Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: cc5JIyjy3gWtbPAH0hXw4ttwRAjvHhn9WfosRAycLjs=
Subject key identifier: 0D:74:55:0C:60:D0:BC:7D:E6:19:17:A0:6F:55:31:E2:A3:70:CC:F4
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 0198752C3CE54B8897D906647399A3222A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 132D
Signing time: Mon 04 Aug 2025 13:01:30 +0000
Manifest this update: Mon 04 Aug 2025 13:01:30 +0000
Manifest next update: Tue 05 Aug 2025 13:01:30 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: IfCdwIZNtoUfPM6/hXpelsmszuHLfIDJtHo+j9tJaxw=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:3c:e5:4b:88:97:d9:06:64:73:99:a3:22:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Aug 4 13:01:30 2025 GMT
Not After : Aug 5 13:01:30 2025 GMT
Subject: CN=0d74550c60d0bc7de61917a06f5531e2a370ccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:35:3c:1b:51:9a:f4:57:ad:6b:48:de:97:
22:02:26:46:a1:fc:5f:15:ba:b4:d1:05:a9:c3:a1:
38:36:62:96:ad:73:a4:e8:d4:81:3a:8c:71:57:a5:
a8:84:fe:60:1e:ac:67:f2:41:45:47:93:81:85:fa:
47:c9:a8:2e:b1:a1:80:4e:4c:aa:a5:1a:1a:a5:84:
fa:ce:1f:cc:d7:8b:7d:c8:a3:ff:aa:2f:b4:41:0d:
21:8b:07:d1:f0:27:c8:08:16:6c:1a:55:ca:30:fa:
2b:66:cd:cd:7a:60:69:5b:43:1c:63:8d:fc:32:4b:
3c:3d:7c:a0:40:66:ef:ae:a2:6f:0e:e0:e5:a8:04:
4e:b7:7d:d4:ed:6c:8d:ff:c6:ba:6e:44:c6:ac:89:
65:c1:3e:4e:e7:fe:46:98:c5:5d:52:5e:eb:37:f7:
0b:c5:d7:53:b1:29:e1:3a:bd:1e:51:f2:54:83:a5:
0b:aa:2c:c1:f4:ab:b0:97:b8:55:66:25:ac:24:d5:
b3:ee:05:da:7e:04:ed:0c:81:3f:34:c3:83:7c:53:
1d:43:c1:0f:c4:da:80:29:89:70:72:d5:ec:eb:59:
35:e7:5d:27:f3:76:ae:e4:15:6e:a8:c6:28:8a:73:
01:9c:22:fd:4d:7a:aa:fd:86:d5:d6:80:58:87:7b:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:55:0C:60:D0:BC:7D:E6:19:17:A0:6F:55:31:E2:A3:70:CC:F4
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:2a:ca:40:f6:aa:19:a5:fe:9c:83:50:55:51:93:0f:f6:
d7:86:5e:28:f7:b4:b0:11:4d:eb:c8:7b:c4:68:9a:56:e6:7c:
45:b9:74:c0:88:11:d0:65:4f:51:5f:f2:76:9e:be:8d:96:b7:
8e:bc:0a:e7:6b:2a:81:ff:4d:ce:52:a1:97:a8:02:42:f9:5a:
7a:eb:2f:6f:e0:96:69:72:d0:93:b8:f8:c2:4f:56:ed:0e:2e:
5e:ff:51:c6:bb:5f:11:79:21:77:ae:62:b0:d1:31:22:52:1f:
19:b0:4a:96:be:f2:32:00:02:47:0d:c0:e1:8a:27:8a:06:44:
2a:c4:74:52:6f:65:3a:18:c0:fb:60:2e:d0:6c:3e:d9:1f:e2:
21:67:29:82:92:c7:da:e2:be:f9:40:55:ae:12:d3:a9:b1:2c:
4b:26:97:12:2e:31:76:dc:6f:4b:49:f4:47:35:e4:30:68:27:
1e:88:0e:15:d3:de:b1:50:5e:31:b1:77:75:f2:8e:e5:e2:2c:
a4:c4:63:c4:54:8f:f0:ef:74:8e:bf:87:7a:f0:83:73:0b:b9:
40:c2:8a:20:73:94:98:94:05:db:0a:9b:d9:4d:95:60:ff:76:
af:63:5d:2e:1e:e2:8a:5f:96:8a:7a:3e:3d:1d:ac:9c:c7:60:
63:04:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:01 2025 by rpki-client