
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: ay2KzjRuE6YW0y8YyuHNJ9ItV//v3DUXxX8UTqDgfZs=
Subject key identifier: 11:68:95:F6:44:90:F2:02:EF:BA:FD:28:CB:8F:AC:3A:8B:DA:A1:2A
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 0199FBEC6863F4AB36063AD4B5D94640EED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 10:03:18 +0000
Manifest this update: Sun 19 Oct 2025 10:03:18 +0000
Manifest next update: Mon 20 Oct 2025 10:03:18 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: Q5A8SajB8lADf52b1QjRjNLlWzJEacAdMrZmXEn5wOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:68:63:f4:ab:36:06:3a:d4:b5:d9:46:40:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Oct 19 10:03:18 2025 GMT
Not After : Oct 20 10:03:18 2025 GMT
Subject: CN=116895f64490f202efbafd28cb8fac3a8bdaa12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:33:4e:8e:39:c9:54:09:52:66:4a:03:f4:
11:40:c1:1e:dc:f0:ad:67:c1:9b:82:49:a2:9e:af:
ba:ed:1b:09:8f:10:e9:59:af:37:89:d0:21:22:c5:
5c:5f:34:6f:14:00:d0:33:9e:b0:09:0f:67:c2:f0:
93:25:aa:cd:44:26:d6:75:e2:a4:13:31:b2:1d:fa:
e6:c7:b8:56:c9:7c:5e:d5:09:97:d1:4f:f1:77:f4:
9b:c7:65:2b:dc:24:9c:f5:5b:28:e3:a3:d6:fa:61:
5e:19:48:f4:bb:39:21:c1:b2:80:c6:f9:97:d2:cf:
85:60:2c:5a:43:d8:51:59:80:78:e8:c6:6b:1c:f9:
3a:3b:2e:92:ff:75:e2:f8:4b:10:c1:a0:cd:05:bf:
e4:8a:27:1d:c6:8c:33:2d:67:d5:78:a6:3a:39:7c:
69:7c:43:61:be:ce:5d:53:d0:e6:ec:f7:62:29:89:
ae:89:26:4d:bd:9c:8a:8b:bb:05:91:e1:91:35:64:
c7:83:c4:15:1d:fb:41:14:59:d6:e6:50:e2:36:8d:
49:9a:b9:7d:e3:d8:e6:bb:ea:d7:d2:82:ae:8a:db:
7c:d9:90:95:19:1e:14:fb:fa:b7:d9:e5:4e:ee:8e:
f2:b2:af:f9:05:87:77:c8:dc:f8:8d:96:04:a7:f9:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:95:F6:44:90:F2:02:EF:BA:FD:28:CB:8F:AC:3A:8B:DA:A1:2A
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:fe:3c:0d:0d:79:a3:3e:43:13:4c:69:9c:b5:0a:87:e3:
b2:68:10:25:66:59:60:84:c7:87:32:90:fc:e1:34:bf:2d:ed:
cb:e9:c0:b8:8c:c6:b9:f6:96:e6:bb:fb:d6:71:f2:d6:a9:ec:
dd:3a:c2:32:23:45:a2:48:d4:d7:84:66:b8:0c:19:cd:6a:55:
9c:82:44:e0:03:f0:05:3c:3f:31:79:ef:54:b0:3e:40:78:22:
be:6a:20:d1:8b:12:fe:34:54:2e:6d:72:bb:31:1e:24:4b:6b:
af:c3:b1:74:d0:b6:74:78:2d:55:56:2c:76:22:a7:e0:90:9b:
aa:9c:15:00:e2:22:90:f7:c0:10:25:41:7c:da:c6:d5:88:0d:
5d:0b:33:75:34:33:0f:ca:76:8e:5b:17:1d:87:23:da:6e:37:
d9:e1:d4:65:7c:f6:8b:ac:21:4a:32:7a:0a:04:8b:73:cc:b6:
4c:f0:5a:64:88:97:09:ad:6f:0d:d8:b7:6c:d4:78:66:33:bb:
0f:6f:93:c5:93:8f:85:a1:b3:5e:c1:9b:33:12:a1:da:4a:e1:
96:09:ab:d9:4c:98:0c:e6:69:d0:c8:6e:b2:bc:ec:2c:c8:ee:
b7:26:70:a9:9a:92:2f:c0:eb:4c:63:7e:76:ee:f1:46:e9:26:
07:02:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:14 2025 by rpki-client