Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: 8iRg3Lt0m0N0q+WAiO1Q7o/ouxdJ9LtVEyPpbYC56us=
Subject key identifier: 06:DC:78:43:AA:CF:0A:50:9D:1D:FA:BB:A9:82:EE:2A:CE:24:F3:3B
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 01976DE29B8602BC004FAF246B497FB7437B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0C6F
Signing time: Sat 14 Jun 2025 10:00:56 +0000
Manifest this update: Sat 14 Jun 2025 10:00:56 +0000
Manifest next update: Sun 15 Jun 2025 10:00:56 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: x6NjI2JZetUdj4RQEjRTUSvB828Ty4m7JSxI+a3rGkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:9b:86:02:bc:00:4f:af:24:6b:49:7f:b7:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Jun 14 10:00:56 2025 GMT
Not After : Jun 15 10:00:56 2025 GMT
Subject: CN=06dc7843aacf0a509d1dfabba982ee2ace24f33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:db:19:91:52:67:b5:9e:df:da:2f:9c:cb:
b6:bf:30:85:f8:d0:51:0a:17:38:8d:72:bc:f7:e4:
ad:7d:36:be:08:74:92:32:74:e6:d4:97:a7:5c:42:
8a:20:8f:d1:1d:c4:24:8b:40:6a:da:2c:2b:89:75:
d6:86:a7:2d:0b:c9:f0:81:d2:ce:9b:25:a9:84:05:
3c:fc:c8:be:7a:03:5f:d2:5f:7e:ab:11:7f:55:78:
14:44:e7:47:78:db:23:3f:7f:c4:3e:f6:39:b5:b4:
7d:dc:9e:4e:f3:9e:8b:3b:b2:55:1f:e3:f8:32:04:
b4:fd:9d:db:97:1f:aa:c9:68:7d:57:1d:36:b8:c4:
02:16:f0:f4:da:a6:44:c0:0b:c9:d9:a6:28:fb:b5:
40:01:d7:fc:07:d4:37:23:83:18:01:cd:b5:f8:56:
eb:a0:11:83:dd:b2:24:1c:bb:54:d5:68:7a:0f:57:
6c:13:c3:f3:dd:c5:58:b4:8e:70:91:38:a7:0e:b9:
58:96:ad:b5:24:62:fb:2c:e7:00:67:92:d2:e1:86:
68:10:bf:61:5f:0b:d8:19:5f:7a:04:17:16:7b:0c:
00:1a:52:20:96:d1:71:51:95:6a:80:da:ed:dd:84:
ed:16:67:a6:3e:9b:47:e0:48:3a:c6:d0:3c:1a:ae:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:78:43:AA:CF:0A:50:9D:1D:FA:BB:A9:82:EE:2A:CE:24:F3:3B
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:f0:cb:01:33:36:73:f5:9d:59:e7:8c:31:cc:37:27:2d:
3e:40:16:87:81:6e:05:d4:fe:23:86:09:b6:a4:0d:2e:60:e7:
37:fb:78:f6:97:6d:06:72:a9:90:5c:11:93:12:4c:2e:38:1a:
8a:6d:9a:c3:9d:90:54:b0:4b:a4:9e:d0:1d:3f:60:51:a5:c8:
5b:77:cb:56:4a:59:67:d2:c6:55:5f:cb:94:55:a9:69:3d:87:
a6:14:24:bd:73:fd:44:d2:ee:6b:02:9f:14:82:89:05:f6:37:
8c:21:71:35:4f:3b:6a:98:96:d9:02:5f:2d:8c:c5:27:ea:e0:
15:14:60:7d:cc:65:16:bb:4e:71:32:c2:94:a1:95:97:60:cc:
b4:9b:70:50:3d:34:75:68:d6:a1:01:19:e0:e5:b5:21:c7:87:
c6:d1:0d:30:8a:53:1e:b4:2a:13:5b:01:63:c5:cc:3d:fe:7a:
a5:d3:37:87:ab:61:cd:7b:26:8e:32:c4:08:0c:44:e3:23:dc:
7b:24:dd:81:0b:88:0a:10:3b:6c:be:df:6f:cb:67:2c:a0:0e:
12:18:e0:bc:33:95:d4:89:f5:9d:19:e0:44:bd:f0:01:93:0e:
6f:a8:91:7b:ff:81:be:3a:fa:dc:c0:af:f0:e5:fd:fa:b8:22:
6b:e6:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:59 2025 by rpki-client