Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: WGiJf9tclDw01Nb8yYkCqNKM/wflEc5OBMbOF1SV6TQ=
Subject key identifier: 16:9F:01:99:75:91:1E:21:3C:E1:0B:8C:0E:3F:FF:C7:FC:60:F6:E5
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 0197BA7D0CD05E26FBC644B1C7A539B27D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 07:00:46 +0000
Manifest this update: Sun 29 Jun 2025 07:00:46 +0000
Manifest next update: Mon 30 Jun 2025 07:00:46 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: arhYK8zd+zP7IizM4VPoODzOUxVl9Qoo2goHe5nqODw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:0c:d0:5e:26:fb:c6:44:b1:c7:a5:39:b2:7d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Jun 29 07:00:46 2025 GMT
Not After : Jun 30 07:00:46 2025 GMT
Subject: CN=169f019975911e213ce10b8c0e3fffc7fc60f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:ff:26:b1:9b:da:80:b9:07:1f:d1:1b:ed:
3e:3a:bd:43:68:ff:91:4f:f2:16:1f:24:12:0b:a7:
ee:1f:0b:d0:c1:2e:45:ab:39:1d:df:28:bb:c8:57:
a1:2a:95:f8:36:a3:f4:6c:6b:d9:5e:50:d5:e9:68:
cb:83:b1:a7:14:6b:91:82:24:7a:4e:90:06:11:32:
5b:61:47:fd:36:c8:6d:7b:9c:ea:e5:e6:66:40:4b:
f8:47:c8:e2:45:3f:19:63:0f:8e:7b:78:48:86:91:
3a:e5:b2:b6:e5:dd:40:45:33:7c:9e:f2:c4:2a:96:
e1:3c:3e:f6:b3:69:ed:5b:64:14:cb:86:32:70:16:
16:a1:37:6b:53:ae:bd:9b:c7:b4:17:fc:9b:42:15:
8f:00:9a:f7:11:12:e8:62:43:7e:7e:6e:18:de:a4:
11:d4:2f:d7:90:66:33:4a:56:ae:a3:33:e1:2a:32:
9e:cf:95:61:13:a8:f9:cf:22:ba:a7:30:4f:21:6b:
24:0e:67:64:e5:a5:43:c0:bf:60:cf:59:71:8b:f4:
31:a3:2c:35:d3:76:0a:85:83:fc:ef:1d:a5:c0:e2:
2e:43:52:ad:a1:94:e4:c8:95:7b:85:bf:97:1c:a4:
34:31:2f:3d:0b:45:68:7e:e2:f3:6a:de:6e:56:25:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:01:99:75:91:1E:21:3C:E1:0B:8C:0E:3F:FF:C7:FC:60:F6:E5
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fb:a1:fe:09:26:41:ff:5d:ba:e0:3e:96:e3:e6:3b:c5:55:
20:94:d3:21:7a:d0:d7:9e:31:b4:d2:54:f2:bc:85:60:b6:bb:
6a:eb:53:05:b1:26:39:8c:13:3a:c2:e7:ea:7b:ce:76:de:e3:
44:7b:c1:8f:59:68:92:b5:14:bd:87:ad:d0:a4:d8:9b:a6:41:
e9:84:6a:31:d4:18:b0:97:93:c9:c0:13:84:62:64:b5:bb:6e:
9d:67:26:c5:8d:fc:a8:33:b3:dd:bc:4f:81:f2:84:89:a8:7d:
1b:54:93:5d:f3:ce:65:20:59:11:fb:35:f4:74:6c:61:ee:98:
35:32:95:18:1c:19:a0:77:41:da:b5:ce:e7:af:1f:6a:dc:5f:
92:4b:1e:26:7f:b2:3a:4e:49:c7:00:8a:d7:ba:cf:96:fd:32:
81:ba:32:56:7c:ac:75:0c:84:37:25:e3:25:8a:d5:a4:a7:b5:
a8:85:3a:2c:d3:c2:82:67:72:1e:8a:fd:2b:ab:01:7d:b8:59:
4f:7a:8c:e2:98:11:ff:94:1c:83:61:ce:d1:c0:e2:5b:e7:35:
f4:06:ab:f8:ab:c2:fb:25:0d:bc:f8:e4:02:b4:ed:fc:0e:2c:
43:60:a4:ab:34:80:ba:ce:a3:32:36:9e:07:d4:4a:51:9f:4f:
c0:e0:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:41 2025 by rpki-client