Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: m9nDHdnVCpV62mz9+7g9996PFzgrPdMeeA8TOhuZmeI=
Subject key identifier: 8D:D8:52:B1:64:8E:E7:F7:07:9A:B0:4A:D1:10:28:91:33:F5:9B:93
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 0198D4E0819EE061A1F5396D81BFF7E6699B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=)
2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: SfBmxJ+RDo98ZSGM96WYiGDrLrcHc3zWiXWLSDfryjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:81:9e:e0:61:a1:f5:39:6d:81:bf:f7:e6:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=8dd852b1648ee7f7079ab04ad110289133f59b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:32:6a:97:cf:49:9e:0e:67:ff:3a:84:06:
a0:09:86:30:cc:4d:3a:18:40:e5:bf:cb:3a:aa:11:
4b:0e:6f:6b:bb:94:a4:55:c7:2b:09:ca:b8:a2:50:
82:d5:c4:be:76:04:97:c0:a7:8f:b2:9f:82:8c:26:
de:b3:3c:9a:b6:ff:ec:58:ef:74:6c:31:dd:b7:6a:
8d:d1:84:14:c4:44:2a:ed:25:0e:52:b8:7e:db:c6:
f3:b2:7c:0d:69:dd:05:c4:3b:f8:64:d9:7e:47:0f:
8e:ee:46:01:4c:8d:d5:43:94:f7:d2:ec:d5:c0:06:
42:3d:7e:e0:9c:db:99:78:5a:eb:83:e5:bc:74:73:
29:f5:72:99:43:78:7b:11:c9:9b:22:01:32:f9:cf:
6b:1a:03:7e:bd:56:e6:20:71:08:b2:01:f3:97:9c:
a2:4e:e0:02:c4:c9:a9:e1:ac:04:8d:c6:31:33:63:
dd:5f:6c:e2:c9:02:b2:06:54:f2:e9:ac:d4:08:1b:
7f:75:c1:51:5f:f9:30:23:0d:fb:54:3f:ec:9c:3a:
9b:33:ac:1e:22:6f:68:91:aa:72:fc:aa:c0:33:6d:
88:c6:1b:e5:f2:be:23:8a:30:18:b0:ce:0b:43:b3:
b3:16:d9:ba:2f:31:2b:43:b3:cb:90:3f:97:e6:6e:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D8:52:B1:64:8E:E7:F7:07:9A:B0:4A:D1:10:28:91:33:F5:9B:93
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:1f:67:62:de:e0:e4:dd:96:e3:21:13:3a:da:08:54:60:
cc:91:2a:cb:da:0a:b1:e3:a0:e0:7f:99:2d:c5:f8:e9:52:fc:
8e:28:88:5b:c1:62:e4:bd:f0:71:69:6d:95:e5:95:c6:9f:23:
31:db:b0:79:ed:da:4c:c6:91:c8:4f:c0:dd:f6:b4:62:d8:50:
91:de:c0:91:3e:1a:5d:0f:c3:c2:40:6a:73:fa:cf:e4:76:bc:
b2:8d:4f:87:42:71:f2:3e:fe:0e:fa:30:5d:b8:69:09:c0:a7:
d8:a5:f7:0f:35:a9:e7:ba:03:da:21:45:87:e5:89:58:02:b7:
08:98:41:9e:c6:76:0a:56:81:fb:dd:9b:65:52:40:5d:62:19:
f9:da:e3:d1:78:7b:38:66:5c:db:e6:fa:c8:08:14:77:14:65:
de:67:99:e2:d3:f9:13:c2:83:08:2b:87:74:e6:2b:0c:e2:f0:
55:d5:40:3a:75:59:7d:79:71:78:ec:ee:65:88:b1:f3:29:41:
13:c5:74:b3:4a:dd:6b:2d:aa:4c:ae:d7:bd:d3:c8:5e:d9:e3:
bd:8e:54:be:cb:88:a4:7b:62:8f:44:19:e6:8f:c2:be:3a:46:
79:6e:11:03:81:77:8b:37:d8:8b:1d:55:64:87:3a:23:af:ff:
fe:bc:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:40 2025 by rpki-client