Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: FKzwYyvZ6d5/ZhuXUFkwN0ZjfeBZg9Zv6gihj7o/khU=
Subject key identifier: C8:48:A8:D5:55:6E:A2:4E:71:D8:59:A1:6D:30:E5:40:D0:21:E7:F8
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 0199FBEB4C481BDF622537798CCD3948A31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: jYpohOcUM7fztUCVuzOtD6+0/GaEbQ2D/0869FeZGB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4c:48:1b:df:62:25:37:79:8c:cd:39:48:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=c848a8d5556ea24e71d859a16d30e540d021e7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:fd:9a:55:2f:7c:7a:df:ca:9e:30:3b:fa:
59:d7:74:0d:7f:13:a3:9d:ee:ee:b4:b4:1f:fb:63:
ce:3a:61:99:c1:95:83:15:13:eb:2d:31:a8:74:b5:
79:e1:2d:35:43:46:98:f6:77:7b:ea:92:68:8f:86:
ce:1d:ec:e9:08:0d:e4:47:5e:73:fa:ba:60:25:86:
ff:71:69:38:c9:ea:07:0d:7f:3b:b9:16:f0:3e:e1:
92:8e:d0:b2:2e:6c:c8:3a:48:27:13:7f:65:4c:7b:
ce:94:72:69:5f:5e:b8:3f:7f:69:92:c2:ba:26:1a:
a4:2d:a7:c0:35:47:62:49:96:7c:a8:6b:f3:1f:fc:
c1:de:8f:6a:9f:3d:24:9f:8e:d7:d3:ba:9a:1e:2a:
ba:31:c1:72:e2:88:85:46:34:ed:51:49:c0:22:50:
eb:7d:2c:22:62:d4:10:11:d6:ea:d2:3a:b9:e6:bc:
5d:72:e7:53:f0:34:01:02:4c:ce:f8:3d:84:54:2e:
24:5c:f4:13:c0:96:96:db:c5:cd:4f:38:cc:54:19:
6b:5d:bf:c5:e3:bb:a1:3c:22:23:4c:1e:e5:d2:52:
92:88:ed:de:e5:5a:50:57:9f:67:26:22:41:21:6b:
b3:b3:6d:19:b5:90:70:72:a9:0f:22:9c:8c:be:3b:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:A8:D5:55:6E:A2:4E:71:D8:59:A1:6D:30:E5:40:D0:21:E7:F8
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:08:42:84:fe:b9:44:eb:b7:fe:6b:fd:fa:04:d6:c3:4d:
12:5b:9f:79:13:43:9b:72:f9:c4:27:f7:2b:ae:5e:9c:d8:e9:
94:d5:fe:56:9c:a9:80:ba:17:b7:6a:e7:c0:ff:ea:1b:97:8d:
c6:43:d9:1a:e8:21:ba:61:6c:bd:e9:ef:2a:8c:2f:a9:9d:25:
3f:53:99:87:53:e8:5e:ba:3a:53:5e:0e:9c:8e:c7:20:bb:5b:
32:d9:86:29:7d:8f:a5:6d:30:4a:85:c4:b9:cc:60:ec:b9:09:
33:d9:b0:ce:df:63:d5:dd:82:f8:a5:65:af:da:5c:7e:0d:46:
d8:21:18:1f:37:61:44:e4:8a:e1:f2:95:c5:95:52:45:5e:f3:
09:78:e3:0a:1f:a0:5b:2e:ec:36:da:38:3c:a1:96:b2:a3:ea:
ac:99:d0:8a:a8:f0:24:89:af:c5:86:9e:b2:0a:aa:2f:6f:3a:
76:0a:a9:ad:2f:e6:2d:ee:0f:f9:4b:3c:3d:e0:0e:a3:9e:4a:
fe:56:74:c2:cd:73:53:29:0b:49:4b:b0:b2:b3:07:52:14:c6:
90:a3:1e:9e:5f:c1:d3:88:54:ef:a1:ee:38:4f:66:ae:de:ae:
a9:a5:ec:10:cd:2b:4a:38:26:9c:29:ed:fe:80:1a:90:82:cf:
17:4e:e2:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760xIG99iJTd5jM05SKMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh
ZjM3YzYwHhcNMjUxMDE5MTAwMjA1WhcNMjUxMDIwMTAwMjA1WjAzMTEwLwYDVQQD
EyhjODQ4YThkNTU1NmVhMjRlNzFkODU5YTE2ZDMwZTU0MGQwMjFlN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIL9mlUvfHrfyp4wO/pZ13QNfxOj
ne7utLQf+2POOmGZwZWDFRPrLTGodLV54S01Q0aY9nd76pJoj4bOHezpCA3kR15z
+rpgJYb/cWk4yeoHDX87uRbwPuGSjtCyLmzIOkgnE39lTHvOlHJpX164P39pksK6
JhqkLafANUdiSZZ8qGvzH/zB3o9qnz0kn47X07qaHiq6McFy4oiFRjTtUUnAIlDr
fSwiYtQQEdbq0jq55rxdcudT8DQBAkzO+D2EVC4kXPQTwJaW28XNTzjMVBlrXb/F
47uhPCIjTB7l0lKSiO3e5VpQV59nJiJBIWuzs20ZtZBwcqkPIpyMvjs0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhIqNVVbqJOcdhZoW0w5UDQIef4MB8GA1UdIwQY
MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt
Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0
LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTkIQoT+
uUTrt/5r/foE1sNNElufeRNDm3L5xCf3K65enNjplNX+VpypgLoXt2rnwP/qG5eN
xkPZGughumFsvenvKowvqZ0lP1OZh1PoXro6U14OnI7HILtbMtmGKX2PpW0wSoXE
ucxg7LkJM9mwzt9j1d2C+KVlr9pcfg1G2CEYHzdhROSK4fKVxZVSRV7zCXjjCh+g
Wy7sNto4PKGWsqPqrJnQiqjwJImvxYaesgqqL286dgqprS/mLe4P+Us8PeAOo55K
/lZ0ws1zUykLSUuwsrMHUhTGkKMenl/B04hU76HuOE9mrt6uqaXsEM0rSjgmnCnt
/oAakILPF07iUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:43 2025 by rpki-client