Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: a0p6iPhWk+IJLOVAWqKkOM4QH7ND0EGCgDtUNwdTe+o=
Subject key identifier: 68:8E:E8:78:AD:23:EC:31:49:DA:BE:D5:ED:62:A9:5D:19:97:D2:7A
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 0197B6A18AA1270CCC444CAEF75B6FC0FC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 0FAD
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: mz5Ptxk+HaLzAYnZl47v4hZozSxhRBIKhGPY2XhI2MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8a:a1:27:0c:cc:44:4c:ae:f7:5b:6f:c0:fc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=688ee878ad23ec3149dabed5ed62a95d1997d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:bd:ef:dd:04:bb:ce:32:e2:d2:29:d6:47:
5e:99:8d:d9:0f:18:25:21:64:40:db:10:36:27:a7:
79:cc:ca:7d:c5:21:9b:81:68:dd:1b:26:dd:77:78:
a7:5c:95:03:41:ae:dc:99:cb:b2:f5:4f:a4:57:14:
95:5d:25:74:8c:23:74:c5:f8:d6:56:81:cf:bf:20:
2a:b8:16:2e:1c:2b:a8:28:3d:1e:4d:22:cc:1e:b1:
c0:c6:ee:e7:e3:eb:fd:95:b3:11:90:16:27:85:8c:
d4:50:34:6b:82:9b:f3:af:f5:b1:74:4d:6a:84:1b:
36:06:1a:11:a2:6f:63:c6:6f:41:a5:c5:d1:88:2e:
b7:16:ab:e7:53:2e:4a:6e:c2:ea:74:ef:90:19:ef:
78:d2:1a:e0:48:39:56:47:3e:7b:37:43:44:34:d9:
8b:ca:15:db:4c:d9:69:33:f4:2c:50:d4:40:a1:a0:
a4:08:42:71:8d:00:0e:30:c9:88:a8:75:a0:dc:e9:
54:08:b5:7c:25:f6:7d:75:a4:87:11:f4:a5:6a:a2:
c5:2a:86:15:12:fd:9a:e8:cc:2f:26:4a:b8:d8:d2:
8e:cf:d6:b3:2c:20:0b:d4:37:29:f8:5b:85:a0:99:
12:a3:3d:ce:19:32:6c:3a:91:71:6a:cf:50:88:71:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:E8:78:AD:23:EC:31:49:DA:BE:D5:ED:62:A9:5D:19:97:D2:7A
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:76:ae:c3:0a:38:21:f3:6a:60:e7:17:cd:b6:fa:36:50:65:
83:32:c7:90:b2:f1:0a:9f:c6:2c:17:27:3c:0d:11:38:d6:1d:
0a:1c:8f:20:c4:e9:b5:55:44:37:65:70:c8:ee:10:ed:2a:4b:
1f:1f:86:74:e7:a2:90:e2:91:65:ee:ae:a6:c0:97:2b:54:d7:
91:e9:5c:99:f1:e2:c9:5c:9a:a2:e0:d2:44:d8:70:17:39:47:
57:bc:c7:4e:b1:a1:30:9a:0f:1e:f4:d5:a4:6a:c0:dd:55:99:
98:aa:9c:3d:5d:06:1e:22:8b:c7:59:38:16:ab:1d:cb:81:21:
15:b6:28:24:d7:29:02:40:34:73:5d:37:14:14:e4:e5:cb:1b:
c1:49:04:e9:66:92:0b:84:96:55:81:70:d2:ca:0a:5f:6e:8f:
5c:85:47:3c:0d:f8:7d:60:5e:61:5d:14:f0:bb:00:4b:37:84:
23:db:bd:f3:79:f4:e9:68:9d:08:76:2a:a6:19:b6:53:7a:63:
25:2e:41:9b:79:ad:5f:a3:01:fa:5c:7e:6f:e2:a4:36:c0:c3:
43:fa:7a:b1:75:a7:45:e3:8e:e6:e1:7e:1f:39:50:aa:81:3b:
7b:6b:1f:4b:fe:2d:f4:46:37:b3:6e:b5:c5:5b:db:d3:af:33:
a4:3e:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:33 2025 by rpki-client