Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: +I3IoplXTY3NDiZo1rqg4pJAtbclVShSKPua8QvmWcs=
Subject key identifier: 74:B7:88:08:D9:49:2C:77:2D:D1:FB:31:C4:31:97:70:E0:A0:DD:F9
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0199FC21B22A7C49F252A584B65C831B2A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 0606
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: xwTm+bYTVKJwWzMeXrGllTf1QYOafEKxhwQIMESfzdk=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b2:2a:7c:49:f2:52:a5:84:b6:5c:83:1b:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=74b78808d9492c772dd1fb31c4319770e0a0ddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:68:18:60:03:04:be:6a:b6:c1:51:1d:45:
e1:77:d2:07:b6:97:61:f3:52:22:a9:c8:da:ec:59:
56:3c:12:0b:4e:1b:3e:75:71:1b:d6:7b:b1:80:6c:
e4:16:6a:b6:be:17:c9:d5:3d:9c:16:92:e3:31:c8:
70:7e:9b:b1:68:c0:f9:4e:35:43:b9:6d:3e:ca:3c:
2c:47:74:14:be:13:6e:fd:31:04:e3:97:8b:35:fa:
67:3a:9d:26:65:ad:a1:ab:c4:dc:9a:68:58:ec:ea:
21:f9:b3:17:76:93:b8:5a:ec:62:25:db:05:a1:1a:
ff:77:9f:fa:72:74:d1:bb:eb:e1:e8:36:15:94:54:
3f:8c:ba:a3:70:da:59:1d:04:e7:f4:12:70:8e:84:
89:94:d4:8e:03:00:ef:a8:e0:26:94:3b:32:e1:1a:
4e:73:cd:3a:49:c0:eb:d2:ba:f3:52:01:e3:64:d1:
7b:e8:41:31:3e:70:5a:59:3e:63:b8:3b:b6:d0:1f:
b2:26:a8:1a:df:cf:b9:43:b3:1b:94:d1:4c:17:dc:
3b:0d:4d:25:0c:c3:ae:b9:b3:5e:56:7d:0a:69:c5:
ae:34:a6:41:e1:68:ee:bd:14:82:7a:76:d0:35:a5:
98:4f:a2:47:2f:27:80:a4:ba:da:60:03:9d:67:f0:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:88:08:D9:49:2C:77:2D:D1:FB:31:C4:31:97:70:E0:A0:DD:F9
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:88:bd:be:c7:63:9f:87:4a:af:da:2c:84:97:37:8d:b7:40:
16:c4:8d:b2:c2:db:9b:61:64:03:6b:a2:77:d1:af:44:3d:51:
30:fc:fe:8d:3b:ce:fe:34:3d:b5:7c:a1:17:07:21:94:41:74:
6a:8d:bd:23:e2:15:0b:95:7f:0c:d9:e3:14:d7:70:94:5a:a2:
39:0f:84:08:64:f0:4c:a5:0e:cc:5e:59:0c:85:b3:35:47:02:
fe:f5:bf:c1:7f:d1:0a:fb:b3:5c:c6:2c:a1:c4:d6:7c:84:f5:
b4:99:81:45:c8:9d:9a:48:74:f1:99:ed:34:d0:b1:7d:ba:8a:
28:04:29:1b:c5:9e:a1:76:02:e5:c5:a1:cb:aa:84:68:af:71:
2f:f0:ff:f7:a0:e1:0f:aa:9a:ce:d8:dd:fb:00:16:f3:bf:9d:
42:dc:fd:3c:3d:80:bb:cc:e4:11:5a:57:83:0e:22:fa:08:9d:
61:fd:11:d5:2f:e3:ae:7b:d8:72:f6:2b:51:bf:70:96:97:4b:
2d:f7:c9:7c:25:37:71:53:9e:e1:e9:5e:1f:ca:b8:f4:f9:f8:
30:b0:b2:5e:cf:c6:91:e4:2c:79:d5:98:79:d7:8a:29:17:2d:
12:89:9a:b1:88:69:ce:3e:34:c1:c6:46:5a:22:e9:3f:b0:2b:
48:7f:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:40 2025 by rpki-client