Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: mWZPM0PZa7+S5dGC4V3IEgHJYBE2PCcK8k5xp8JeIEk=
Subject key identifier: F2:5F:DE:1E:FC:8F:87:D4:24:D9:95:42:31:FB:74:58:81:25:F2:31
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0197699786FB7F93A72053E3155C7CB3A476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 04B1
Signing time: Fri 13 Jun 2025 14:00:27 +0000
Manifest this update: Fri 13 Jun 2025 14:00:27 +0000
Manifest next update: Sat 14 Jun 2025 14:00:27 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 7CmHheVQYNsU0hDnBTlH+NYzm5yG1mO4HwwJtki4XCY=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:86:fb:7f:93:a7:20:53:e3:15:5c:7c:b3:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jun 13 14:00:27 2025 GMT
Not After : Jun 14 14:00:27 2025 GMT
Subject: CN=f25fde1efc8f87d424d9954231fb74588125f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:99:a0:32:d2:6f:dd:b6:17:0a:93:05:6c:
34:d6:3f:73:ef:c3:44:79:de:b2:89:a2:28:0d:9f:
5f:0b:38:2d:4a:96:dc:02:05:41:a1:46:d4:6c:5b:
6f:3e:33:56:9b:43:b8:95:5a:d2:d3:70:8c:3f:58:
81:dd:b0:90:c9:ef:70:ba:e8:c5:41:be:2f:f3:64:
2a:6b:39:0a:31:d1:f9:28:5f:bb:07:1d:d9:d9:c5:
e3:6e:6a:1b:5c:77:19:1e:9b:96:d7:8f:b8:0e:1a:
e7:7a:e6:2f:62:e0:88:35:18:b5:1f:6f:3c:fb:32:
e8:03:d7:5d:42:d7:7d:a4:df:f0:11:95:8a:17:66:
2e:cb:93:3e:37:5c:58:a0:b2:39:0a:91:57:b8:3d:
41:85:db:75:db:4e:f6:02:c5:e6:01:d8:f6:5c:af:
fb:0c:85:a1:54:a3:3a:05:72:9b:1a:0f:54:72:e8:
1b:a6:c6:ce:44:25:a5:7a:79:51:78:c2:d2:da:87:
d2:ef:a2:59:5f:8d:e9:f7:ac:6b:6d:b4:2a:01:18:
ed:36:15:f9:8b:e8:d2:57:50:8f:b3:01:0c:3b:42:
7d:63:86:61:a8:fe:92:47:da:c3:c2:d6:1f:6c:21:
01:83:33:db:62:46:0f:95:50:54:58:50:d9:a9:29:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5F:DE:1E:FC:8F:87:D4:24:D9:95:42:31:FB:74:58:81:25:F2:31
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:dc:83:2e:b2:54:13:08:52:ba:b9:ed:e7:c8:c1:56:e2:
1a:ef:aa:4f:3a:a9:f0:9d:81:73:77:85:9a:7a:f7:97:16:62:
5b:97:2b:11:af:19:0a:9f:54:18:d9:c3:0e:21:cb:d1:fb:35:
24:de:1a:fe:80:a3:42:96:a5:82:53:4a:1d:0d:11:8d:7f:d5:
d6:78:df:4a:a8:c2:fb:6d:9d:4a:ab:f2:8c:70:fb:58:eb:70:
1d:50:11:aa:8f:6e:a7:0d:c4:32:59:12:ec:ac:79:96:b5:a2:
79:70:dc:84:d1:2c:8d:40:ec:60:60:5b:dd:aa:c8:fa:a1:02:
d8:58:2b:21:b2:af:13:b4:61:e0:43:99:45:cc:51:a0:aa:7b:
fe:94:ed:99:e1:1b:1c:19:55:62:0c:b1:a8:f4:a9:a8:18:40:
80:8b:4d:13:e2:c3:9e:e5:4f:65:63:78:3f:ce:3c:8e:99:1e:
43:b2:d3:43:88:a8:69:25:19:7b:d5:a2:84:c3:1f:be:4a:1c:
fd:f1:3c:04:3b:c5:e7:93:5a:3b:4b:41:68:51:df:3d:1e:02:
83:53:4b:08:04:be:f5:0a:72:0d:1d:39:af:4a:fd:ad:08:89:
c9:cb:17:34:bd:ea:06:d7:48:ba:e0:8c:7e:52:fe:ed:43:6c:
a4:8f:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:02 2025 by rpki-client