Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: Fofw9u2eWBGT3D7KWjx2YAFwHfD5ZdIkvQvgr2myk14=
Subject key identifier: 81:BE:E6:48:D3:C5:50:E0:0E:A5:91:51:5B:2D:E3:1A:29:A7:2F:0B
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019685B63B07AEC4FC74EF3D9C8102B41CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 102C
Signing time: Wed 30 Apr 2025 08:00:34 +0000
Manifest this update: Wed 30 Apr 2025 08:00:34 +0000
Manifest next update: Thu 01 May 2025 08:00:34 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: tyJwpAmOIcg4VT8U8tGkP326jtM0zukqMujByWrquCg=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:3b:07:ae:c4:fc:74:ef:3d:9c:81:02:b4:1c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Apr 30 08:00:34 2025 GMT
Not After : May 1 08:00:34 2025 GMT
Subject: CN=81bee648d3c550e00ea591515b2de31a29a72f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:29:0e:a6:4a:5f:a8:b0:40:04:20:dc:62:
9e:8f:1a:c5:1d:75:29:45:8a:32:c1:a2:e9:57:bf:
af:9c:1e:a4:b0:86:20:1c:71:a2:cb:66:b7:cd:24:
e3:80:d2:c2:54:6c:43:fa:e5:f2:2c:52:0b:e1:2b:
01:f1:cd:26:ef:e1:4a:43:8b:fa:55:80:5d:81:45:
6f:a6:18:49:e9:e6:98:f1:d0:46:9a:9c:62:84:67:
61:10:d2:5e:1a:c4:a5:d8:fc:f1:f1:46:9a:7e:98:
25:62:dd:71:aa:7e:04:29:7f:2d:f3:ad:69:ef:6a:
4e:8a:ab:84:22:17:e0:93:3f:5b:b4:42:9a:fe:32:
7f:5d:bf:5f:fb:06:48:36:b8:b5:41:9e:a0:d3:94:
36:b0:4c:0b:9f:5f:32:82:b6:0c:66:fb:79:b6:66:
66:ae:47:42:12:b1:de:3d:dc:c7:a6:a1:99:ac:4c:
97:9b:38:3f:99:12:ea:f7:50:d3:f2:42:b0:de:52:
57:67:84:eb:f5:4b:b6:23:92:b8:b4:10:f2:87:74:
f8:e9:36:09:ac:1f:36:1d:da:79:b6:82:b7:d4:be:
fd:61:31:c9:01:75:29:bf:fa:59:71:ed:6f:03:19:
4e:89:e8:46:c1:4a:45:71:9f:f1:26:1b:d0:9b:65:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:E6:48:D3:C5:50:E0:0E:A5:91:51:5B:2D:E3:1A:29:A7:2F:0B
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:46:db:00:7d:a3:0b:be:79:de:22:c4:ca:6f:bb:9a:db:92:
81:9d:a5:52:b2:2a:71:00:7c:e9:f4:08:6a:6d:32:7a:a3:69:
21:f5:07:78:4b:96:91:e2:6d:c4:83:8f:f1:ba:75:3f:06:31:
93:7d:98:31:fd:74:f7:4a:45:2a:13:2b:5a:05:82:30:87:ae:
ad:4e:1c:43:3a:39:62:45:be:3b:fd:8b:07:bc:57:05:27:48:
87:3c:65:ec:e8:a1:7c:19:ba:38:a4:15:61:9a:9e:23:8a:cc:
cd:76:2e:ab:cb:8e:42:f7:a0:f7:2f:d2:42:27:11:8a:53:aa:
0c:ee:0b:6a:b9:42:05:4f:d7:b3:e9:3a:58:60:73:f4:e1:c1:
a1:6a:7f:f9:df:ff:44:44:da:11:9b:89:9e:8b:6d:2d:c0:5b:
3d:82:c0:4c:86:f9:ca:43:3e:14:d6:14:b2:27:f1:7b:a7:bd:
ad:ff:d3:7f:de:ab:8d:c8:39:83:71:4b:cf:85:44:83:4f:fe:
e4:bc:ca:ae:58:ae:b9:39:5f:57:4c:c5:9e:68:33:e5:67:9e:
65:d7:97:74:ee:f4:6e:a2:22:27:30:8e:a0:87:fa:0d:fa:5f:
38:0c:a5:6b:e6:20:4a:31:ea:28:65:e2:06:15:3f:d5:40:ba:
39:a7:85:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFtjsHrsT8dO89nIECtBzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky
MGFlOWYwHhcNMjUwNDMwMDgwMDM0WhcNMjUwNTAxMDgwMDM0WjAzMTEwLwYDVQQD
Eyg4MWJlZTY0OGQzYzU1MGUwMGVhNTkxNTE1YjJkZTMxYTI5YTcyZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWopDqZKX6iwQAQg3GKejxrFHXUp
RYoywaLpV7+vnB6ksIYgHHGiy2a3zSTjgNLCVGxD+uXyLFIL4SsB8c0m7+FKQ4v6
VYBdgUVvphhJ6eaY8dBGmpxihGdhENJeGsSl2Pzx8UaafpglYt1xqn4EKX8t861p
72pOiquEIhfgkz9btEKa/jJ/Xb9f+wZINri1QZ6g05Q2sEwLn18ygrYMZvt5tmZm
rkdCErHePdzHpqGZrEyXmzg/mRLq91DT8kKw3lJXZ4Tr9Uu2I5K4tBDyh3T46TYJ
rB82Hdp5toK31L79YTHJAXUpv/pZce1vAxlOiehGwUpFcZ/xJhvQm2WZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIG+5kjTxVDgDqWRUVst4xoppy8LMB8GA1UdIwQY
MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct
NDIxYTk5YmRkNzhmLzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm
LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0bbAH2j
C7553iLEym+7mtuSgZ2lUrIqcQB86fQIam0yeqNpIfUHeEuWkeJtxIOP8bp1PwYx
k32YMf1090pFKhMrWgWCMIeurU4cQzo5YkW+O/2LB7xXBSdIhzxl7OihfBm6OKQV
YZqeI4rMzXYuq8uOQveg9y/SQicRilOqDO4LarlCBU/Xs+k6WGBz9OHBoWp/+d//
RETaEZuJnottLcBbPYLATIb5ykM+FNYUsifxe6e9rf/Tf96rjcg5g3FLz4VEg0/+
5LzKrliuuTlfV0zFnmgz5WeeZdeXdO70bqIiJzCOoIf6DfpfOAyla+YgSjHqKGXi
BhU/1UC6OaeFxw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:47:21 2025 by rpki-client