Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: cslXfizTnWbfUc0rqFmDDat8N3SejHhAA/Tzn4hweHY=
Subject key identifier: CF:A7:DF:40:81:64:80:0B:35:77:0D:0C:B6:94:AA:E9:2F:D2:2F:C0
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0198D6988B2B4B1D61FE88641187F51BAD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 056E
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: D+MpISsrgQm0r3FDd3CD7pxqml5aHG+hAOo4DLHuVis=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8b:2b:4b:1d:61:fe:88:64:11:87:f5:1b:ad:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=cfa7df408164800b35770d0cb694aae92fd22fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:9f:80:37:a4:2e:42:f2:4b:64:5b:28:05:
55:cd:56:4a:a6:29:e9:b9:9b:92:59:06:47:06:42:
06:14:dd:06:5a:da:8e:ea:71:1d:0d:3f:de:c4:dc:
37:17:80:ee:78:2f:ab:2d:1c:ef:09:cf:66:dd:72:
a3:3f:9a:37:ac:d0:3d:e9:80:87:57:33:f1:b0:0d:
e1:33:3c:ea:52:e0:29:ba:b4:b2:9a:3e:fa:e7:74:
1e:ca:7b:6f:23:4e:5d:5d:34:3e:a6:fe:19:3c:26:
77:10:14:8a:73:8f:c1:5b:e7:bb:f4:cb:be:87:e9:
54:bd:08:46:6f:d8:10:3b:4b:f1:63:8a:e6:c1:2a:
52:25:5b:06:ac:e5:61:b5:2f:95:4b:09:45:62:7f:
42:46:c7:17:3c:94:3b:d9:06:83:48:17:a0:9d:38:
eb:38:49:00:ae:f2:61:c0:dd:3f:7a:5a:b6:7d:2c:
3a:9c:d1:49:21:17:05:b0:b5:e6:67:a4:9e:b5:e9:
6e:9a:b5:e9:2a:1a:b1:9b:ae:b9:d6:61:1b:38:1b:
93:ea:8e:73:6c:cc:45:5e:db:65:8a:34:e7:58:b2:
1d:eb:14:5b:a6:d5:34:0e:1d:e8:82:e8:44:05:77:
77:91:e8:ea:5a:6e:5c:0b:14:38:64:0f:f5:73:7b:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A7:DF:40:81:64:80:0B:35:77:0D:0C:B6:94:AA:E9:2F:D2:2F:C0
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:23:d3:63:00:51:91:93:44:dc:91:c0:f2:b6:50:49:4c:01:
9e:e4:3a:a9:fb:7b:88:3e:5b:fc:7d:f0:e8:18:91:88:65:3b:
0a:ca:8a:66:53:08:ba:c1:f2:81:8d:96:0e:bb:1a:aa:91:72:
37:23:03:21:65:5c:23:e7:45:c2:a6:ba:78:fb:ac:fd:a4:1f:
f5:3c:6b:39:aa:55:28:20:4a:ec:da:dd:5a:e1:66:8c:15:e1:
97:bd:fc:a2:0f:d7:d9:2c:5b:e6:cc:77:e4:c9:91:02:c1:c2:
dd:96:c8:a6:8a:31:3f:be:3a:1b:62:e7:c6:4d:b3:67:16:19:
d1:ee:65:e3:df:af:b8:33:6c:9e:47:ac:8f:8e:5c:1f:54:f2:
b0:75:6a:64:e3:b9:da:ba:fd:77:41:b6:4f:a0:95:f6:bc:0e:
28:19:42:f5:5c:f9:58:da:93:03:74:91:54:bd:07:61:5c:20:
a6:79:46:aa:52:0c:3f:be:a3:f8:23:fb:1c:2f:91:c3:8c:8d:
e5:db:a8:6b:3d:d7:31:32:94:55:ff:f9:73:bb:7d:11:68:bc:
b7:7f:4f:bc:aa:a4:79:e4:3a:d0:10:71:bf:07:5a:ed:a1:a9:
4e:3a:a9:5c:89:24:b0:6f:c0:77:04:7a:06:3e:7c:cc:21:66:
fb:bb:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:21:40 2025 by rpki-client