Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: vZFvJjdEII1XQnDksr6tLBQMGlNji6rzEgkJCSuvnd0=
Subject key identifier: 88:E2:4F:64:BD:7E:05:E9:19:74:A7:D4:5F:95:29:D1:FD:D0:6A:C8
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 0199FC58C210FCB81FC0DB6BFC4384E8BA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=)
2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: n4E6h++05j2FVG9zLQEe8Rr98nHysAtaVZIoW6XTec0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c2:10:fc:b8:1f:c0:db:6b:fc:43:84:e8:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=88e24f64bd7e05e91974a7d45f9529d1fdd06ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:ee:d0:a9:eb:da:72:db:74:f2:af:56:5b:
52:87:75:e5:bd:e6:0a:2a:e6:c3:8f:bb:67:83:a9:
24:23:5d:50:63:a2:44:9f:9b:b1:84:f0:8f:0b:b3:
30:49:b4:3e:ed:1e:12:4c:8e:ba:0d:6a:c5:02:ab:
9f:d2:20:2c:c6:7e:36:03:3c:17:75:f0:7a:54:27:
5a:be:8a:67:d4:10:4c:a6:1d:78:de:2e:30:88:dc:
53:57:a0:45:70:d7:e2:05:1f:d2:91:62:7b:ac:31:
31:fa:fc:97:ee:e0:b4:62:9b:26:49:1d:6f:dc:4b:
11:b9:f6:9f:e8:f7:b7:fd:4f:f1:99:65:04:b4:05:
be:c0:66:90:d7:d6:9b:81:a5:02:68:06:bd:d1:92:
23:e2:9c:0b:14:55:2f:d8:cc:4f:7b:d4:f5:00:99:
87:50:06:13:83:78:e0:f7:a0:7a:0b:42:bb:69:04:
88:52:ac:2f:e9:11:00:6a:0f:53:c5:6b:cc:f4:1f:
83:25:c5:57:24:18:ac:c2:bf:74:ba:f6:46:1e:d0:
15:8f:ae:75:9f:9b:bf:7a:43:52:66:f2:a9:b7:f5:
40:7c:95:f5:9a:f1:63:f8:46:6a:d0:20:0f:74:43:
ef:bf:92:30:af:ae:5f:3f:a9:da:a2:81:4f:68:0d:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:4F:64:BD:7E:05:E9:19:74:A7:D4:5F:95:29:D1:FD:D0:6A:C8
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:32:12:b4:8d:0d:82:84:48:ef:3e:59:81:6e:99:ea:2d:3d:
88:4a:f6:cc:ab:cf:08:80:6d:d1:f3:1d:d3:a5:8c:19:90:34:
ba:ea:4f:ac:3d:b3:c4:cb:d9:85:57:c0:53:e1:21:50:b0:92:
7e:ff:d2:64:ed:54:27:6c:de:94:b8:a0:b1:61:1d:2c:52:b7:
74:fb:b4:92:4a:21:fd:41:30:bf:03:cd:20:3b:2a:03:46:61:
ed:91:9c:b5:23:d6:52:22:fb:4a:af:49:59:50:fd:3e:da:ad:
86:64:3d:4c:47:5d:46:f2:26:df:24:6e:25:36:a6:9c:f6:26:
a2:33:a4:6c:97:dd:ed:ef:40:1c:93:3e:8f:24:9b:31:34:db:
bb:f8:0f:e7:ad:f3:d3:e4:a2:5c:ca:50:59:dd:99:7a:4e:2c:
fb:0a:b7:86:65:ed:af:0b:fb:a3:6f:e2:67:09:d9:09:30:51:
6c:b8:bf:71:dd:c9:d1:ed:ae:88:53:25:00:23:cb:4d:8f:0b:
44:b5:4d:d8:cf:d5:a5:be:de:31:da:42:f1:de:78:4b:89:47:
d9:47:a8:71:c1:43:e7:0f:76:7c:71:16:03:dc:94:7c:86:12:
84:4d:67:c9:49:a6:fd:7c:67:65:b2:fe:48:ce:a0:c0:0e:de:
b2:a5:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:04 2025 by rpki-client