Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: xgBac48s51A2fKydRHHgX2WADQtzg8FyuP+sFhc97xQ=
Subject key identifier: 04:70:D0:F5:0B:5D:86:52:8C:D3:A3:99:C5:A5:96:4D:52:01:88:EA
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0197B6D74EEBCEB1A42D7917563E3B88067A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 04D9
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: bL6JoSSVvdYVcF4NAMA0q1sCSI9AC7CbPRg9jb9heIM=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4e:eb:ce:b1:a4:2d:79:17:56:3e:3b:88:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=0470d0f50b5d86528cd3a399c5a5964d520188ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:b0:06:a1:8c:43:e1:6c:e0:1c:64:0f:b5:
62:63:dc:23:a1:4f:d9:c3:bb:d0:f3:69:e4:d9:50:
07:b2:97:4a:a4:51:f0:24:23:5b:f9:3f:2f:25:d2:
93:ed:91:38:4a:c9:5c:cd:62:1f:4e:94:a4:f7:30:
e0:cf:31:61:9c:78:7e:f6:d7:64:78:ce:b5:30:06:
a2:b7:c1:fe:71:d4:c1:68:f3:5d:32:65:9a:95:f7:
fd:37:83:17:74:63:fd:b0:90:3e:6e:58:bc:a4:9d:
43:68:1a:4c:1b:16:eb:89:bc:ca:c6:25:71:9b:21:
9a:63:54:10:41:6a:42:30:f5:51:82:f4:d2:a4:6e:
26:18:b1:db:f0:ad:93:d7:64:67:95:df:c8:f5:59:
b2:8b:65:3d:e1:9f:a6:c4:4b:fa:e4:65:3e:ce:6e:
28:99:3c:05:ef:68:a2:0f:6a:da:82:89:a6:55:1a:
e1:32:bd:b0:7f:99:13:ec:f2:a5:13:7d:27:32:7d:
df:43:ba:43:83:63:62:51:2c:af:a7:d6:08:f5:63:
08:5b:11:c0:60:c8:a7:50:af:64:d0:b4:80:47:61:
a5:e4:27:a9:7e:b0:a7:0a:0d:b6:a2:f6:c3:40:c4:
2a:09:ee:a2:7b:e5:e7:8c:89:7b:32:26:bc:c8:89:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:70:D0:F5:0B:5D:86:52:8C:D3:A3:99:C5:A5:96:4D:52:01:88:EA
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c0:0e:12:7c:bf:84:f8:89:07:77:28:e6:5f:58:41:1f:38:
19:7f:51:24:0c:2e:41:84:fa:0b:c6:96:cb:d2:55:30:d0:e6:
e6:1b:bd:e9:af:4f:9f:1e:69:25:b0:c7:d4:34:24:a4:f1:0a:
cd:09:df:01:df:24:1e:c4:b8:03:75:f6:9f:0f:af:19:7a:e8:
20:d4:e5:5f:fa:bb:72:bf:e6:91:fc:c5:11:b6:80:b6:3f:e9:
57:da:dd:88:f9:c0:29:71:f8:47:52:e8:ee:86:d1:8f:f4:13:
ec:71:c0:e5:2b:0a:f0:99:cd:1b:b7:39:10:15:49:a1:b2:14:
95:ae:49:46:81:8d:65:e5:79:1f:7e:e2:55:bb:c0:fb:cf:d6:
03:6f:84:9e:93:97:7f:44:c4:12:aa:b6:57:30:d2:48:22:1a:
30:c8:27:5f:c8:6c:6a:f1:cb:c9:63:45:cd:97:d1:c2:42:c0:
40:c4:a2:d7:e5:3d:ce:8d:11:23:c5:11:e3:b9:92:50:fa:71:
46:bd:ab:f9:4f:ba:fc:fe:b3:f1:d3:c2:6f:1d:6e:7b:a6:76:
59:03:39:82:b3:2c:49:76:11:4c:0c:a3:b4:dd:b4:f4:8c:0c:
a1:7e:01:cf:04:56:11:80:55:a5:04:2c:9e:e7:9f:23:6b:b5:
df:00:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:20 2025 by rpki-client