Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: b2AyrBWzPTqUHNpJ/zJgAk1UmE7ORtheN8vwGw+VLfw=
Subject key identifier: 1C:69:A2:6D:E9:AF:C0:0C:77:CF:C3:2C:03:5C:75:9A:67:B3:18:2D
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 0198D5834DEB8E9228DA9EBD50BD6A1AE894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: L598MoxL4zifCm7euTkFRaDvmZjX50JYxI12eyWjRJc=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4d:eb:8e:92:28:da:9e:bd:50:bd:6a:1a:e8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=1c69a26de9afc00c77cfc32c035c759a67b3182d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:38:d9:81:5d:70:59:a2:be:20:53:30:a5:
dc:32:cb:d6:b6:11:30:6d:cc:91:7c:d2:d1:9a:df:
ed:3f:a1:51:42:01:5b:05:64:ac:08:8e:8d:bb:a3:
b1:5d:ab:93:c7:9b:2f:c8:9e:da:39:27:3b:b0:c4:
03:0a:07:c7:64:73:e8:ad:c3:8a:5d:02:71:b5:08:
68:43:a7:5c:44:35:22:b1:17:5b:79:c1:53:e8:82:
ed:0d:ac:01:c5:c5:d6:49:70:b6:13:18:c3:01:5b:
ba:3a:68:98:6c:b7:2e:b8:8c:91:11:e5:b2:eb:cd:
2b:0b:da:bc:34:c2:d6:1c:c1:95:eb:c5:7a:e4:3f:
da:91:d8:0e:bd:b5:84:56:b2:4f:0c:81:2e:10:88:
b3:a4:4c:52:14:11:0d:85:49:24:6b:c6:d9:ec:e6:
cc:78:8c:b9:a7:c4:3a:3b:92:68:42:99:cc:59:75:
6c:8d:32:05:70:8a:2f:06:80:ac:c6:d5:05:20:3d:
46:07:96:87:c6:8c:92:9b:7c:b5:9b:b9:45:3b:bc:
ad:58:3c:13:12:99:a5:4d:47:08:ac:10:fa:db:e0:
af:8e:b4:b4:a3:26:52:d7:64:50:30:cf:81:1c:b3:
ac:6c:17:d2:a2:49:37:2f:56:47:09:e7:29:0c:a9:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:A2:6D:E9:AF:C0:0C:77:CF:C3:2C:03:5C:75:9A:67:B3:18:2D
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fe:f8:29:6a:9d:b7:5b:b9:b3:45:19:36:52:da:5c:ac:be:
a8:99:7f:b8:02:2a:03:18:53:ac:45:7f:65:92:14:f0:b0:26:
81:a6:c9:c0:6a:74:a3:01:c8:d1:7d:76:9c:b8:34:3d:fd:64:
80:96:0b:33:4e:58:07:7e:9b:08:9d:ad:01:2f:29:38:fc:66:
9a:a7:89:46:71:b1:9b:e0:1e:3a:35:4d:f4:04:29:ff:c1:29:
fc:d9:5d:97:e3:f5:56:e9:da:6d:61:a6:8e:a1:0e:c6:ab:71:
93:89:74:c1:6e:41:06:68:c6:2e:04:1a:01:b3:ab:dd:b8:a9:
75:bf:a5:08:70:87:82:58:35:e5:99:ff:13:e1:fb:8c:27:62:
da:ec:a7:b7:ea:d7:4f:c4:0f:50:26:01:ff:58:3e:fb:53:16:
85:e6:88:72:a6:f8:d9:20:f4:34:45:5d:b3:51:92:36:d4:e9:
fd:1a:ee:af:8b:92:82:04:a5:76:07:de:45:a0:8e:96:5d:90:
73:a9:f0:e0:27:01:42:32:b8:49:db:87:6e:dc:97:9e:d3:e6:
c0:ab:f2:cf:3e:9c:63:b0:14:36:32:07:69:35:cf:56:cd:ca:
a7:89:82:52:b0:d0:de:71:90:08:6c:40:32:83:7d:0a:f4:c3:
86:97:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:18 2025 by rpki-client