Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File: AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier: F0FMoLYUVPAwR95iu46xGACs9fmouuWc7qyRDpphacY=
Subject key identifier: 17:F9:5D:D6:DE:4E:31:F4:B3:64:5A:7E:B9:98:5D:6A:2C:4F:C2:B4
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial: 019A4EF437E958D037777F10F4506BE87057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number: 095C
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: tooxZ48Gza5qWmBgE4egqt7SJnmEOPwm1Eh+4IZHkWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:37:e9:58:d0:37:77:7f:10:f4:50:6b:e8:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=17f95dd6de4e31f4b3645a7eb9985d6a2c4fc2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:cc:29:34:5c:e0:b2:6f:2a:12:0f:28:7f:
4e:5a:0d:ba:bb:56:94:ec:bd:75:cb:49:9a:a5:79:
53:42:5c:e5:01:13:3a:cd:e4:a1:09:98:bf:1f:20:
86:1c:7f:5d:14:97:07:53:52:b9:74:48:41:c2:68:
52:cb:6d:1e:96:4e:1c:15:72:18:df:22:f8:b5:cb:
6c:98:40:51:9b:bd:67:d5:4f:c5:6b:ed:d6:94:78:
32:10:7b:a6:37:b1:9f:ba:11:21:b7:c7:f3:39:22:
df:17:fd:af:fe:34:18:2e:3f:29:e5:21:d3:82:b0:
7b:44:da:f3:eb:03:7c:9d:10:4c:e1:8c:49:67:20:
2c:14:d8:eb:c5:c3:11:7d:0b:37:37:e6:7a:f5:4f:
f5:6c:26:fc:c0:72:a2:0d:c5:bb:18:6e:b0:57:cc:
c5:45:f3:dc:09:8b:49:d0:0b:a0:23:10:4a:e1:db:
1a:ff:5b:a2:b8:ff:08:b7:bb:86:7f:db:c6:ff:ec:
92:0a:bc:92:66:2d:cf:3a:29:9a:7c:d5:bb:61:e4:
f4:d8:8c:93:76:33:59:68:2f:6f:37:1b:63:43:1c:
d2:23:43:8e:28:a1:d9:e6:e4:78:df:ce:f0:37:c9:
ef:62:cf:39:6f:2f:0b:7d:aa:64:10:3b:d3:83:22:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:5D:D6:DE:4E:31:F4:B3:64:5A:7E:B9:98:5D:6A:2C:4F:C2:B4
X509v3 Authority Key Identifier:
keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c4:f3:11:63:68:34:9a:d2:f3:27:3c:79:96:b2:77:1f:a2:
eb:58:80:38:64:9b:1f:c9:69:3e:52:b8:c2:19:ea:7d:e7:72:
25:1d:ee:ae:ae:74:d4:cd:84:d2:ea:42:0b:1f:67:43:91:cd:
92:00:74:29:52:b0:da:64:27:f4:a7:de:06:4c:b4:a5:2d:0f:
50:47:c4:2d:f9:95:1d:ca:aa:75:18:10:88:37:27:af:47:7b:
91:84:36:fc:23:72:ca:00:77:3c:a4:1b:83:36:81:e0:64:5e:
d1:1a:bb:21:7a:9e:56:84:52:ec:24:dc:f7:c0:02:ac:e6:99:
22:42:09:0f:ea:04:bf:09:4b:0e:03:03:58:b5:1d:97:0a:ba:
f2:09:2f:0b:9f:7f:6f:86:b0:d4:b9:19:fa:86:3a:fe:9c:b7:
0b:b1:a6:95:56:86:34:4f:46:57:fe:81:f6:df:6c:25:b7:17:
b9:20:bb:cd:28:9b:36:3f:e5:37:78:87:f9:7c:e8:32:8d:e6:
bd:9d:1f:9b:33:96:7d:17:fd:79:d1:c4:d5:99:5c:ff:d3:47:
c0:a6:94:eb:1c:c1:60:a7:d9:46:c5:0f:c8:8b:0b:dc:0d:ac:
d6:83:5a:7a:fb:fa:94:31:74:c2:a8:3e:38:91:f3:55:18:f0:
53:b7:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:43 2025 by rpki-client