Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: QcH3tA8GkUSaxMBFpURU2kyIW5Y4cP7o+Fvt+bjvjL8=
Subject key identifier: D4:B3:92:92:A4:39:D7:5C:1C:82:8B:F4:8B:17:8D:CF:33:0B:E5:92
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 0197CA2709CC6C4973681AFA4D662B5EE0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 10D4
Signing time: Wed 02 Jul 2025 08:00:45 +0000
Manifest this update: Wed 02 Jul 2025 08:00:45 +0000
Manifest next update: Thu 03 Jul 2025 08:00:45 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: iKg6iNZx3VLrQUrvIGW2923hYncVYbgdxW2fGCxbjLM=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:09:cc:6c:49:73:68:1a:fa:4d:66:2b:5e:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jul 2 08:00:45 2025 GMT
Not After : Jul 3 08:00:45 2025 GMT
Subject: CN=d4b39292a439d75c1c828bf48b178dcf330be592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:01:26:aa:3d:36:9b:ee:0b:d4:a7:b5:c5:
cf:d3:85:38:51:d1:08:09:f9:cb:87:56:fd:4a:a2:
1f:ed:2d:31:24:14:68:6e:92:b0:93:bc:4f:46:b9:
9b:8a:7b:e1:90:b6:23:aa:b8:f7:38:9c:78:18:a8:
ab:7e:2b:c8:ff:38:83:81:cf:f0:f9:76:e0:d2:c9:
6c:9e:06:57:ae:49:22:43:d5:b7:ce:a7:e6:f1:be:
e6:ef:50:60:b9:72:ca:a1:26:66:71:3b:44:07:79:
86:cb:96:f1:fb:dc:d1:cb:e5:9f:85:ff:f5:d8:d8:
c0:1a:b5:2d:98:7a:28:71:1b:ad:79:81:43:3b:c2:
20:4f:fd:c7:57:96:ed:92:1b:70:27:82:13:f9:9a:
34:6b:a1:ac:36:3f:60:17:6e:b7:e7:41:44:1b:19:
2b:c2:9b:12:43:48:ba:f7:29:04:a1:78:a6:76:8e:
0b:bd:7c:1d:4c:32:97:ba:39:41:41:43:09:8f:35:
5f:3b:55:81:a2:30:4e:e1:71:50:86:1c:76:04:b5:
f8:61:a6:56:47:ca:8c:46:12:8e:a2:57:70:f3:2d:
6a:20:57:29:ca:8e:51:7b:63:01:4a:51:6a:e1:63:
9b:35:c8:b8:89:5e:16:ae:6b:86:6b:04:d8:24:61:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:92:92:A4:39:D7:5C:1C:82:8B:F4:8B:17:8D:CF:33:0B:E5:92
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1c:f7:af:f5:13:80:7d:a5:c7:09:89:fd:85:12:a4:87:1a:
84:05:db:25:00:d9:e5:46:a4:05:8d:f7:85:df:70:0f:25:b9:
88:bf:61:21:af:50:63:d6:47:c1:d1:87:2d:26:9a:4a:5f:5c:
d0:54:74:aa:b5:56:7a:50:47:3a:ec:00:0f:1c:71:2f:11:42:
aa:36:a0:ba:09:a5:f8:4a:d6:63:87:2a:41:b8:e9:a5:3c:68:
11:bc:a5:69:cb:87:1c:eb:35:d5:6c:fa:2b:19:09:a4:c2:34:
89:77:e6:24:9a:96:ad:a3:8d:84:40:f0:95:a4:fc:1b:a7:1c:
99:a4:84:6f:7b:c4:c1:d5:a1:75:43:e2:af:b0:04:05:01:2f:
34:62:eb:0d:f0:7e:bb:0d:f9:2c:7e:57:45:1b:e5:4f:c4:b0:
35:20:2a:5d:4c:09:38:22:1e:47:0c:43:a5:ac:2e:8d:f9:74:
68:ae:05:01:77:f7:ac:14:03:bb:4f:37:f5:32:6d:85:c8:97:
9a:65:6c:80:12:9b:84:79:25:84:6b:3b:66:18:c4:a6:f3:0b:
63:8a:e3:30:5a:19:b1:04:38:da:71:9f:0b:48:36:ab:ea:d5:
19:50:b2:6b:6e:b1:69:d5:ba:dd:e8:fc:fc:90:d3:5e:eb:50:
26:f3:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:16:39 2025 by rpki-client