Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: hc1qkrfTHvX4HFrDpiNLrj46y+JgwZNk1pvw8tM7hMg=
Subject key identifier: 7A:30:B7:89:E3:51:F4:D6:EA:1C:AE:ED:C0:E2:20:7A:95:2D:A5:D8
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019780FBD07FF8DFFDE6C688779082CA1A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 03:01:15 +0000
Manifest this update: Wed 18 Jun 2025 03:01:15 +0000
Manifest next update: Thu 19 Jun 2025 03:01:15 +0000
Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=)
2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: 6parHkmX0BSafWcBgQaMgeYnC1IPxLLZ+v4hO2CSffs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:d0:7f:f8:df:fd:e6:c6:88:77:90:82:ca:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Jun 18 03:01:15 2025 GMT
Not After : Jun 19 03:01:15 2025 GMT
Subject: CN=7a30b789e351f4d6ea1caeedc0e2207a952da5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:29:89:42:e7:da:fd:55:95:1d:dd:40:27:
01:33:09:e0:b7:d4:c5:af:5c:34:2b:93:0d:74:58:
3d:c8:ef:f8:33:41:45:1a:74:dd:fc:57:4c:82:72:
8c:86:2a:56:68:97:8f:c3:cc:7c:f2:f4:2b:9c:45:
00:46:71:2b:4d:88:21:97:ea:1f:fa:e3:b6:19:0a:
c4:f1:63:c9:fa:aa:e5:6a:7a:bf:2f:55:cc:72:7f:
3f:ba:4d:e6:11:b9:bc:37:1a:be:01:10:23:be:9a:
96:22:3e:66:d9:10:cb:7b:3b:fc:56:c1:01:7b:2a:
4e:e8:bb:10:52:df:0d:7c:e1:c8:bb:d2:e1:1a:ea:
f5:94:7c:b2:9c:86:ff:62:4d:ab:08:3a:27:6f:cb:
8c:cd:35:d1:5a:aa:71:3c:d2:e8:7f:75:08:17:8e:
a4:40:99:f1:12:67:fc:97:c4:69:30:10:fd:fe:3b:
5f:07:2f:5d:af:76:93:73:f2:43:3c:85:f2:e9:45:
bf:43:ab:5f:f6:78:7a:35:11:88:f3:e5:e4:8c:5e:
03:f3:00:31:f2:8c:c1:40:75:2d:ba:98:66:39:be:
4a:23:4f:ed:23:11:90:3f:a1:4f:3b:3f:d8:29:b9:
7b:3b:32:92:0e:ec:87:57:27:e8:c7:e3:16:f4:0f:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:B7:89:E3:51:F4:D6:EA:1C:AE:ED:C0:E2:20:7A:95:2D:A5:D8
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3b:ae:a8:cc:8c:d0:72:71:88:d8:9d:9f:06:a7:16:f9:ce:
c3:0d:63:09:f0:53:d2:f5:b8:ed:93:49:55:f3:ef:8e:f4:d3:
5b:2a:c9:ca:7e:d6:8d:d9:36:95:a5:be:af:13:28:c4:fd:e0:
b3:42:99:00:21:b3:59:b0:9d:f2:9a:bf:c5:71:5e:88:8f:55:
c7:0c:da:b3:af:45:4b:9d:81:24:e8:23:d5:b8:77:ff:31:ed:
75:54:1c:e2:16:a2:af:94:32:b4:dd:38:bb:18:7a:36:e3:6b:
c1:5a:bc:c6:ee:19:d4:19:10:d5:2c:ee:5f:ce:1e:9b:00:be:
3d:da:5b:94:50:d5:83:6c:99:8f:7c:95:a6:cd:86:48:5a:ec:
e8:f3:ce:36:d2:aa:cd:c3:c7:b8:f4:37:dd:ce:82:22:1b:ea:
a5:a9:59:71:72:72:8f:07:62:4c:d6:a7:8d:ae:7c:a7:94:a1:
cd:ab:97:7c:44:38:76:eb:f4:59:30:82:d6:4c:1b:e2:c7:48:
52:f8:fd:f0:4f:98:3d:89:f8:5f:11:67:2b:98:5b:41:74:91:
54:dc:23:b3:9b:14:01:77:b3:8b:58:ea:60:ac:51:ce:24:0e:
73:50:6a:0a:e7:18:fb:bd:3c:87:b7:eb:09:1d:43:6b:10:14:
f7:4d:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:01:29 2025 by rpki-client