Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: irJ2cYlBPolvt8zEZFfo+q7Obxq+E0QQzBQmZufIDqI=
Subject key identifier: 2F:CD:2B:AE:68:E0:CF:D4:50:18:D5:19:01:CD:78:20:C9:F5:EA:BE
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 0198D4A80D119E8D9CFCE01472BA69BEBB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 115E
Signing time: Sat 23 Aug 2025 02:00:39 +0000
Manifest this update: Sat 23 Aug 2025 02:00:39 +0000
Manifest next update: Sun 24 Aug 2025 02:00:39 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: 3y07qgbqy3MLva4yDfW5bb+1ltrL0T3vS4jJVuYrh0Y=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0d:11:9e:8d:9c:fc:e0:14:72:ba:69:be:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Aug 23 02:00:39 2025 GMT
Not After : Aug 24 02:00:39 2025 GMT
Subject: CN=2fcd2bae68e0cfd45018d51901cd7820c9f5eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:fc:09:27:6c:e1:86:57:8d:92:02:a5:12:
0d:f9:e9:95:dc:5c:26:7e:e9:15:2a:60:52:61:dd:
4a:8a:73:46:f0:69:da:33:c2:c1:49:3e:fb:70:30:
95:73:29:25:03:91:a2:59:f3:24:b4:51:3c:c6:75:
42:a7:ef:ba:07:fc:87:20:9d:f9:00:06:30:9d:5d:
6f:b1:d0:4d:c4:8a:a0:be:5a:dd:14:9e:f6:49:09:
e3:99:d9:3e:af:f9:47:d6:e5:1a:d6:73:55:8c:5f:
aa:e5:c2:28:1b:1b:67:a8:f1:44:ee:03:30:a2:8d:
ef:a6:c6:0f:9a:9a:5d:07:f5:65:50:99:29:07:3c:
2e:93:62:97:7c:41:e4:e5:bc:c4:49:f9:3e:b9:6f:
a7:e5:b7:f1:8c:7b:6f:08:1c:6b:5a:d7:37:d9:bf:
69:b2:bd:1d:e4:e0:f3:81:bb:c6:91:74:69:ad:ca:
0e:9a:a9:94:c7:be:50:b0:ac:50:8c:25:da:fa:09:
81:4f:91:37:1a:30:9e:cb:51:01:54:02:24:a0:8e:
60:78:79:40:7d:f4:1b:05:90:aa:d3:f3:6a:15:db:
7d:2d:54:cb:38:04:50:ea:0b:01:0c:15:bf:a7:11:
2e:e7:7b:69:5d:e7:75:8a:eb:79:40:7b:7c:0a:8c:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CD:2B:AE:68:E0:CF:D4:50:18:D5:19:01:CD:78:20:C9:F5:EA:BE
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c1:73:f3:ca:f0:15:3f:5d:a6:8e:98:5a:46:f4:b7:e9:d9:
9d:1e:e6:9b:1f:5e:8d:ce:51:d9:d8:b8:a5:10:31:70:5e:e4:
60:03:57:84:5b:67:79:a7:7c:ce:21:52:2c:e0:31:a2:72:27:
e1:51:f3:c6:ef:f6:f4:99:06:9a:c6:4f:ae:9e:0f:2b:80:a7:
f6:ad:ef:93:22:10:f9:52:e4:72:d2:59:6a:a2:7a:bb:49:87:
51:bd:fc:11:9d:bf:79:f3:58:dd:4b:04:6f:d7:7a:c5:62:c0:
a5:3c:47:3f:2f:bf:2c:3e:74:49:c9:6d:f9:24:f7:cf:ce:a2:
6b:0a:cc:45:70:32:b3:76:60:58:11:70:b7:e4:85:73:02:be:
f4:58:5a:dc:7d:3a:af:4e:0d:af:b5:45:da:23:bd:05:e8:ba:
0c:e2:67:0b:1e:d4:aa:a9:5d:c7:85:14:28:10:cf:8c:4c:f3:
81:22:26:50:71:7f:f6:7f:a4:82:6d:5e:d9:fc:38:9e:1c:56:
1a:96:0f:8d:95:75:4d:a7:bd:18:8a:8e:ad:89:43:86:f5:37:
6f:21:a1:f7:40:30:8d:a9:50:59:9b:53:77:83:2e:a6:bd:a3:
c0:c2:1e:18:5b:87:73:c1:4e:1d:76:83:48:cb:cd:85:ec:8c:
46:dc:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:48 2025 by rpki-client