Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: y6ntkx3xLXsUCD9m8RZwEhUoP3+3lemWQN6if7S8DqM=
Subject key identifier: 73:6C:C6:32:26:3A:D5:F1:B3:1D:BB:7F:56:47:25:94:25:AC:3E:84
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 0196A276B57281288269D990C2F6AB2AB277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 22:00:10 +0000
Manifest this update: Mon 05 May 2025 22:00:10 +0000
Manifest next update: Tue 06 May 2025 22:00:10 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: bDSDYQ+PRSz5jSatzJhOrKi0ZNh3m9WCnmAk3E/U4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:b5:72:81:28:82:69:d9:90:c2:f6:ab:2a:b2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: May 5 22:00:10 2025 GMT
Not After : May 6 22:00:10 2025 GMT
Subject: CN=736cc632263ad5f1b31dbb7f5647259425ac3e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:5d:33:b6:ba:1f:86:a5:7a:72:7e:72:26:
51:f6:48:c0:88:ba:d4:76:ed:8a:68:d9:96:d0:86:
02:5c:a8:12:c7:40:af:49:e5:20:51:be:a0:0c:74:
ac:a4:81:d7:f1:b1:9d:d0:34:e3:aa:f7:97:7e:55:
39:e5:c6:6d:70:f7:a5:83:a3:57:26:9b:72:ed:01:
8a:d7:7e:48:bc:28:b6:ad:76:4c:1f:22:4d:22:89:
b8:32:20:1d:51:6d:07:70:79:5a:b5:22:d5:64:91:
cb:79:6f:c2:41:df:86:98:4d:69:6e:48:7a:8a:15:
44:3d:f1:67:4f:c0:c6:8e:63:41:7e:c2:0c:33:b8:
ab:9c:0a:62:fe:0d:6e:e8:27:54:38:55:b3:0c:33:
7a:ab:c0:bf:ee:98:55:18:47:fa:c8:f3:39:db:e7:
37:d3:4c:9f:e5:0d:46:30:8c:f1:15:14:4a:45:62:
2a:b3:88:39:97:f8:25:73:9c:2a:a8:90:32:e9:b9:
d1:e9:6b:48:b5:af:7c:6b:94:c8:6d:f1:2b:98:2a:
b1:76:c3:85:2f:0b:fd:e3:56:da:79:e7:ba:6a:55:
13:d9:e4:25:a3:36:31:35:92:f5:a4:a1:98:81:34:
a6:dd:1a:fb:fc:9d:df:e5:03:d1:1c:43:98:c1:bc:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:C6:32:26:3A:D5:F1:B3:1D:BB:7F:56:47:25:94:25:AC:3E:84
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f2:00:ad:f1:bf:83:7b:1f:87:3e:a4:b1:a6:ca:2b:f9:2f:
7f:c3:32:e3:68:c3:a3:83:95:53:af:bc:17:34:57:33:ef:a8:
79:8b:1d:d7:00:aa:bf:30:4f:4f:c4:29:57:78:78:a6:53:4e:
da:19:6c:28:26:6d:6d:7c:4b:f4:dd:c7:7c:a2:d1:ed:79:09:
71:a6:bb:e2:5a:ad:14:72:46:12:28:c1:c3:2d:88:06:9b:8c:
b9:92:ea:37:aa:98:6e:b2:21:0b:59:0c:9b:88:f6:49:42:52:
32:5c:91:90:6e:53:25:2b:10:35:6e:b9:2f:b1:03:6d:bd:a8:
f5:46:34:75:11:6b:f8:d2:aa:08:b1:07:ba:fd:71:9e:b1:f1:
4c:90:91:9f:3b:c9:9b:cd:60:a9:20:43:8e:e3:bd:1c:a9:f4:
74:0e:ab:c1:71:4b:b3:f4:9c:63:76:3f:7d:a3:8a:43:8c:f8:
9b:b3:e5:b7:df:c1:38:a8:23:b3:00:d2:0a:94:ed:9c:a4:fb:
9d:84:cc:69:88:8f:eb:34:e7:ad:26:e2:14:d6:a2:91:a6:e1:
30:a6:cf:57:43:ac:a5:42:d2:0b:bd:88:56:48:c1:b4:ec:f1:
bf:87:8f:fb:37:35:8a:b9:66:5e:38:d1:75:be:94:d9:14:aa:
df:cb:d2:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaidrVygSiCadmQwvarKrJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh
ZjM3YzYwHhcNMjUwNTA1MjIwMDEwWhcNMjUwNTA2MjIwMDEwWjAzMTEwLwYDVQQD
Eyg3MzZjYzYzMjI2M2FkNWYxYjMxZGJiN2Y1NjQ3MjU5NDI1YWMzZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt9dM7a6H4alenJ+ciZR9kjAiLrU
du2KaNmW0IYCXKgSx0CvSeUgUb6gDHSspIHX8bGd0DTjqveXflU55cZtcPelg6NX
Jpty7QGK135IvCi2rXZMHyJNIom4MiAdUW0HcHlatSLVZJHLeW/CQd+GmE1pbkh6
ihVEPfFnT8DGjmNBfsIMM7irnApi/g1u6CdUOFWzDDN6q8C/7phVGEf6yPM52+c3
00yf5Q1GMIzxFRRKRWIqs4g5l/glc5wqqJAy6bnR6WtIta98a5TIbfErmCqxdsOF
Lwv941baeee6alUT2eQlozYxNZL1pKGYgTSm3Rr7/J3f5QPRHEOYwbx/zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNsxjImOtXxsx27f1ZHJZQlrD6EMB8GA1UdIwQY
MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt
Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0
LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPIArfG/
g3sfhz6ksabKK/kvf8My42jDo4OVU6+8FzRXM++oeYsd1wCqvzBPT8QpV3h4plNO
2hlsKCZtbXxL9N3HfKLR7XkJcaa74lqtFHJGEijBwy2IBpuMuZLqN6qYbrIhC1kM
m4j2SUJSMlyRkG5TJSsQNW65L7EDbb2o9UY0dRFr+NKqCLEHuv1xnrHxTJCRnzvJ
m81gqSBDjuO9HKn0dA6rwXFLs/ScY3Y/faOKQ4z4m7Plt9/BOKgjswDSCpTtnKT7
nYTMaYiP6zTnrSbiFNaikabhMKbPV0OspULSC72IVkjBtOzxv4eP+zc1irlmXjjR
db6U2RSq38vSDA==
-----END CERTIFICATE-----
Generated at Tue May 6 01:32:24 2025 by rpki-client