:
ae:9a:76:35:a1:61:37:04:5a:dc:40:3f:67:57:af:
2f:af:8e:77:d6:2b:51:57:4b:8e:cf:fb:8c:c2:7d:
d5:be:88:d1:87:9a:1b:97:3f:8a:8f:1f:1d:fc:46:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:F5:77:C9:B7:38:10:EC:57:2B:D2:81:B0:ED:45:4F:5B:E5:8D
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6e:86:d4:4e:a6:43:0b:15:26:43:a6:51:27:72:4f:ab:05:
2f:6d:cd:2d:f4:33:ef:51:b9:2e:5c:7b:9c:22:ca:a9:f0:1a:
69:8d:43:28:80:df:5d:83:08:a6:2b:c8:98:2a:31:9c:d6:bb:
56:cd:9e:ee:b6:d9:61:7c:dd:cf:b1:d8:8c:63:9b:fe:a5:29:
70:2f:bd:c6:5b:d3:71:4d:60:1b:79:6a:04:70:ef:17:fb:ed:
03:17:c4:c7:2b:d8:dd:00:44:c1:01:c9:4c:04:88:e2:de:ed:
86:86:81:78:b1:6c:8c:66:34:d6:cb:6b:0d:83:7a:38:ef:a3:
d9:0e:a9:39:09:57:63:90:d0:97:5c:0a:d5:7a:61:7d:46:fa:
46:35:68:d3:6d:54:fc:fb:75:e0:b5:28:d2:6d:d5:02:cb:13:
db:57:38:c1:25:e6:38:bb:4b:6b:51:0d:d7:e6:22:c4:d5:bc:
a6:76:9c:62:03:20:03:c9:0d:95:93:f3:49:8b:ef:eb:56:f3:
03:c4:61:59:a3:93:9e:f0:5d:6b:fc:f3:f8:54:66:be:73:ae:
00:88:b6:a7:eb:49:f6:df:b5:d1:c5:0f:8e:60:9a:ef:91:f2:
35:d5:c6:1b:da:ee:59:c3:6c:5b:52:ad:eb:9b:fc:e8:be:e8:
37:9a:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:15 2025 by rpki-client