Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: x7cR22f8zEMAb3pV2C+C68qR7wydNAubybFQ0+cYZZ8=
Subject key identifier: D0:0D:96:4F:FF:2C:CF:1F:DA:EA:47:31:19:33:52:A9:34:33:7A:F3
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 0197887DE5A32D443020819986EA7BBDEB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 10B2
Signing time: Thu 19 Jun 2025 14:00:41 +0000
Manifest this update: Thu 19 Jun 2025 14:00:41 +0000
Manifest next update: Fri 20 Jun 2025 14:00:41 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: mH/bwkBMVoWsbGqe8K1b1d5HzNWGpo+ap2zE4Ax+uFQ=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:7d:e5:a3:2d:44:30:20:81:99:86:ea:7b:bd:eb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jun 19 14:00:41 2025 GMT
Not After : Jun 20 14:00:41 2025 GMT
Subject: CN=d00d964fff2ccf1fdaea4731193352a934337af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:68:96:31:e5:60:d7:74:08:28:38:8e:f0:
26:6a:79:1c:00:b0:d5:05:36:4a:21:4a:4c:19:bc:
eb:75:0b:dd:d4:25:fd:08:78:4b:eb:6f:6a:73:29:
8d:53:b2:b5:18:21:25:d9:b4:49:44:46:ee:b7:f1:
89:22:46:82:6c:52:d0:91:31:05:b2:12:f5:cd:b0:
10:8f:ab:f9:0e:fb:8b:1a:5b:5b:16:38:2d:bb:f2:
29:8f:ec:78:e6:f0:73:e5:9a:29:85:50:43:55:aa:
25:53:48:a6:1f:2b:11:f7:3b:80:70:79:be:8e:4b:
1c:38:51:a6:7e:ef:a7:c2:6f:95:3e:d1:e1:dc:59:
6e:79:34:15:fe:a9:68:4a:de:0f:a6:cc:3a:5d:0d:
26:50:3d:86:33:3d:2e:8d:81:85:32:22:26:f5:e6:
ce:5c:52:71:2d:61:dd:a3:4d:17:0f:53:f6:ce:12:
9a:f8:b8:0a:d3:50:6c:fb:53:b7:e7:cc:11:b1:27:
a7:c3:2d:73:b3:a0:b7:8e:10:c8:91:d2:a9:a3:ba:
4c:4a:23:e6:e7:9b:e1:50:d9:55:f3:1f:64:5d:2f:
86:3f:5a:00:52:b2:5a:ce:1b:f6:9a:85:9c:8b:11:
e7:27:f6:37:9c:58:9a:30:04:1e:31:98:94:f2:02:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0D:96:4F:FF:2C:CF:1F:DA:EA:47:31:19:33:52:A9:34:33:7A:F3
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:30:a5:f9:38:92:66:20:62:a3:e6:61:cc:c7:05:f2:35:d6:
ad:75:26:25:16:88:87:18:e2:73:64:c8:3e:52:50:b0:86:41:
bd:4e:bc:45:7e:51:d4:ac:76:a7:7e:df:12:16:8d:ed:bb:52:
35:c5:18:63:02:76:57:3f:8b:f1:61:84:24:d7:1f:ab:1b:63:
a7:83:2a:f7:a3:0b:9b:92:c3:43:43:67:7a:21:30:96:ba:56:
64:85:98:e1:c4:22:a3:6d:ca:29:b8:b4:7d:6d:ee:7f:8b:1f:
8c:c3:68:87:4e:63:72:7c:05:78:a1:1c:eb:23:02:e4:5d:15:
2d:14:5e:fa:88:d9:a6:ae:46:66:bb:8b:4f:d0:a9:d9:65:89:
79:46:13:37:d4:18:ae:fd:86:b4:8e:85:ad:5d:81:e4:e0:30:
aa:b3:45:75:ad:1c:81:d9:86:4b:24:52:7b:3c:d5:b9:27:68:
f6:16:62:59:6f:a7:3b:c2:3c:ed:f4:15:51:56:7f:46:34:dd:
6b:a2:a4:07:88:0c:e2:15:37:f7:6f:20:4c:9b:95:cd:27:93:
ea:6a:a5:62:34:ff:4d:d9:f3:76:06:99:7f:92:77:68:ba:8d:
88:17:71:f4:d8:99:f5:7b:b3:03:b1:5c:4c:0d:cb:8e:b3:f4:
f0:6b:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:38:15 2025 by rpki-client