Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
File: raavh7Q2lN05mUwOMhQwaHVRny4.mft (raw, json)
Hash identifier: dTSXC1Jn80v0MkOgfFDBJIL5O+8m65T4Y0lAzme43SI=
Subject key identifier: 48:03:F6:DB:95:B3:2D:56:38:C6:28:2E:B1:D1:38:C6:20:5E:4E:A6
Authority key identifier: AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
Certificate issuer: /CN=ada6af87b43694dd39994c0e3214306875519f2e
Certificate serial: 01988EEC74F04F8FF7F3329941E360957DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
Manifest number: 0B81
Signing time: Sat 09 Aug 2025 13:01:57 +0000
Manifest this update: Sat 09 Aug 2025 13:01:57 +0000
Manifest next update: Sun 10 Aug 2025 13:01:57 +0000
Files and hashes: 1: raavh7Q2lN05mUwOMhQwaHVRny4.crl (hash: oMXz9NC+w0//JkvqtcqRprJnRIPZIC1gSavUHmmpKnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:74:f0:4f:8f:f7:f3:32:99:41:e3:60:95:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada6af87b43694dd39994c0e3214306875519f2e
Validity
Not Before: Aug 9 13:01:57 2025 GMT
Not After : Aug 10 13:01:57 2025 GMT
Subject: CN=4803f6db95b32d5638c6282eb1d138c6205e4ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:b2:cb:8a:73:4a:37:07:d8:d3:ec:ad:45:
a6:ca:6e:5c:e6:3c:f0:75:fa:d0:9c:7e:ef:7a:6a:
4b:a2:72:1e:5b:b6:1f:fd:be:83:20:3e:4b:c7:06:
01:18:d3:90:94:e2:d8:12:63:9e:aa:93:3e:19:d8:
1c:60:d2:76:14:d1:c9:e1:56:cc:6b:17:dc:cd:3d:
f3:55:41:29:14:9e:ff:3a:b8:96:c3:70:fd:6f:6f:
b7:3d:9c:1e:22:46:c2:68:d1:c2:b3:f5:34:07:0f:
38:69:e8:9a:8d:fe:6a:f6:ec:2d:27:f4:62:0f:f9:
9e:ca:cd:9c:c0:26:e5:1d:87:11:43:a4:be:f0:3c:
6a:f4:17:42:0e:a6:2b:f2:18:31:4f:46:96:0c:c9:
f3:dd:4a:f6:db:4c:f9:59:50:f3:fa:61:cd:ea:94:
28:bc:16:f1:a0:dd:f4:81:42:37:31:b3:8a:7a:ce:
cd:e6:64:9e:08:d9:de:50:cf:1c:61:32:c7:96:c2:
a0:6c:49:b0:50:f3:8a:1c:4f:86:24:87:97:aa:d8:
1a:37:7b:c5:88:27:1c:b9:a4:a9:e3:59:67:53:89:
23:d5:3f:06:ef:05:35:d6:44:90:59:f9:d5:06:63:
18:1c:10:0f:0f:0b:ec:89:38:e5:18:1a:3b:92:8d:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:F6:DB:95:B3:2D:56:38:C6:28:2E:B1:D1:38:C6:20:5E:4E:A6
X509v3 Authority Key Identifier:
keyid:AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:bc:56:ee:c6:6d:d5:80:12:fd:37:61:f0:a3:58:30:23:
7f:ca:e8:e4:e3:a0:27:3a:6c:05:8f:57:4e:19:9e:ed:7d:37:
5d:ea:f2:ef:36:a3:a5:25:de:34:34:54:c7:ea:7c:cb:f0:fb:
79:ef:2d:a2:7a:54:99:3d:70:d0:29:46:53:cc:e1:be:07:71:
1d:d9:1f:6c:3f:22:0c:60:75:33:eb:d4:7d:32:9b:22:0b:ab:
16:10:38:e7:de:01:06:9f:e9:0a:64:ba:79:ce:dc:f8:4d:3b:
fe:ff:9b:a0:05:bd:72:bb:55:07:4d:36:4f:73:3b:19:67:e4:
7a:27:65:ce:af:23:24:0b:24:94:5c:63:03:a0:90:9b:3b:32:
47:d1:1b:6a:69:15:5d:02:69:09:da:60:2b:e6:a3:7e:83:ee:
43:e6:de:ba:99:25:fc:4b:3e:e6:89:a6:d8:6c:06:b0:9c:69:
a7:a3:93:d4:e6:d2:d7:31:f9:11:4d:ef:9c:fa:c7:39:d1:d1:
a4:c6:10:eb:eb:1f:0e:b9:f9:e2:58:d2:47:a6:d2:57:5d:2b:
d1:a1:9c:9f:c4:9e:c7:b0:15:81:93:21:8c:08:b0:fb:19:2b:
0f:58:89:1e:53:aa:ef:e3:e4:09:2b:a3:63:55:9d:09:fa:a6:
ad:c1:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:46 2025 by rpki-client