Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: eEuz1Y+SpF1h5l4zR8CF4uoX4agTe5HzBXOPK6lL3Zc=
Subject key identifier: 9B:1C:6E:66:F7:AE:9E:10:06:67:49:23:45:1D:05:67:47:68:24:0E
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 0197CA5E65B23255DF98F1217ACE4E2561AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 09:01:13 +0000
Manifest this update: Wed 02 Jul 2025 09:01:13 +0000
Manifest next update: Thu 03 Jul 2025 09:01:13 +0000
Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=)
2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: 4iir+KxzQIAM/lIHtw1nK1OnM+HxmeprLOVBbqrcgpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:65:b2:32:55:df:98:f1:21:7a:ce:4e:25:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Jul 2 09:01:13 2025 GMT
Not After : Jul 3 09:01:13 2025 GMT
Subject: CN=9b1c6e66f7ae9e1006674923451d05674768240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:f0:01:c3:07:ca:e6:1a:3d:ce:ac:05:42:
c8:89:2b:1c:c4:3a:79:0d:56:14:a1:37:7d:23:be:
31:b1:55:6d:8a:9e:ff:cc:5d:bf:cf:5a:72:9c:d3:
d6:50:d5:b6:15:9a:d4:84:38:62:06:49:25:1e:2c:
13:49:c4:61:50:a3:e7:9a:ca:39:24:d0:2e:87:54:
29:b0:a3:1f:ef:ac:93:19:d7:68:99:0c:69:a1:b9:
2b:1e:d0:41:5a:ca:90:4f:b1:2b:85:c9:fd:c5:f8:
5d:b6:d1:2b:c2:d3:f1:4c:2b:fb:b7:e1:32:f5:0c:
09:1f:3d:e2:65:4c:86:dc:6b:68:1f:4c:e5:ba:a2:
98:bb:6b:e5:46:ea:56:ec:0d:32:e9:24:11:60:a2:
cc:1b:a8:72:4a:c4:59:13:73:c3:ee:ab:3a:fd:cc:
89:10:53:0b:a8:09:66:35:a3:91:f8:b5:ad:95:d9:
ad:0b:77:d6:52:7f:b1:f0:64:e7:d9:7d:49:bb:5f:
4e:e3:ae:41:19:10:d1:5a:1d:aa:3d:b0:9b:52:f2:
b5:c1:a1:ce:3e:a1:5c:64:3c:7a:53:2e:72:83:1b:
65:16:0b:6e:e9:f4:37:1c:60:f2:16:b8:c3:b9:6f:
a7:8e:02:a9:4e:d7:81:c5:b8:bd:78:ab:dc:3e:b3:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:6E:66:F7:AE:9E:10:06:67:49:23:45:1D:05:67:47:68:24:0E
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:bf:2d:f9:92:97:cb:7d:36:65:f2:b9:45:45:98:cb:92:25:
ff:ed:ff:ad:45:70:c4:ae:dd:b6:6d:fb:d7:0e:17:02:cf:2d:
64:03:80:19:dd:35:24:4e:52:d6:97:37:ed:a7:16:43:d4:76:
33:5d:1a:a4:a4:ed:03:02:3c:1a:99:bc:ed:c2:6e:1f:ef:f0:
e7:83:6a:2c:1b:ac:cd:da:d0:fb:59:47:cc:0a:28:cd:65:8e:
33:67:ba:00:9d:02:2a:4f:8f:8f:13:6f:fa:19:fd:fe:f8:79:
66:32:71:85:06:f4:24:77:33:aa:03:5e:3d:e5:b0:78:45:62:
42:05:ae:eb:1d:2b:26:3c:b9:d9:42:31:ba:47:f6:02:bb:d0:
91:76:6f:06:c8:94:08:97:31:b8:c7:92:d7:a3:4f:78:e1:da:
17:33:d6:6c:74:62:11:9a:4c:19:49:b6:b0:dc:c9:cb:b3:bc:
a7:f6:e9:6b:ae:ef:83:7f:ab:0b:c7:2b:2d:d0:99:96:96:4d:
be:54:a7:0f:2b:90:d2:b9:8f:32:d9:40:83:20:10:9f:77:3f:
0d:a7:4a:db:09:fb:46:58:ba:2d:d6:65:f1:5d:ef:19:c2:90:
38:a4:f2:9a:ed:5d:ea:bd:10:a2:c5:68:b1:c0:2c:02:65:f7:
dc:3c:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:18:44 2025 by rpki-client