Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: PzTEZq+SqZC0H2mR26R5fe1k9etZRH5yh2NrOxxm3i0=
Subject key identifier: 95:58:B3:67:E6:E6:99:62:9E:E3:25:8B:08:DA:E6:2E:C5:9F:F0:A1
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019A4F629F306E6DCB9940289C908D80BBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=)
2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: dVrI2sSxD2g34LvHzqnFbqGmG612vuTK5UqSVtjAAWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9f:30:6e:6d:cb:99:40:28:9c:90:8d:80:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=9558b367e6e699629ee3258b08dae62ec59ff0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:33:79:0e:f0:5c:76:67:c9:97:bb:24:85:82:
ac:e4:0d:d6:58:b6:58:63:ce:5e:bb:c9:7a:6d:34:
8d:ba:6b:b6:0b:cf:af:d3:d0:b6:30:be:91:16:54:
1c:58:a8:0c:24:56:a9:a2:91:f7:f4:3a:90:12:47:
8d:08:42:d9:26:e2:cf:8f:c2:60:f5:96:20:06:54:
2b:2b:fa:cb:61:a8:67:60:ec:28:0b:a4:c3:a1:36:
02:95:e9:e9:d7:58:96:26:85:e1:b9:09:6a:43:d4:
62:39:22:f1:a6:a2:78:8d:dd:03:37:a8:f1:8f:0e:
18:02:32:e7:1a:aa:77:f1:70:6d:fb:7e:3b:a8:51:
0f:11:c0:43:ac:41:61:9e:0f:85:62:e2:4e:a2:9b:
fe:9b:26:90:e3:ad:be:76:9e:ca:67:bf:55:c3:38:
26:d1:2e:71:35:b5:32:b0:e1:19:17:bb:83:be:a9:
9b:b6:e9:c9:b3:87:4b:a0:b1:7a:18:e2:74:04:d1:
de:39:88:f1:d0:67:a8:fc:7f:47:de:48:06:01:a1:
4e:49:e4:e8:f4:f2:52:7c:29:04:67:16:df:50:12:
66:3f:59:2e:7d:9b:a7:99:1e:97:c7:53:ad:be:54:
1f:b8:c0:1a:65:66:f0:a8:a6:6e:47:72:57:ad:1b:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:B3:67:E6:E6:99:62:9E:E3:25:8B:08:DA:E6:2E:C5:9F:F0:A1
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:89:d1:b4:44:e2:e3:cf:d5:c4:0a:62:e0:00:f3:b1:bc:90:
08:dd:2a:b7:85:01:39:85:72:75:c9:37:21:1d:2a:9d:4f:5a:
88:00:03:69:68:aa:0f:68:8a:78:d7:a2:35:f6:db:c6:a6:3d:
f7:bb:ad:95:b5:1c:57:c4:1b:98:8a:5e:9f:af:16:6d:7b:7d:
fb:40:ad:3d:ba:cb:97:b4:74:46:31:b3:de:92:de:6d:5f:eb:
b0:63:90:ee:90:71:16:a6:80:6d:2a:b5:16:50:8a:a8:59:49:
ed:8f:74:10:7d:9b:ec:15:ed:0b:5a:7a:8c:d5:f8:22:52:c5:
46:72:bb:59:90:76:f6:95:d7:bc:3f:73:66:80:26:95:c5:33:
f2:8e:d6:ed:98:52:ec:d6:bf:d7:b7:f2:df:19:18:7c:78:62:
36:7c:3b:e9:27:93:3c:5e:4b:3b:2a:60:c5:af:92:15:65:71:
34:8d:ae:10:ae:3d:e7:92:88:95:f8:c9:dc:a4:ae:65:c2:f7:
83:62:9c:1c:f0:24:08:e8:8d:98:fb:a4:89:3f:95:bd:72:20:
8b:6d:b2:27:cf:95:3b:05:10:b2:f8:ef:a1:44:ce:b6:73:27:
7f:16:f3:fd:b1:5c:16:ba:b9:0c:70:ac:65:64:3f:ba:f0:1d:
9f:07:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:15 2025 by rpki-client