Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: BLIUIMJdpjRFxGPgwXWom9t0XIr7EOpbSu5aTM8YTZ0=
Subject key identifier: 71:73:A7:C7:93:C4:B9:1F:75:55:04:D9:D9:E1:E1:41:50:A6:EE:AF
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 019A02C7EB1F3438BF4292682FEFB0151EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 18:00:47 +0000
Manifest this update: Mon 20 Oct 2025 18:00:47 +0000
Manifest next update: Tue 21 Oct 2025 18:00:47 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: HR34JkgW1MkpXwpdiSscA5f2QlMq74Sic7pnt57Gsv4=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:eb:1f:34:38:bf:42:92:68:2f:ef:b0:15:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Oct 20 18:00:47 2025 GMT
Not After : Oct 21 18:00:47 2025 GMT
Subject: CN=7173a7c793c4b91f755504d9d9e1e14150a6eeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:a6:2a:71:67:b1:29:b6:65:0a:63:32:9f:
51:d3:31:32:4e:9b:b6:e8:c6:86:87:0e:7b:1a:47:
f3:8a:26:b7:26:29:fc:e9:28:68:18:84:3f:d0:64:
17:b6:49:67:c9:d3:c6:2c:db:9f:a0:0a:72:61:79:
82:a3:01:53:e9:a8:d8:84:de:fc:32:40:82:ca:0b:
9f:4a:b9:5d:15:63:92:e9:f0:4c:9c:a1:b4:fb:c8:
5e:bd:19:ed:86:9d:10:e5:c9:61:eb:bd:55:93:64:
9f:83:10:a9:e4:9d:4d:05:2b:ed:37:09:33:a8:95:
95:a7:53:67:0d:7d:4f:13:85:8b:76:0b:4b:17:f1:
60:63:d2:87:55:a5:cb:f6:e0:f4:43:c9:e9:43:5e:
e3:a3:70:76:95:32:e8:44:c4:08:97:55:41:6b:3c:
e0:2a:fd:79:b0:a2:de:c3:ad:10:74:3b:04:f6:89:
02:14:ff:09:88:c5:79:64:ac:15:94:16:43:67:5a:
e0:a2:75:5e:db:a4:b4:a2:42:c0:99:1e:5c:47:ae:
be:77:df:ef:0a:fd:65:5b:2c:4e:f7:dc:97:ab:eb:
41:e5:49:d7:10:7f:c3:1f:7a:09:6b:a5:f9:b1:cb:
ee:c5:82:f3:69:79:ad:2d:14:b2:1e:54:41:20:e8:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:A7:C7:93:C4:B9:1F:75:55:04:D9:D9:E1:E1:41:50:A6:EE:AF
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:fe:79:4a:fa:aa:c0:eb:41:d2:56:88:8d:d9:17:96:e0:
30:b8:63:58:fc:97:15:a9:fe:ed:c7:e9:21:6a:f9:17:5d:c7:
0e:db:7e:94:71:7b:77:fe:ed:ab:2d:00:80:39:81:aa:5d:e3:
73:45:22:b0:25:a1:cf:5c:e6:f0:5b:37:7b:98:ec:aa:57:8d:
c7:6f:7f:9e:c9:8a:24:3a:10:08:49:c5:4d:bb:e8:99:59:91:
6b:71:7d:ae:24:10:85:25:75:ab:1c:34:ad:f4:a1:8b:e7:a0:
8b:a9:bc:08:27:75:3a:47:b9:66:74:7b:e7:7a:24:5c:be:aa:
0d:1d:15:4c:72:11:8d:8d:4f:84:dd:4b:fc:56:06:5a:af:43:
e3:46:f7:34:55:ad:d5:e8:67:37:99:a5:c6:a0:f9:dd:37:95:
85:5d:b8:d3:78:98:af:b0:8b:19:f8:5e:73:5f:48:d4:d0:93:
e7:68:11:64:34:bc:5c:75:62:13:b0:7c:e0:cd:82:f8:d2:23:
45:a4:8c:f8:37:b9:b9:86:2a:51:27:de:38:c3:d0:5c:55:d3:
80:fa:3f:69:e4:b6:23:74:ec:31:35:1c:05:0b:84:7f:e9:14:
44:a8:34:29:a5:0c:76:e9:96:aa:e9:c5:ab:ac:7e:6b:a0:16:
7a:02:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:32:20 2025 by rpki-client