Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: g2rIXMlu5p4oeFoiLFkc6i615cl5mGsVgGuORY+eakg=
Subject key identifier: 7C:CC:D0:4B:DC:03:C8:E4:1F:A7:99:4A:27:5B:80:93:1B:85:61:E3
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 01976F2C2F58179E4A2B9D3D26D3F8F8F856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:00:55 +0000
Manifest this update: Sat 14 Jun 2025 16:00:55 +0000
Manifest next update: Sun 15 Jun 2025 16:00:55 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: fd3ymM/0F6K47f1/cvUxj2GiENKaB0WhRyeYOLZG6iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:2f:58:17:9e:4a:2b:9d:3d:26:d3:f8:f8:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Jun 14 16:00:55 2025 GMT
Not After : Jun 15 16:00:55 2025 GMT
Subject: CN=7cccd04bdc03c8e41fa7994a275b80931b8561e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:8c:a3:34:55:a1:6a:9a:99:17:59:ec:d2:
86:33:2a:24:8b:55:6c:7f:97:ca:36:3c:a0:af:7e:
da:17:90:56:f8:79:3c:af:5b:0b:8d:4c:08:43:ba:
b2:a0:e0:8f:cf:02:89:0a:ce:7d:f2:7b:3e:b5:a7:
0b:ac:46:99:06:dc:18:90:d0:be:4a:41:db:d4:6a:
23:86:9d:ce:1f:fa:99:2a:6b:6a:16:5a:31:5b:a6:
b3:75:db:d1:36:8a:97:ad:45:95:98:95:14:31:41:
b2:fe:4c:ac:be:7f:11:2e:7a:fb:06:0e:e7:fd:00:
6d:c3:46:e6:16:75:34:2e:da:0e:1a:ae:48:66:fc:
92:df:04:dd:41:05:25:d2:73:97:9c:c9:e0:4e:1d:
14:a2:cc:37:1b:3f:ff:62:82:17:24:e5:ca:c0:71:
1f:eb:c0:37:22:22:c5:f8:49:cd:f9:f3:ab:dd:de:
d1:04:bc:85:05:ad:20:f6:3d:15:85:bb:61:55:53:
1e:0c:f7:26:9e:79:6d:35:22:76:fc:f3:94:cc:b7:
aa:d5:49:0e:0d:de:c1:ec:e9:a0:a0:07:cb:06:de:
2b:ce:de:fb:8e:db:f0:43:d3:a9:5b:60:05:d8:7a:
0d:b3:22:b2:ab:85:c2:04:a9:a7:6a:76:09:2a:08:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:D0:4B:DC:03:C8:E4:1F:A7:99:4A:27:5B:80:93:1B:85:61:E3
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:38:18:b5:94:26:4a:ea:40:a9:52:45:05:d4:15:74:38:12:
a5:cf:43:bb:b2:98:e4:17:57:60:6c:b6:1e:f2:6e:dd:2c:1a:
b4:3e:c2:d9:00:5b:56:15:45:98:db:98:bd:12:3a:21:48:3a:
14:ae:ef:b2:e2:a7:9a:54:97:9c:ab:ec:2d:b0:6f:95:7d:e3:
d7:1c:b2:db:0f:46:51:60:76:c3:2e:43:ad:79:f7:af:55:72:
1b:9e:de:67:5b:61:5a:37:f8:a6:0b:45:1d:48:19:5e:65:50:
91:46:e5:62:a0:d4:8b:03:9e:82:b3:5a:b3:3a:a1:f8:21:96:
17:61:0f:80:1e:0f:00:7c:d8:14:ef:88:39:f6:7f:a4:c9:f9:
c9:d2:a6:94:ba:04:3c:b4:60:e2:2c:b5:38:3c:e6:ad:6b:b8:
84:da:15:a7:ea:9f:6b:19:0f:4a:24:06:cc:63:fc:fb:02:d9:
88:b7:aa:7d:0d:94:68:d4:09:e3:fc:74:72:9b:0d:e7:76:0b:
25:a2:52:14:e5:d0:6d:11:49:17:71:e1:37:95:1e:af:cc:2f:
48:50:6a:e8:88:22:87:13:59:da:f8:82:ab:29:db:62:00:4a:
a0:29:27:f8:be:cf:28:b9:75:01:14:8a:6b:59:db:78:53:ac:
87:f9:e6:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLC9YF55KK509JtP4+PhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh
ZjM3YzYwHhcNMjUwNjE0MTYwMDU1WhcNMjUwNjE1MTYwMDU1WjAzMTEwLwYDVQQD
Eyg3Y2NjZDA0YmRjMDNjOGU0MWZhNzk5NGEyNzViODA5MzFiODU2MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9+MozRVoWqamRdZ7NKGMyoki1Vs
f5fKNjygr37aF5BW+Hk8r1sLjUwIQ7qyoOCPzwKJCs598ns+tacLrEaZBtwYkNC+
SkHb1Gojhp3OH/qZKmtqFloxW6azddvRNoqXrUWVmJUUMUGy/kysvn8RLnr7Bg7n
/QBtw0bmFnU0LtoOGq5IZvyS3wTdQQUl0nOXnMngTh0Uosw3Gz//YoIXJOXKwHEf
68A3IiLF+EnN+fOr3d7RBLyFBa0g9j0VhbthVVMeDPcmnnltNSJ2/POUzLeq1UkO
Dd7B7OmgoAfLBt4rzt77jtvwQ9OpW2AF2HoNsyKyq4XCBKmnanYJKghLUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzM0EvcA8jkH6eZSidbgJMbhWHjMB8GA1UdIwQY
MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt
Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0
LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjgYtZQm
SupAqVJFBdQVdDgSpc9Du7KY5BdXYGy2HvJu3SwatD7C2QBbVhVFmNuYvRI6IUg6
FK7vsuKnmlSXnKvsLbBvlX3j1xyy2w9GUWB2wy5DrXn3r1VyG57eZ1thWjf4pgtF
HUgZXmVQkUblYqDUiwOegrNaszqh+CGWF2EPgB4PAHzYFO+IOfZ/pMn5ydKmlLoE
PLRg4iy1ODzmrWu4hNoVp+qfaxkPSiQGzGP8+wLZiLeqfQ2UaNQJ4/x0cpsN53YL
JaJSFOXQbRFJF3HhN5Uer8wvSFBq6IgihxNZ2viCqynbYgBKoCkn+L7PKLl1ARSK
a1nbeFOsh/nmqw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:43:48 2025 by rpki-client