Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: YIrhisIbTHSExu75K8JFOrzfkzQOeG4pw7AfKGnI+sQ=
Subject key identifier: 33:D2:65:B3:70:67:C5:01:CD:EE:BD:99:53:E0:25:24:EE:01:21:E5
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 019A51879F4B7ECE584313D31AD158A4B1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0DEE
Signing time: Wed 05 Nov 2025 01:00:33 +0000
Manifest this update: Wed 05 Nov 2025 01:00:33 +0000
Manifest next update: Thu 06 Nov 2025 01:00:33 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: m9H3DvK3+d0KFW8U0NvJRAvg9c9tq9SgDBZ76s7pS4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9f:4b:7e:ce:58:43:13:d3:1a:d1:58:a4:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Nov 5 01:00:33 2025 GMT
Not After : Nov 6 01:00:33 2025 GMT
Subject: CN=33d265b37067c501cdeebd9953e02524ee0121e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:4a:91:88:ec:96:49:ff:f9:c0:f3:e2:77:
aa:53:c0:a5:38:cc:5f:68:7a:c8:37:75:45:d8:77:
db:18:3f:f3:0c:6e:10:e8:55:c7:b9:41:62:7f:db:
69:cd:15:f4:89:83:c1:6e:81:3e:f1:41:40:72:2f:
f8:51:b7:3b:1e:0b:3d:d0:61:53:86:4e:cb:2e:82:
93:8b:de:40:ed:7f:b9:2a:09:ac:61:e6:9f:12:e5:
35:ec:ff:7d:8e:64:be:c3:66:e7:cb:2c:c4:73:76:
f0:73:85:81:26:88:fe:85:07:73:82:27:43:b3:9a:
a1:ce:8f:75:d2:8a:32:d0:27:65:e8:8e:ce:19:ac:
2e:e9:c6:fe:f0:f7:60:9e:29:1d:78:af:1d:26:8c:
7c:06:27:da:a4:03:16:07:86:0a:04:53:b3:c7:30:
88:f7:55:1b:44:cc:f3:be:e4:6e:e6:5f:97:9e:2c:
0b:e1:29:d3:c8:0c:8b:61:9e:48:cd:e5:8e:a3:9e:
d1:07:04:b1:b3:c8:04:5f:6b:99:54:38:5b:e6:c4:
ab:58:8d:f1:2f:be:49:92:39:62:48:40:3a:f0:7a:
30:e4:ad:50:d2:52:7a:72:7c:6d:dd:63:3c:0b:a0:
10:b4:9f:7f:8a:86:2f:72:e1:5d:a3:4b:c6:e3:66:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D2:65:B3:70:67:C5:01:CD:EE:BD:99:53:E0:25:24:EE:01:21:E5
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5e:58:b7:1c:03:98:5a:3b:dc:e4:e1:14:4a:39:d4:f6:be:
bc:cd:53:3b:d8:58:ef:75:a6:c4:2e:4c:87:85:9d:d2:15:9e:
05:3b:7a:e7:1d:fa:8a:6c:ec:0f:5b:56:8c:53:d5:f8:be:64:
cf:c5:97:14:23:b4:1a:7f:55:91:0e:41:5d:de:5a:fc:56:24:
06:18:b1:fe:1c:5d:42:6b:01:d0:b3:63:55:09:65:99:64:6f:
9a:fa:36:c1:eb:f3:15:2f:f3:43:74:b4:4f:a7:5e:9b:25:b8:
cf:bf:f8:8d:b7:a2:7c:a7:ab:56:21:09:e6:77:11:6f:34:3d:
f1:c0:0b:29:18:bc:77:53:4e:3d:90:0b:d5:90:a7:d0:2e:8e:
08:69:bd:fa:2f:a3:7a:78:0f:e7:87:75:fb:53:82:0b:a3:7b:
0c:3d:23:90:b8:eb:df:a3:87:a2:4f:21:02:03:49:96:79:1b:
a1:36:56:75:be:08:b6:ba:2c:19:c3:f9:90:94:32:13:4d:6e:
69:c3:e6:c6:f6:16:a4:9a:7b:6b:14:36:c5:5f:7d:7a:34:67:
81:5e:5e:1d:44:94:c9:af:2c:c7:62:9f:bf:c5:28:94:a3:e6:
5f:b0:81:45:45:a9:a5:95:ff:fa:66:8b:95:1f:ba:cc:40:d3:
57:7f:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:32 2025 by rpki-client