Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: /+Q/xhpDr3dwAvYGt76Z4+MdiQI6pitHG9MTh/8WLyw=
Subject key identifier: 21:6F:E6:CE:A4:BD:C1:DE:E9:AA:88:18:8F:9D:0D:90:63:57:E8:33
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0198819DE90F6337761EFCBC63F4DCBC15A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 0542
Signing time: Wed 06 Aug 2025 23:01:06 +0000
Manifest this update: Wed 06 Aug 2025 23:01:06 +0000
Manifest next update: Thu 07 Aug 2025 23:01:06 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: +xy4MlPYbtrQ6Qo5wJrBMRtkx/voIXkZzOlvVUYn3X8=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:e9:0f:63:37:76:1e:fc:bc:63:f4:dc:bc:15:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Aug 6 23:01:06 2025 GMT
Not After : Aug 7 23:01:06 2025 GMT
Subject: CN=216fe6cea4bdc1dee9aa88188f9d0d906357e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:02:26:f3:ad:ac:f3:30:0f:43:2a:06:75:
8c:7d:2a:59:b9:93:e6:cd:2b:52:c2:92:b6:88:b5:
fb:09:22:8c:41:7f:72:07:6a:32:da:4b:14:74:0c:
5b:1a:63:ba:9c:55:a4:7c:3c:42:b1:01:1e:76:ca:
29:b8:01:48:fa:70:15:dc:35:56:15:96:8b:9a:21:
af:2f:fa:12:be:1c:2c:ee:ff:5f:06:29:ac:48:b7:
01:19:75:5d:77:95:46:a9:ea:62:4a:e6:1a:65:5f:
9d:41:71:dd:12:af:48:dd:91:c7:85:fd:02:7f:33:
3a:80:6e:73:c8:27:0a:31:20:97:06:dc:47:a8:ae:
17:8c:ba:e9:a1:3c:21:bb:ba:92:47:a7:db:73:51:
a4:41:6c:60:cf:50:74:54:5f:16:56:18:5a:70:77:
7e:8a:09:8f:bf:de:f0:19:a6:38:23:70:8c:16:6e:
f0:e3:12:85:bc:bb:23:3c:cd:51:f4:4b:b9:6e:92:
2c:42:fd:29:5f:87:12:90:4e:3a:91:48:98:3d:ed:
a1:6a:be:48:21:e5:8f:6a:f1:af:e2:b0:58:ec:11:
d7:db:c5:f1:c7:5e:92:19:40:c0:58:4d:e0:9c:5e:
e3:b8:da:2e:c0:77:58:64:ba:65:54:0f:8c:39:45:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:E6:CE:A4:BD:C1:DE:E9:AA:88:18:8F:9D:0D:90:63:57:E8:33
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f3:16:67:db:d5:0b:85:1d:60:a2:ad:77:52:2e:72:71:d2:
b4:76:1c:0a:0a:fa:33:d7:21:fd:23:ac:57:b8:5c:47:49:02:
fc:c2:a4:c1:06:78:89:c2:10:74:4d:a4:0f:59:86:7a:44:ce:
07:17:65:80:b7:a7:1a:49:db:34:c3:fd:da:58:a0:bd:2c:9f:
14:30:a7:86:e6:61:8f:99:e2:46:36:ce:f7:05:e9:6d:69:ee:
39:20:7b:99:97:ad:30:48:e9:9d:ad:10:dc:63:7c:7c:7e:90:
25:1d:ab:18:49:9f:77:1c:54:24:24:81:1d:da:f0:0f:80:b6:
a4:83:22:2e:1a:25:ba:24:8f:3d:7c:68:0d:b0:a4:38:9a:28:
61:6d:9d:f5:7f:60:0e:75:c9:f0:de:66:2f:35:d8:a0:85:b1:
6a:66:a7:f3:25:30:81:2f:fc:71:97:d0:85:b6:80:15:a5:b0:
3b:8f:0b:fc:2b:ad:8f:d7:84:42:22:9f:61:ac:4a:71:7a:c7:
16:5e:f8:9c:24:fa:db:c6:91:9c:24:27:b0:73:f5:31:2c:68:
0f:33:00:c5:44:c3:af:8d:54:64:95:73:d9:58:83:8e:ad:38:
94:f8:df:8d:a1:d4:af:9a:9e:0b:aa:79:17:0a:29:e3:db:17:
6b:fd:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:47 2025 by rpki-client