Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: p4czE2b/xsd1igc/LECJO/tP2qHfXqM9fPf8SJAA+5g=
Subject key identifier: B0:74:C8:41:03:72:2E:09:68:D7:FF:14:F5:C3:91:05:B0:D3:6B:29
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 0198D7A94E3E44D0D98FFD702EF711C32B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1360
Signing time: Sat 23 Aug 2025 16:00:53 +0000
Manifest this update: Sat 23 Aug 2025 16:00:53 +0000
Manifest next update: Sun 24 Aug 2025 16:00:53 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: fAIHENg0+SXRKTwFTKG3bljVU5F8hExPVB7zrpOqKGg=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:4e:3e:44:d0:d9:8f:fd:70:2e:f7:11:c3:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Aug 23 16:00:53 2025 GMT
Not After : Aug 24 16:00:53 2025 GMT
Subject: CN=b074c84103722e0968d7ff14f5c39105b0d36b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:2c:f8:0f:42:e6:50:15:aa:2a:41:3a:74:
e6:24:d0:e6:af:d0:5a:56:f6:1c:fd:72:f1:74:d1:
f0:07:18:c6:ef:9a:98:69:67:db:3f:d7:af:fc:65:
5c:68:f5:9c:f2:4c:35:d6:a8:4c:8e:66:44:0c:0b:
7b:8b:cc:6c:79:f8:4c:6c:fb:a2:79:2b:ba:da:91:
be:48:eb:a6:67:bf:6e:9b:30:9a:94:41:61:f5:4b:
65:2d:ae:75:25:3d:02:61:65:4d:ae:b0:8e:dd:1e:
a0:dd:76:5d:21:30:4a:f4:15:dc:47:e1:6f:8d:a5:
5d:ef:26:4c:da:82:82:ba:25:fa:e5:14:bc:d7:6b:
60:e2:c4:57:67:b2:3f:1d:32:b1:11:65:12:8e:20:
00:30:b5:5d:34:d4:cf:d8:e3:17:0e:d6:2d:43:fb:
0a:80:23:af:30:cb:27:d3:01:da:79:cd:dc:6d:20:
86:8d:ef:b9:81:a8:31:20:c0:2f:07:9c:74:01:73:
f4:be:81:39:e3:ca:19:dc:90:f7:3b:eb:45:2b:37:
a8:52:78:e8:83:fa:82:a6:d6:62:04:e5:c0:d7:01:
c1:5e:c0:91:e5:9d:98:d6:44:b2:63:d3:b0:dd:f6:
44:aa:2f:86:b2:29:fc:39:e6:44:1d:ca:bd:a9:81:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:74:C8:41:03:72:2E:09:68:D7:FF:14:F5:C3:91:05:B0:D3:6B:29
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:32:62:20:d4:da:45:b9:3b:d0:61:79:d6:e4:25:a7:2c:ca:
13:5c:50:76:63:0c:10:4a:2c:3e:cd:8a:5c:d2:36:99:b9:d2:
f4:04:d6:93:e5:77:89:b1:db:0d:2a:fd:ee:36:fe:21:57:ac:
b9:98:65:ea:6a:de:65:55:7c:78:12:d2:3b:5a:4f:cc:2a:c6:
81:9b:2e:f8:b0:04:87:85:5e:69:b0:22:09:cd:75:fd:0e:84:
66:05:9d:fe:15:1e:a3:f2:bf:5e:ad:ed:07:ad:71:35:64:f1:
6b:68:a5:94:5a:35:ce:fe:40:64:cb:f2:6a:65:af:77:21:0a:
a4:43:bc:b1:69:79:8e:51:78:a9:d0:41:78:d0:34:b0:04:96:
f1:48:67:cc:49:29:8f:0a:75:39:d9:96:48:28:b1:f0:ad:c7:
2a:a1:6b:70:75:a7:c7:1e:db:36:79:2e:70:54:22:f1:dd:5c:
05:a4:17:27:9e:3b:25:eb:f9:65:6d:57:49:e5:4e:2f:d3:ad:
a1:95:7b:3f:b2:16:54:73:60:f8:35:5b:cc:42:24:0e:e5:37:
23:b7:8f:6c:76:79:3a:d3:3c:8f:82:02:75:2a:7e:74:69:23:
06:15:56:43:6b:f8:eb:f7:4c:64:29:5f:a4:cf:dd:9f:0b:1e:
5b:64:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:01:08 2025 by rpki-client