Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: kdNQTp7JW2z9BbV0AwvKMrtMdSBi61U02RNkRFgFDyM=
Subject key identifier: 2D:6D:84:F3:79:71:76:F1:00:46:22:66:0D:E5:85:42:B0:1A:65:58
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 0197B5C5333927C2C75C6D48CBEE60F1CCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:01:29 +0000
Manifest this update: Sat 28 Jun 2025 09:01:29 +0000
Manifest next update: Sun 29 Jun 2025 09:01:29 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: m8rKGzWzdxGkdE8vTVEPkR0ifN2Ytt7aDviXPRrqTtI=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:33:39:27:c2:c7:5c:6d:48:cb:ee:60:f1:cc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Jun 28 09:01:29 2025 GMT
Not After : Jun 29 09:01:29 2025 GMT
Subject: CN=2d6d84f3797176f1004622660de58542b01a6558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:2a:7f:97:b6:3e:a5:9f:21:d6:00:3e:88:
a4:e7:9e:3d:be:65:c0:a8:47:58:53:e6:23:03:b0:
bf:a2:24:26:5c:16:9b:97:cd:fa:e9:b1:05:1e:17:
d5:7d:44:08:77:14:5d:1f:f3:74:a5:49:fb:03:e1:
d5:64:ab:50:90:eb:50:e0:a3:5b:6b:81:dc:34:41:
75:7e:0b:19:37:5f:77:20:93:3b:84:23:f2:c8:80:
f3:26:6f:4c:96:30:92:44:0c:d4:63:9c:95:af:91:
b4:af:13:47:b2:42:f8:9d:d3:a8:8a:e4:80:81:b8:
67:00:f3:05:16:8d:59:c0:39:b3:08:fe:92:38:bf:
db:52:57:86:08:20:cd:dc:a9:d1:40:f4:07:e1:e7:
89:18:7e:6a:c7:f3:2d:ed:bc:c4:f4:bd:9d:95:c4:
b7:b8:b2:a7:39:a3:85:dd:50:ac:c4:10:b2:d6:b3:
d7:f3:8f:45:dc:04:c9:e4:11:61:2c:37:54:7e:90:
0e:7b:6b:af:a1:d9:45:af:26:23:4e:52:88:63:77:
04:9b:62:ae:c6:5d:e7:62:d5:7b:fa:f8:5d:e1:cc:
87:67:d2:d3:85:77:4a:34:f8:d9:d7:b7:33:5d:38:
59:94:45:cd:ac:f7:ba:25:2c:b0:4e:2b:70:86:30:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:84:F3:79:71:76:F1:00:46:22:66:0D:E5:85:42:B0:1A:65:58
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b8:c1:3a:bc:18:ac:36:62:27:15:df:53:71:cf:34:62:73:
88:d8:36:1d:53:e5:dd:bc:7c:8b:1b:2d:e3:41:6c:59:60:5b:
76:6d:5b:0c:2c:3e:59:14:7d:f5:f8:64:09:6f:69:30:5d:ff:
13:07:a3:7c:f0:ee:21:10:fe:7e:5b:8f:86:61:3d:21:38:b7:
fc:bf:36:cb:c6:88:3e:19:11:90:d3:c6:9f:13:0b:ba:97:5b:
53:c5:3a:cc:0a:62:42:96:05:f6:8e:0e:59:60:b2:49:d8:a6:
b9:c4:8a:26:ab:b1:93:2d:2f:91:87:9d:44:a1:8f:00:70:a8:
25:d1:1b:35:4a:60:93:eb:05:51:ba:95:21:f3:e0:65:bb:bd:
47:36:94:59:85:90:19:83:85:25:b6:ae:17:af:0d:50:a5:89:
76:58:ff:b4:cb:62:b4:54:34:1d:38:00:cd:88:cc:f2:41:d5:
6a:cf:84:76:1f:d4:2e:e0:a5:54:ad:b0:c7:67:d4:dd:de:de:
39:57:af:5e:b6:a6:da:68:8e:01:68:1c:9d:55:93:32:f6:a2:
d1:3b:aa:4e:e0:7a:dd:1b:d5:7a:b6:3a:d7:e9:ec:b9:85:fe:
fe:51:b4:35:a8:cf:6f:fb:5a:f4:34:88:b3:68:16:54:c2:6e:
0a:eb:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client