Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: T/9v0H09DOVToYFJHVshy5i6BUCXY0ZAHDC6zMv/Po8=
Subject key identifier: DA:59:B2:F8:A0:26:D9:88:98:AA:FF:5C:40:A9:BF:9C:DB:CC:6A:26
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 0197B6A1F28382AF4644BB7E684EDDB81B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: JWG25TZu0fmcjnTX5Hr9i4lTHGAK+oIP3LAACnXrcsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f2:83:82:af:46:44:bb:7e:68:4e:dd:b8:1b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=da59b2f8a026d98898aaff5c40a9bf9cdbcc6a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:24:d6:4c:a1:ac:b6:d7:b7:46:9b:d3:f3:
1a:ed:09:44:e5:28:5b:f9:09:18:1b:60:da:54:c5:
66:13:c1:90:6e:36:90:d5:4d:96:9b:0c:a4:d5:e5:
7c:5e:e1:37:45:52:30:28:15:d4:00:8e:ae:fe:06:
84:1d:a2:e4:cb:c5:76:f8:e1:f5:20:77:b0:9a:19:
3c:fb:e1:10:1d:9c:d2:23:c1:1b:dd:ad:33:c7:00:
51:67:84:94:0c:f6:ff:70:8f:d4:91:a7:e8:87:3c:
74:40:6a:f6:7b:3f:63:71:60:d4:d9:56:fd:31:67:
83:70:bb:4a:29:64:55:f8:8d:31:46:8b:8e:16:68:
96:56:78:5e:a9:ab:9f:e1:3f:74:c4:8d:03:69:51:
3d:83:45:d9:73:9a:c4:72:4b:31:a5:d3:e1:7f:ef:
41:ec:52:62:dc:e4:25:63:b0:f5:4a:b0:d2:2a:28:
20:49:0e:65:b6:0e:e9:93:f3:8b:02:62:35:8a:f4:
40:12:18:fd:b9:0d:c5:ab:0e:26:e6:cf:fb:4c:79:
c3:d5:75:31:cc:a4:24:74:d1:81:77:51:c8:d4:01:
cd:45:64:6c:05:57:0d:d5:61:bd:9f:a6:8e:b2:09:
88:4a:05:a3:b2:50:48:8e:2a:db:a5:88:7d:c2:29:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:B2:F8:A0:26:D9:88:98:AA:FF:5C:40:A9:BF:9C:DB:CC:6A:26
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:da:a6:b5:d8:69:b1:11:2c:66:c0:0b:c6:6b:0e:13:f3:11:
c7:33:46:e0:09:7c:40:48:bb:1b:53:62:0f:a9:9b:f6:8a:15:
93:e4:12:0e:bc:b7:10:0c:fe:13:42:a8:f8:50:b0:a6:ee:12:
7c:05:0c:6e:f3:fa:85:87:d1:a1:65:12:a4:a9:8f:46:c0:4c:
b3:89:38:50:5b:16:fe:4c:6f:16:2c:ff:26:44:50:15:5f:39:
02:fd:07:f3:67:fc:7e:7d:1c:97:e6:81:06:dc:78:e4:9a:42:
d2:64:3c:75:e1:ac:68:bc:dd:3a:fe:aa:52:37:74:2d:a5:f1:
4f:63:95:22:90:fd:ac:15:5b:38:2e:75:86:97:1c:d3:74:1a:
85:00:f3:ba:c0:cb:b0:67:ef:61:db:10:a8:f8:90:12:e5:ac:
09:a1:43:5d:9c:a1:58:c2:48:bf:23:59:6a:70:e6:05:6d:0e:
df:50:f5:2f:cf:94:cb:70:37:74:18:f2:34:1e:15:c0:d0:d5:
49:fb:cc:5d:d5:b9:eb:81:c8:23:82:7e:1b:5b:49:b2:b3:80:
d6:88:e6:c0:7d:6d:16:21:1c:bb:54:58:5a:03:ab:e1:37:f0:
1d:5b:3a:31:8d:03:ee:3d:4e:bb:e9:20:3b:e2:98:8f:7b:c4:
64:00:93:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofKDgq9GRLt+aE7duBtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTkyMTc4NDQ4OGFkZDlhMDU2NjFmZjExNzg3ZWM3NTRl
NjA1ZTUwHhcNMjUwNjI4MTMwMjM1WhcNMjUwNjI5MTMwMjM1WjAzMTEwLwYDVQQD
EyhkYTU5YjJmOGEwMjZkOTg4OThhYWZmNWM0MGE5YmY5Y2RiY2M2YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hwk1kyhrLbXt0ab0/Ma7QlE5Shb
+QkYG2DaVMVmE8GQbjaQ1U2Wmwyk1eV8XuE3RVIwKBXUAI6u/gaEHaLky8V2+OH1
IHewmhk8++EQHZzSI8Eb3a0zxwBRZ4SUDPb/cI/Ukafohzx0QGr2ez9jcWDU2Vb9
MWeDcLtKKWRV+I0xRouOFmiWVnheqauf4T90xI0DaVE9g0XZc5rEcksxpdPhf+9B
7FJi3OQlY7D1SrDSKiggSQ5ltg7pk/OLAmI1ivRAEhj9uQ3Fqw4m5s/7THnD1XUx
zKQkdNGBd1HI1AHNRWRsBVcN1WG9n6aOsgmISgWjslBIjirbpYh9wikVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpZsvigJtmImKr/XECpv5zbzGomMB8GA1UdIwQY
MBaAFAFZIXhEiK3ZoFZh/xF4fsdU5gXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMjlkNjItZDFjOC00ODQyLTk1NDkt
OGE5MTg0MDBmMjYwLzEvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMjlkNjItZDFjOC00ODQyLTk1NDktOGE5MTg0MDBmMjYw
LzEvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9qmtdhp
sREsZsALxmsOE/MRxzNG4Al8QEi7G1NiD6mb9ooVk+QSDry3EAz+E0Ko+FCwpu4S
fAUMbvP6hYfRoWUSpKmPRsBMs4k4UFsW/kxvFiz/JkRQFV85Av0H82f8fn0cl+aB
Btx45JpC0mQ8deGsaLzdOv6qUjd0LaXxT2OVIpD9rBVbOC51hpcc03QahQDzusDL
sGfvYdsQqPiQEuWsCaFDXZyhWMJIvyNZanDmBW0O31D1L8+Uy3A3dBjyNB4VwNDV
SfvMXdW564HII4J+G1tJsrOA1ojmwH1tFiEcu1RYWgOr4TfwHVs6MY0D7j1Ou+kg
O+KYj3vEZACTWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:45 2025 by rpki-client