Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: UnDrraTrMaaeBJI6Zs4Oc5IL035RFGdjlsp8vjoWnd4=
Subject key identifier: 25:12:6B:66:11:3C:7B:BF:80:8D:06:11:8B:95:42:9D:DA:6B:BE:14
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 01987298CBCFBB6AE5F65D95E1D9CBE91B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0CF6
Signing time: Mon 04 Aug 2025 01:01:12 +0000
Manifest this update: Mon 04 Aug 2025 01:01:12 +0000
Manifest next update: Tue 05 Aug 2025 01:01:12 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: +3qbrs6i72m6wwN3swbCJrkdrWOMa8hYgfoU9kw34Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:cb:cf:bb:6a:e5:f6:5d:95:e1:d9:cb:e9:1b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Aug 4 01:01:12 2025 GMT
Not After : Aug 5 01:01:12 2025 GMT
Subject: CN=25126b66113c7bbf808d06118b95429dda6bbe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:74:c7:3f:b6:ae:e3:41:b8:76:d2:e5:94:
aa:be:24:76:f6:a9:91:83:66:24:c3:42:66:79:b2:
ee:ba:f9:53:9e:6c:7e:3b:10:8c:a5:5d:19:dd:dc:
38:b4:6d:49:5d:7e:7d:65:4d:6d:89:c0:78:93:b9:
52:0c:2d:07:da:bb:0a:df:b5:d5:29:92:75:d7:22:
5a:51:90:a3:27:4d:51:3a:4b:ac:63:d6:53:2e:c6:
45:e4:3b:c2:0f:2a:81:77:0e:4f:2f:d1:65:44:d7:
ee:09:c0:8e:17:10:3c:0b:23:fa:82:f9:e1:51:56:
b6:a8:0b:5a:59:a2:6b:a3:f3:ff:41:40:20:07:9f:
1b:23:a2:99:0b:87:de:9e:75:37:23:07:24:cb:24:
d6:85:df:24:e5:78:7f:da:0f:6f:c9:4c:ef:e8:e7:
93:45:b1:8b:5e:0a:cd:9e:e1:ff:77:da:ec:60:6d:
ea:0b:3a:c7:14:60:de:f0:a3:2b:ab:3a:69:b3:1a:
e8:85:5e:0f:51:03:b5:f6:47:d7:89:eb:d6:73:f9:
80:7b:99:e5:e4:ae:5e:c9:83:0b:d8:6c:17:a0:6f:
af:ae:3d:99:36:85:f0:77:02:b5:97:60:93:54:60:
34:fe:31:ea:97:f5:73:d7:74:56:df:fd:61:0a:37:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:6B:66:11:3C:7B:BF:80:8D:06:11:8B:95:42:9D:DA:6B:BE:14
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:33:14:33:70:7f:a0:33:0f:77:46:8d:fb:8e:f4:37:9a:
8d:b8:4d:28:4d:e2:32:f7:90:45:2a:62:1a:b7:43:2e:22:79:
cc:d7:39:a2:f1:0f:f1:04:03:45:62:c9:42:25:73:a9:ee:6e:
12:6a:89:fb:d3:b7:9f:91:d9:3b:25:36:08:c2:22:8e:d7:a4:
42:ca:72:48:22:b0:d8:22:30:1c:37:36:c1:0c:d2:ac:6e:3f:
c6:53:38:fe:81:90:09:be:9d:f0:e6:fd:e8:03:9c:fb:09:0b:
5d:88:5a:f9:14:45:64:79:a4:dc:1b:9a:aa:19:ee:03:01:57:
23:9c:3a:27:dc:d8:ec:d7:6f:81:69:c9:c8:1a:4c:53:c3:6a:
da:05:1a:8a:40:fe:da:f6:4d:b9:43:d3:f5:d2:0b:67:de:8c:
2f:e7:43:64:ab:90:f0:e9:3f:0e:49:6c:4b:6e:d2:eb:c5:2c:
2a:78:a1:4d:5f:d6:6b:08:d9:32:62:28:fc:a2:5e:91:1a:8f:
61:2a:58:05:ec:39:24:3c:f5:97:03:4e:5d:4f:7b:0a:ff:2d:
fa:43:99:a9:43:6c:40:c0:9b:5c:43:4d:47:ce:b6:ee:92:f2:
43:1b:e6:37:be:9b:10:2c:c7:11:96:c2:59:ff:05:9a:86:a9:
49:21:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:06 2025 by rpki-client