Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: 8fdOQCyeRfY7pbGhT07Fw//v9DGfF4VHXWSJEB3dxS8=
Subject key identifier: 8A:F6:AD:80:13:60:5A:71:DC:9A:A0:7B:36:7E:00:EC:43:E3:65:87
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019879AEFCD0D459D59F8584FDA404143B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1616
Signing time: Tue 05 Aug 2025 10:02:47 +0000
Manifest this update: Tue 05 Aug 2025 10:02:47 +0000
Manifest next update: Wed 06 Aug 2025 10:02:47 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: v/60t3ayY3tFiNFahCs8o3WeKaxX0gLluunAcQKnoPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:fc:d0:d4:59:d5:9f:85:84:fd:a4:04:14:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Aug 5 10:02:47 2025 GMT
Not After : Aug 6 10:02:47 2025 GMT
Subject: CN=8af6ad8013605a71dc9aa07b367e00ec43e36587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:bb:7e:ff:0b:6d:88:5f:4b:72:5d:17:c5:
5a:f9:48:c0:20:d6:b1:a1:1c:07:89:58:1b:ce:65:
a2:22:81:ae:2c:b6:24:7b:fd:88:54:d2:1e:af:91:
eb:20:e7:b7:f5:0d:f1:07:f8:1d:ff:cf:25:d0:6e:
2b:f6:33:91:b8:cb:98:6f:52:9b:88:d5:2f:56:d5:
bf:2d:81:d5:7e:fa:cd:de:8e:42:4d:04:e9:e3:8f:
4e:34:22:76:af:c8:fa:c7:ae:d2:fb:6e:13:29:58:
12:e9:59:df:3a:9b:35:21:4c:30:87:88:68:56:c7:
e5:e9:66:a7:1e:66:43:8f:7e:2a:b6:8c:37:db:d0:
8d:ce:71:f8:12:ff:d0:d0:7a:17:61:d7:c6:56:74:
24:76:18:3b:05:7d:87:6e:7e:d1:f3:7c:4b:ea:57:
2d:de:65:25:44:b4:0a:30:cc:b0:5b:7a:ef:86:ff:
ba:50:4a:d3:26:8f:48:38:63:1b:69:9e:e0:99:67:
da:7e:9d:98:31:4c:47:38:b2:65:6a:66:ff:a0:c9:
9f:62:7f:dd:0d:b2:a3:b4:54:d7:11:c1:fe:4f:8e:
32:c9:0e:cd:1a:37:ef:d6:af:11:e6:fa:eb:bd:e1:
85:33:e1:c5:f2:69:74:43:e3:d9:2a:83:59:f6:f0:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:AD:80:13:60:5A:71:DC:9A:A0:7B:36:7E:00:EC:43:E3:65:87
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:45:b4:dc:26:23:87:f6:95:ec:56:8a:f8:54:46:63:e0:4c:
48:0b:a0:5d:d9:a1:79:18:29:fb:e6:fe:61:e0:25:2b:7c:ce:
7d:82:93:cc:36:be:e7:93:c0:3c:ca:bb:e9:89:76:cb:82:cb:
b5:a0:11:9a:0c:6a:93:4e:11:2f:f8:88:e1:89:f2:59:b5:9d:
da:b9:dd:5f:17:94:46:7d:5a:14:8f:07:fe:d4:fb:77:e2:3f:
11:8a:86:40:c5:10:b3:4b:b1:d7:43:28:b8:1a:cb:5a:30:0c:
d3:f7:00:c0:7c:98:ec:d5:c2:cd:58:d9:fa:de:74:94:b9:41:
24:e4:9a:57:7d:e9:ba:df:7f:d6:3a:d7:dd:0c:02:9c:ab:01:
4b:fe:ec:74:4e:6e:35:bf:27:ab:05:b9:6e:85:cb:9b:cb:12:
89:66:e5:91:fa:e5:b2:d2:d1:4f:07:76:51:57:3b:b7:6f:ea:
3e:e0:de:78:48:6b:60:f0:2a:5a:aa:f2:a8:8f:36:f0:ea:c9:
5c:01:6a:63:15:c3:26:12:6f:64:e6:1c:ae:1f:7e:54:00:16:
9a:81:14:fc:06:41:88:28:ee:b5:88:8f:eb:2d:8a:03:70:99:
c8:d9:1d:17:56:e1:bb:e1:c9:07:8e:51:55:f7:85:8f:b5:07:
a8:fc:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:08 2025 by rpki-client