Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: AHs+t50PbZK5Htdx7hb03u6MkQH1Eoe1wwK0+PW8crY=
Subject key identifier: 82:92:B9:0D:F0:84:EE:D2:0F:BE:82:23:EC:F4:EE:E5:BB:68:76:53
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 0199FFC79C8FC4CC8D320DF2D2C7FE0621F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:01:35 +0000
Manifest this update: Mon 20 Oct 2025 04:01:35 +0000
Manifest next update: Tue 21 Oct 2025 04:01:35 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: t+l7lfFYv48RZ7BeDCpv3+K9eUX22Ppuq5LL60Uu7JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:9c:8f:c4:cc:8d:32:0d:f2:d2:c7:fe:06:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Oct 20 04:01:35 2025 GMT
Not After : Oct 21 04:01:35 2025 GMT
Subject: CN=8292b90df084eed20fbe8223ecf4eee5bb687653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:d1:05:aa:66:0a:18:50:69:4b:ab:29:65:
2e:b9:de:9f:bb:04:0f:40:f2:f8:f1:f1:b5:58:b4:
45:ad:d6:c2:dd:58:cb:4e:d1:ca:66:32:48:af:d4:
22:02:4c:ec:97:c6:37:49:3f:05:ce:7c:45:a4:72:
63:28:61:a7:5b:e0:ca:62:ec:2e:9a:3f:4d:53:bd:
9c:7f:9f:bd:10:a2:cf:3a:70:8c:2f:6f:bb:68:73:
9e:ac:22:aa:bb:80:45:10:de:50:ef:ca:cc:0e:59:
ec:00:d8:b3:fc:8a:73:08:f7:b4:8d:ea:2f:26:ec:
ce:9a:04:1e:68:b8:84:ec:60:9c:0a:c2:bd:6d:f8:
92:a4:b1:9a:30:a1:60:ca:9f:af:fb:1c:f9:cf:78:
e2:bc:bc:44:a3:22:9e:99:4d:d6:15:30:46:a7:20:
bc:c7:2a:09:a3:2a:ce:c3:b2:85:87:fe:81:f9:52:
92:e3:e4:7a:33:06:0a:e2:fe:7c:8c:42:bd:54:95:
14:ee:86:a1:31:9e:75:81:8e:ed:19:ac:70:7a:e3:
42:d0:2b:49:77:66:cd:00:a6:af:e1:3b:e2:ae:58:
2d:9d:87:bf:43:78:61:ea:8e:9d:5b:4a:3a:2d:28:
4e:20:b9:a9:80:ec:5c:f8:a8:b7:87:92:49:29:49:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:B9:0D:F0:84:EE:D2:0F:BE:82:23:EC:F4:EE:E5:BB:68:76:53
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:a9:c9:9c:5c:c3:d7:57:a7:c3:4a:e5:1b:a3:e4:28:52:
48:df:b7:87:b7:a7:24:d6:c6:a3:4f:c1:f5:00:24:23:e2:ad:
69:5f:26:05:53:5d:0c:d3:7c:58:d8:28:92:65:39:0b:68:40:
b3:2e:23:d1:35:50:b0:1a:ef:33:b4:e3:5a:2d:2c:d0:b6:fe:
56:df:84:47:5c:d4:6f:d2:f5:e9:75:3f:d5:b4:a9:36:ba:49:
5e:b2:c1:58:7c:22:99:8c:1a:e3:62:47:98:60:f3:55:1c:55:
b0:67:16:a2:4d:1b:e9:f9:a2:1d:63:c6:2d:09:5e:41:31:f5:
b2:53:c1:4a:ca:55:ba:64:02:c5:f1:e1:9f:38:f9:48:74:75:
97:4f:1e:75:3d:fe:c8:fe:28:d0:c7:77:53:22:cc:e4:2e:17:
c0:05:55:0e:98:f1:76:19:65:97:2e:f8:29:d5:a7:e1:7c:1f:
46:64:9b:01:1e:2d:68:6e:59:14:55:7b:04:7d:02:b6:09:80:
09:a1:ff:13:6c:6f:a8:94:21:24:4e:57:77:1a:c2:bb:26:3b:
29:6f:0d:02:e0:1e:7e:82:ee:86:7f:cc:8a:d1:5b:8f:e3:d0:
ba:f3:d0:de:eb:0b:36:d7:c0:b5:3d:c9:92:7f:70:78:6a:ab:
93:7e:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:57 2025 by rpki-client