Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: yyTHni0PjGm4S7OH6bQ5iYlU4wIgsHTpe8mi9/Dzvk4=
Subject key identifier: E1:F1:87:74:DF:71:17:26:EA:36:E3:FF:0F:82:5D:74:02:7F:BA:B5
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 0196C382BC4EA97201AF80782D65D20DFE19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 104C
Signing time: Mon 12 May 2025 08:00:47 +0000
Manifest this update: Mon 12 May 2025 08:00:47 +0000
Manifest next update: Tue 13 May 2025 08:00:47 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: QZZPquMFjJ1cSnIy2UkayL7VGuuVQT4BoY2TCOX/ISA=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:bc:4e:a9:72:01:af:80:78:2d:65:d2:0d:fe:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: May 12 08:00:47 2025 GMT
Not After : May 13 08:00:47 2025 GMT
Subject: CN=e1f18774df711726ea36e3ff0f825d74027fbab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:6d:5c:41:eb:10:cf:ef:64:5c:ec:09:c2:
ab:9e:e6:c7:e9:1f:fe:cd:1f:8a:35:d8:36:c3:ff:
a6:c7:51:9d:f7:f3:29:38:e7:28:b9:1b:f2:91:c0:
44:30:40:c5:f3:bb:c7:c9:3b:c1:dd:a7:5e:52:ee:
30:00:31:e3:a3:b7:ae:0c:92:9f:dc:a9:4c:74:3b:
13:bd:70:ae:7a:5a:19:a5:ea:b0:2a:0e:3d:6b:2e:
95:02:5e:94:1e:7e:fe:b5:13:98:18:7e:3c:ea:12:
fe:f4:11:9b:a4:0c:96:85:29:f3:b8:ab:db:ef:f1:
51:0f:f8:8f:a3:28:b2:c3:e9:3f:99:ca:af:88:1b:
21:5b:c5:cb:f5:3b:70:9d:3e:83:1c:90:20:e1:12:
e5:13:c7:c5:c7:f2:89:07:ed:93:a8:31:e4:d1:ce:
ab:ec:f2:1a:67:05:6e:a7:16:6e:68:d5:66:8b:aa:
71:33:7f:8b:17:16:73:5c:fd:c7:e8:03:6b:25:cf:
9f:df:14:79:aa:bb:ea:33:71:fe:88:4b:c9:44:1b:
83:b3:be:4e:95:87:fe:ed:7f:cd:ae:5c:07:8c:c2:
f3:24:5f:13:10:d4:3c:0f:27:c7:14:62:44:89:a8:
b4:83:d4:b5:39:13:54:1c:32:ed:da:9b:d5:6f:aa:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F1:87:74:DF:71:17:26:EA:36:E3:FF:0F:82:5D:74:02:7F:BA:B5
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:f6:ce:7e:d2:d1:77:84:d7:66:9f:04:11:25:d8:75:1a:
c2:67:89:36:b3:09:e5:84:a0:bb:9b:29:23:16:18:ff:5e:62:
03:6a:91:46:d2:35:78:af:48:42:9b:64:bd:ea:a5:c4:e2:0e:
eb:b2:dd:77:d4:f9:83:e5:d6:ce:5b:a6:a2:1f:2f:8a:5b:b6:
a3:43:e6:38:5e:02:9b:99:41:4e:84:95:c4:78:c8:af:aa:21:
ad:40:df:92:1d:07:da:b0:94:f2:3a:25:b7:8d:0e:23:bd:a3:
f2:53:6c:db:70:b4:b1:86:ee:2e:09:76:1a:ac:9e:70:f5:1d:
31:06:d4:7b:e1:7a:43:47:56:a0:d0:ff:03:e6:8e:2a:6b:a9:
be:d5:df:d8:44:0b:a9:bb:de:56:7c:f6:f8:3c:71:e4:b7:92:
26:47:30:24:f6:b0:fd:df:52:e2:4f:6e:c9:df:3c:09:7d:12:
9c:89:be:bd:ba:8d:c7:2e:ce:c8:6b:bc:9f:f6:8f:ce:9c:cb:
2b:51:a6:e6:d5:fc:21:b4:35:3b:cf:91:e5:34:49:32:a1:80:
7a:10:24:74:ee:23:14:5e:2f:89:c3:c7:b1:eb:56:e7:1c:6e:
cb:28:ff:7a:19:ec:8b:54:e3:fa:a2:64:ec:9a:f8:8c:d8:ba:
a6:30:3f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgrxOqXIBr4B4LWXSDf4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky
MGFlOWYwHhcNMjUwNTEyMDgwMDQ3WhcNMjUwNTEzMDgwMDQ3WjAzMTEwLwYDVQQD
EyhlMWYxODc3NGRmNzExNzI2ZWEzNmUzZmYwZjgyNWQ3NDAyN2ZiYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aRtXEHrEM/vZFzsCcKrnubH6R/+
zR+KNdg2w/+mx1Gd9/MpOOcouRvykcBEMEDF87vHyTvB3adeUu4wADHjo7euDJKf
3KlMdDsTvXCueloZpeqwKg49ay6VAl6UHn7+tROYGH486hL+9BGbpAyWhSnzuKvb
7/FRD/iPoyiyw+k/mcqviBshW8XL9TtwnT6DHJAg4RLlE8fFx/KJB+2TqDHk0c6r
7PIaZwVupxZuaNVmi6pxM3+LFxZzXP3H6ANrJc+f3xR5qrvqM3H+iEvJRBuDs75O
lYf+7X/NrlwHjMLzJF8TENQ8DyfHFGJEiai0g9S1ORNUHDLt2pvVb6pwwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHxh3TfcRcm6jbj/w+CXXQCf7q1MB8GA1UdIwQY
MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct
NDIxYTk5YmRkNzhmLzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm
LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqj2zn7S
0XeE12afBBEl2HUawmeJNrMJ5YSgu5spIxYY/15iA2qRRtI1eK9IQptkveqlxOIO
67Ldd9T5g+XWzlumoh8vilu2o0PmOF4Cm5lBToSVxHjIr6ohrUDfkh0H2rCU8jol
t40OI72j8lNs23C0sYbuLgl2GqyecPUdMQbUe+F6Q0dWoND/A+aOKmupvtXf2EQL
qbveVnz2+Dxx5LeSJkcwJPaw/d9S4k9uyd88CX0SnIm+vbqNxy7OyGu8n/aPzpzL
K1Gm5tX8IbQ1O8+R5TRJMqGAehAkdO4jFF4vicPHsetW5xxuyyj/ehnsi1Tj+qJk
7Jr4jNi6pjA/Ng==
-----END CERTIFICATE-----
Generated at Mon May 12 18:32:58 2025 by rpki-client