Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: lsi19pZbc8UwIY6GH7xgRszYd/Qd4oktLZXmzJS+yjw=
Subject key identifier: F2:B6:8D:94:E8:2D:32:53:BF:EA:1A:50:25:35:07:6B:99:9E:60:76
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 01988D34617401BEB75FDFF9F2E9F9D3966D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 1139
Signing time: Sat 09 Aug 2025 05:01:16 +0000
Manifest this update: Sat 09 Aug 2025 05:01:16 +0000
Manifest next update: Sun 10 Aug 2025 05:01:16 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: DLIkuOGsV9Pp35YI5RtLuLDkoISB53UBuYgTQgny2Os=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:61:74:01:be:b7:5f:df:f9:f2:e9:f9:d3:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Aug 9 05:01:16 2025 GMT
Not After : Aug 10 05:01:16 2025 GMT
Subject: CN=f2b68d94e82d3253bfea1a502535076b999e6076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:dc:0b:5e:f3:2d:4c:5e:28:56:9b:44:6c:
ae:40:e1:9b:79:15:b7:c9:5b:40:70:95:47:05:54:
7c:f4:db:2a:18:df:e1:f5:a6:f6:6d:44:75:a0:76:
07:98:eb:f6:b8:5a:e9:6a:5a:2c:ef:51:1e:3b:2c:
a3:d2:3d:ed:92:53:ca:2b:91:14:e2:32:a2:4d:41:
e3:e0:99:8b:4e:23:b1:4b:ef:1a:f4:be:0d:2b:45:
f0:95:62:37:fc:b4:19:e7:72:f9:c2:f4:ed:a8:73:
62:a5:84:3a:9a:31:95:8a:cc:49:ff:07:80:4d:cc:
b1:8c:84:0f:0b:35:b8:ea:9d:b6:a5:b7:87:4d:33:
dd:b5:26:08:42:2a:a0:23:ab:3e:4c:37:ac:dd:15:
e2:b3:d8:e1:e0:f9:2b:57:7e:87:8d:a9:96:36:b3:
2e:41:ff:55:d7:c9:e7:a7:eb:dd:ab:1b:ce:d6:aa:
87:a8:41:5d:ac:76:34:c9:d1:8f:01:ac:33:13:81:
21:bd:dd:e6:dc:0e:8b:3b:6e:68:47:0e:7f:b5:c9:
6b:e7:5b:5f:2a:79:7a:ed:9f:f3:2f:29:45:58:c0:
72:0b:5d:7c:65:a0:d3:37:4c:2a:88:35:23:23:e9:
dc:ff:66:1c:63:b5:9e:b3:54:92:bc:36:54:4b:2b:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:8D:94:E8:2D:32:53:BF:EA:1A:50:25:35:07:6B:99:9E:60:76
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:aa:76:cf:7e:2c:f7:e6:8b:8a:26:11:22:ea:f7:1a:61:
34:63:eb:e9:12:0e:b3:e4:11:17:69:6d:26:d1:16:ce:cf:75:
2c:5f:00:ce:58:62:6c:61:75:ac:51:28:0a:5f:e0:38:90:4e:
f1:a1:39:78:27:64:9f:62:82:0d:46:03:56:8d:26:c3:63:51:
8b:13:b6:7b:a1:5b:c7:a0:3b:47:d8:1a:7f:fd:f5:f3:5c:8c:
62:07:ff:5d:a7:b7:78:9c:35:16:c0:ff:65:57:82:61:92:6d:
ca:8b:92:08:16:36:a2:4f:51:3f:58:aa:bd:c9:e3:aa:ae:c3:
64:02:59:ae:58:41:3b:c3:0f:e7:c3:aa:42:9e:df:c7:3c:9e:
fa:41:2d:43:ff:4c:7a:b6:2b:d7:27:0f:56:75:cf:28:6c:cb:
8a:ce:40:f3:97:bf:0c:9e:9f:b8:4b:c4:93:a1:b6:92:b9:80:
9b:fb:f5:9c:a9:c1:58:8d:a2:d5:bf:3f:52:79:e4:69:1b:5c:
20:bc:86:19:da:69:4b:c4:71:b4:53:f8:2a:9e:34:c8:50:54:
d6:44:27:4e:2e:3c:4f:67:c3:50:8a:bb:e5:40:88:bc:7d:0b:
60:e5:7a:97:1e:5e:e6:86:57:45:a2:c8:18:6d:b7:9e:a5:a3:
f5:0d:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:53 2025 by rpki-client