Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: OGpQaGEAJqE0zZuHMCW+rOOxnkySdCv813wCwDfaKvU=
Subject key identifier: C1:13:A0:E7:60:5D:1C:07:22:DA:F6:63:3C:0C:47:8F:79:17:20:B8
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 019A04481E1724583EFA14B8A78B2871E966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0DC6
Signing time: Tue 21 Oct 2025 01:00:26 +0000
Manifest this update: Tue 21 Oct 2025 01:00:26 +0000
Manifest next update: Wed 22 Oct 2025 01:00:26 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: c8YIIoqond02k92MLdj1bHWQ8Hj+xKVqKkPwuwCTGtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:1e:17:24:58:3e:fa:14:b8:a7:8b:28:71:e9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Oct 21 01:00:26 2025 GMT
Not After : Oct 22 01:00:26 2025 GMT
Subject: CN=c113a0e7605d1c0722daf6633c0c478f791720b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:12:b0:ef:9b:11:31:8c:2d:59:92:08:18:
08:80:77:e5:a2:32:1e:d2:fa:78:e0:b2:2b:df:bb:
60:7d:6a:ba:69:84:25:9b:5e:c2:58:ea:6f:de:8c:
b7:1f:dc:7c:f7:bd:52:be:bc:cd:05:84:6b:ba:5b:
f6:d4:c3:c9:ed:18:00:0f:38:7f:0e:c0:71:98:fb:
74:c1:f0:a2:20:5e:8a:28:81:4b:6b:03:6c:ac:cb:
73:9a:3b:8f:ae:f5:54:30:b6:18:97:6e:9b:91:a6:
cb:b1:c2:fc:56:86:6b:b4:c3:bf:f2:48:62:30:b4:
93:25:df:de:a2:1c:ca:0e:98:4e:52:7d:a5:62:5d:
f6:4f:1e:3a:59:a0:0b:2f:42:18:f6:ce:d7:c5:3d:
14:0a:c2:a6:31:1b:f2:43:39:74:65:6a:ad:6b:f2:
df:80:d3:f3:f8:b8:01:dc:14:93:91:93:ba:6e:96:
aa:1b:aa:7d:57:0c:81:f6:25:d3:36:7c:ab:b0:cb:
66:d3:9f:46:1c:f4:03:0b:f0:b5:96:e2:71:72:aa:
67:04:52:89:52:29:87:40:28:c8:d1:9e:eb:78:c7:
0a:23:c5:03:de:1f:60:bd:6b:69:f4:f5:8c:94:74:
45:ab:73:c1:be:20:26:d1:2c:a9:9d:5a:01:ab:24:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:A0:E7:60:5D:1C:07:22:DA:F6:63:3C:0C:47:8F:79:17:20:B8
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f6:ab:4e:0e:f6:de:18:c1:9e:10:d7:6d:25:4c:1d:19:53:
bd:3e:5d:09:a8:9d:40:2f:71:32:7b:f9:12:0d:9a:25:99:6e:
06:af:51:f8:f4:93:09:0f:5e:77:3c:5b:a1:06:e2:20:82:58:
cf:e6:bc:78:cb:83:f7:03:9e:ed:fe:5b:21:d7:d0:37:ee:df:
36:59:8f:b4:49:1d:8a:75:d2:50:4d:dc:cd:97:03:f5:8b:e6:
23:ea:ad:79:6d:74:e5:5b:e3:84:e1:1f:29:e9:db:70:df:73:
10:51:c6:67:c5:26:84:10:c2:3d:16:b1:96:db:48:29:f6:1e:
13:a7:1f:a8:e6:27:7d:3a:23:05:66:57:44:fa:c2:aa:17:39:
cb:14:6c:5a:89:63:75:5f:96:6a:5b:53:4f:04:6e:8a:d9:36:
c5:45:c1:d8:cf:74:13:34:00:14:90:96:db:0a:5f:74:bd:63:
d6:68:11:99:7b:e0:16:f4:59:c2:3c:ae:fb:a3:7a:c2:14:44:
47:19:92:98:16:5f:f5:9f:b4:79:ff:ef:ec:20:bf:ce:65:db:
19:a3:24:52:e1:8c:cd:23:a4:bf:3b:b8:aa:c6:d1:23:d8:c8:
11:99:12:e7:2d:b4:b3:65:99:54:8e:d5:64:8b:6d:dc:e5:9f:
7d:d8:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:35 2025 by rpki-client