Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: 6x8vRnnQBTkDwkyLmnOEreY7uHLv3K9PHO1iDtQFULc=
Subject key identifier: 27:45:1C:C0:66:95:9D:7D:BB:0F:6A:89:01:C5:2A:82:38:D0:7D:C1
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 0198730670CDD9BF1CDDCAF742E78AA7F42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:00:58 +0000
Manifest this update: Mon 04 Aug 2025 03:00:58 +0000
Manifest next update: Tue 05 Aug 2025 03:00:58 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: OFyV2yt5EaaxNmFGMyiYfuptOyklZHaar+SFjnIThos=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:70:cd:d9:bf:1c:dd:ca:f7:42:e7:8a:a7:f4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Aug 4 03:00:58 2025 GMT
Not After : Aug 5 03:00:58 2025 GMT
Subject: CN=27451cc066959d7dbb0f6a8901c52a8238d07dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:a3:39:a5:0e:88:7f:89:a2:dd:6c:3e:78:
47:dd:0a:fd:a8:de:88:b8:a6:62:94:51:87:8c:b8:
10:f3:f2:70:55:11:d6:5c:4e:f2:39:91:9d:19:8d:
88:5b:9d:ec:d3:ac:c7:5d:cf:c5:fd:50:bc:d7:fd:
2a:da:2e:8f:67:3c:94:76:08:b9:2f:32:21:1f:4a:
fc:9e:72:ee:9f:b4:93:51:e6:b2:cb:89:00:c9:05:
7f:52:c9:b9:e8:0c:e3:11:de:f2:d4:ce:94:b2:8f:
03:61:00:5e:b5:37:c9:b7:af:0b:e5:6b:23:50:ed:
eb:03:ca:9a:5e:59:e7:63:9f:6c:64:20:10:36:3a:
7b:11:ab:97:ea:fa:ef:ee:5e:e3:72:c7:6e:7d:62:
9f:f0:37:d8:17:3c:14:29:f6:ff:15:d3:10:86:a4:
ef:9c:46:68:a6:a6:a0:e1:82:af:9e:8d:40:7f:f9:
b0:52:3a:c7:b8:11:d1:7a:fb:f0:af:48:9a:03:17:
33:1b:f8:ac:08:81:48:b6:00:d1:eb:1e:df:5f:5c:
6c:bf:ca:dd:47:b4:a0:24:e9:8c:78:ce:b5:15:5d:
62:8b:53:5e:6e:40:5b:19:2e:77:8b:75:63:f0:58:
32:ed:2b:9b:11:f7:fa:29:05:1b:7e:98:57:85:3e:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:45:1C:C0:66:95:9D:7D:BB:0F:6A:89:01:C5:2A:82:38:D0:7D:C1
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:95:8b:8a:2d:62:c4:07:68:20:51:4e:42:fa:de:c6:27:
d4:75:14:4a:2d:86:22:7c:5b:c1:c7:fe:1a:18:0f:67:b1:00:
c4:e5:0f:49:b1:37:d4:f0:de:ec:61:a1:cb:17:f3:15:6b:6f:
e3:0e:b2:21:ec:4a:fb:34:66:6f:ff:b6:b1:4b:9a:b0:ad:1c:
27:75:50:2a:f2:60:12:09:e3:dd:0d:a8:ff:1c:92:8f:be:3b:
0f:14:6d:c6:75:0f:66:f2:5d:f3:30:06:b5:24:8f:52:be:09:
38:98:73:ab:c2:93:d1:ab:d0:c2:cf:a9:93:22:52:7c:31:3e:
32:2f:92:ee:31:cf:5b:e6:75:a4:bc:e6:98:82:e2:30:34:00:
4e:50:bf:5c:db:f1:21:c7:2a:ae:4c:3a:63:ec:d9:79:df:3c:
09:a2:5c:c2:8a:b2:21:9e:fc:04:37:75:2b:e2:6e:23:a9:22:
58:a2:2c:c3:bd:35:43:a7:a9:36:42:a0:c6:d7:ed:83:b7:62:
f8:3d:ab:14:f4:d4:b6:95:fe:d4:68:30:45:de:16:91:1d:fd:
be:ea:b4:ce:c5:93:65:39:c2:9f:62:96:07:3d:2a:11:0f:b6:
d4:3f:6e:9c:41:bd:33:3c:c4:9d:35:ed:e9:9f:bf:be:af:64:
31:01:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:19 2025 by rpki-client