Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: vKaQ46iKR8HzRCpq9ir7EfzKHAb45kJy9NVLCDTm830=
Subject key identifier: 8A:14:71:6B:BF:5C:1F:76:BC:24:E2:5F:EE:A8:91:B0:4B:31:D8:57
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019A50E31C27E94720A346565D77A6DC0161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:00:52 +0000
Manifest this update: Tue 04 Nov 2025 22:00:52 +0000
Manifest next update: Wed 05 Nov 2025 22:00:52 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: 4+1V1SDqNaqoFocCa4CzQxjYGrN+JWiGvwxxeGHw52U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:1c:27:e9:47:20:a3:46:56:5d:77:a6:dc:01:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Nov 4 22:00:52 2025 GMT
Not After : Nov 5 22:00:52 2025 GMT
Subject: CN=8a14716bbf5c1f76bc24e25feea891b04b31d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:18:7a:af:73:96:73:3c:f1:f2:83:51:aa:
d1:86:96:5d:96:ed:da:1a:46:a2:b3:8e:6c:28:5d:
9f:2f:2e:3c:2d:34:76:9b:be:95:9f:94:94:f5:fe:
86:06:72:5f:cf:6d:ad:63:6a:e5:91:45:96:7a:be:
41:8d:34:3a:37:63:4a:24:46:d7:fa:dd:52:be:a2:
cb:4c:b8:f1:da:66:53:5d:e7:c5:63:0f:92:b4:87:
a2:87:22:72:b8:29:7e:91:e1:e6:7c:18:1b:0d:78:
d6:d2:de:17:70:6a:fb:08:a6:b7:98:af:cf:9d:cf:
a2:6a:91:40:d6:1e:a1:c7:1d:ae:2c:8e:bb:4c:33:
78:9e:e7:9a:4d:88:02:cb:07:fe:7f:47:0c:67:50:
b6:7d:ec:63:c5:e4:b9:70:ad:03:3e:99:c9:12:78:
4c:2d:2e:d7:a3:40:8b:1c:16:30:16:30:c0:97:4a:
d5:81:e5:ab:95:93:e2:ca:6c:b2:ad:e8:fa:47:8f:
5a:c6:fb:c7:dc:62:af:f4:9c:47:79:2d:d2:d0:4f:
f1:a1:bb:ee:14:70:55:a0:62:f7:af:87:1b:d8:43:
4c:78:06:1c:f0:66:30:ef:19:d2:95:33:03:be:8b:
ae:43:3b:82:68:91:8b:5e:b1:96:92:da:fc:17:dd:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:71:6B:BF:5C:1F:76:BC:24:E2:5F:EE:A8:91:B0:4B:31:D8:57
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:07:26:8c:ad:6d:cc:95:da:70:31:f4:c0:b0:5b:ee:8e:
a9:26:fc:44:56:32:0a:f0:28:34:ff:52:d5:56:a9:97:ef:84:
72:2f:05:8f:de:8f:06:ce:3c:cf:5a:36:4a:83:50:b2:dc:b1:
0d:c1:4d:0f:d8:4f:85:0f:56:2e:59:9e:83:50:69:24:81:b7:
25:ca:31:90:43:4b:ea:52:82:dc:2d:e3:bd:3d:00:5d:c1:8a:
41:34:17:fc:59:e2:a9:da:ae:9e:c7:ee:b3:1c:41:de:6c:cd:
65:ca:96:0b:f4:3b:22:2d:5b:a1:12:39:59:ae:ba:13:b8:33:
ad:2c:da:87:2a:f8:02:59:7c:0c:0a:16:af:bf:32:07:85:bf:
cd:41:7f:7d:ec:10:de:70:bb:76:88:67:29:6d:21:b6:ac:c1:
57:f1:f4:91:2d:c3:bf:f2:ea:67:48:d3:95:08:87:1d:07:33:
04:53:f3:70:79:67:1a:91:d9:85:cb:85:21:1d:1e:02:70:93:
b7:fd:d8:39:70:06:4f:ef:19:f9:d8:76:0f:32:dc:c4:e4:ba:
e0:84:9b:d0:d5:41:2d:15:c8:c4:74:20:17:c9:f8:99:ad:fe:
28:b9:6b:c5:1d:c6:37:21:67:14:37:e7:98:d6:03:3f:df:49:
77:eb:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:17 2025 by rpki-client