Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: p7CW136t8W8gHemrlYtJ0JcymYQFaj7Ec0sQ5HfOL1U=
Subject key identifier: 0E:9F:B2:01:14:C5:E9:1A:85:91:5C:FE:88:42:20:1E:37:0D:15:6D
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 0198D660B7CADC32797688335EE45656945C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: BWAgbqdd6abec3lrlnRVbVpJD9T32GN/duiiR+7DJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b7:ca:dc:32:79:76:88:33:5e:e4:56:56:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=0e9fb20114c5e91a85915cfe8842201e370d156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:1e:42:78:66:50:13:96:ba:18:84:af:2f:
ae:57:40:7a:8f:f2:32:2e:81:76:c4:5c:7a:8d:96:
8e:04:a2:f4:ab:2b:9b:40:44:32:ff:04:f4:12:15:
88:41:c9:33:0f:d6:eb:c7:c9:a5:d0:16:bb:77:de:
38:cb:b5:c2:e9:f7:a3:6d:09:f6:61:48:0d:bd:07:
61:2d:b1:10:1f:fd:de:ab:dc:62:e0:bd:2e:5b:72:
e4:5b:55:16:b2:ad:f1:8e:53:f8:04:e2:9e:3e:56:
43:4c:b7:c8:6e:3d:33:ee:b0:e4:e5:76:0b:d2:b7:
68:0b:8b:19:c2:24:c8:11:03:57:3d:08:00:21:95:
7d:14:05:14:79:d0:16:f8:71:12:a2:88:36:85:75:
ce:eb:72:c9:4e:82:40:9e:89:d8:79:c2:41:cd:c6:
b7:66:e7:9e:ee:a8:a2:35:18:e5:21:58:c7:38:c9:
9e:b8:50:e0:de:d1:b1:61:c9:6c:f5:9e:4a:db:1c:
9b:22:e8:8c:93:29:bc:2b:bd:0b:92:dd:27:b8:dc:
bd:2d:8f:96:4f:c6:60:4c:cf:1e:1e:c3:be:80:9b:
de:04:31:9b:97:3f:15:7e:c5:dd:75:d5:02:5a:5e:
19:02:1e:e2:80:cc:cf:75:0b:c0:ce:a7:a7:df:57:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:B2:01:14:C5:E9:1A:85:91:5C:FE:88:42:20:1E:37:0D:15:6D
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:01:b6:ab:ef:3d:0a:da:d7:99:40:d2:80:9c:b5:4c:cf:9a:
6a:89:db:42:45:21:e9:62:c7:fe:04:6b:41:2e:e5:47:c5:d7:
90:65:23:02:52:69:56:8c:81:e4:e7:fb:fc:d3:b7:12:b3:fb:
d1:d7:fc:db:9f:9d:b9:7b:3d:58:98:19:9a:5b:b4:1f:97:fb:
08:dc:d8:0f:99:60:e1:64:3b:10:74:16:46:a5:c3:b7:94:d9:
74:47:ee:e9:d3:33:e1:5e:6b:e8:18:7f:23:59:c7:43:77:dc:
9f:05:0a:36:1d:11:db:75:d7:b4:01:7f:5f:2d:6f:80:fb:f6:
e8:4c:12:a6:0a:bf:d9:e1:e6:91:51:93:82:1e:76:75:13:0d:
42:6c:0b:56:ec:00:4d:55:2a:89:8d:1f:4d:72:2a:25:9b:9f:
c1:c9:fd:9c:b7:d0:77:3f:2b:27:fa:b8:d6:35:f4:c2:a5:dd:
da:60:f8:ae:49:7d:60:3e:d8:a9:4c:b5:bf:3e:b3:80:a9:d9:
04:30:a8:b2:f8:7a:5a:8c:66:e3:bc:8f:b7:a7:a2:a1:e5:75:
db:30:77:5e:d1:41:44:e3:04:9e:4b:e9:e9:22:30:4c:da:8e:
2e:29:b5:60:cc:79:27:e9:58:27:4d:b1:85:2f:ed:90:42:00:
d2:06:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:48 2025 by rpki-client