Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: d0QunlC0i6EFyCyx9WiEYoG7c4lho+hY5i08EqJIP8Y=
Subject key identifier: 87:94:BB:89:15:42:B7:B3:C4:1D:E8:91:0C:2C:DC:AC:CF:B3:5D:DB
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 0198658235C3386011A37DE6A0DE272864FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0B30
Signing time: Fri 01 Aug 2025 12:01:28 +0000
Manifest this update: Fri 01 Aug 2025 12:01:28 +0000
Manifest next update: Sat 02 Aug 2025 12:01:28 +0000
Files and hashes: 1: 5d3BkT4g6BSm4A2tPk7SLnm-a2o.roa (hash: r7O0hom8hw87s+SCAknwxnQSAbbhz820jIMuUD9IwqI=)
2: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: ZFA1WffrwzCCpe15eDcjMpEGbzKLLKSJHf9M/EewaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:82:35:c3:38:60:11:a3:7d:e6:a0:de:27:28:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Aug 1 12:01:28 2025 GMT
Not After : Aug 2 12:01:28 2025 GMT
Subject: CN=8794bb891542b7b3c41de8910c2cdcaccfb35ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:a6:78:42:08:20:21:34:b5:b2:7e:f5:ee:
72:ac:c9:86:06:7c:8e:e2:c0:86:45:c9:78:9b:fe:
0a:04:9e:16:36:81:99:0b:3f:26:83:4e:08:c3:c5:
c5:18:65:56:0d:c5:22:d6:a0:e8:0c:58:5a:d9:84:
41:c3:c5:bf:19:1d:c5:67:9e:94:a8:d3:5c:b8:0f:
b5:06:d4:17:3b:ef:ee:19:48:ad:65:8f:7d:4f:ce:
13:2f:1f:27:f9:a2:a5:0d:a8:f3:35:53:64:1a:7e:
bb:8d:f3:81:cf:bd:ab:05:0f:0e:7e:09:39:83:65:
29:65:da:6b:b7:93:a8:7e:29:d1:58:40:ac:0f:32:
d4:e3:fc:b7:08:ea:65:85:62:22:d3:4b:2f:62:f3:
ce:c9:69:d1:3f:69:79:66:34:0d:d3:16:e9:da:05:
fd:fb:a2:b1:a8:69:fd:8c:2f:5d:49:8f:57:bd:8a:
35:8e:a0:57:68:0c:f6:04:6d:29:25:ef:74:44:d8:
17:eb:cc:7d:17:05:12:d2:b1:d2:c1:f8:df:a1:93:
4f:8c:1f:dc:1f:2d:80:ca:cf:7f:95:86:1d:0f:2c:
6a:b5:3a:37:a9:76:3b:5a:25:74:c2:02:81:30:a7:
75:d4:f7:26:bc:f5:6d:29:ea:5c:1c:59:aa:ec:e2:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:BB:89:15:42:B7:B3:C4:1D:E8:91:0C:2C:DC:AC:CF:B3:5D:DB
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:03:ca:66:fb:37:4d:4f:36:98:75:ef:32:c8:9e:73:f2:
03:f7:54:b4:5d:11:78:d4:b7:c9:6d:e7:5f:83:05:4f:d6:7d:
6d:c4:5d:c1:84:39:d3:65:ab:93:aa:aa:9a:48:65:59:6a:cd:
9b:3e:23:28:cd:d8:45:35:fc:dd:ba:6f:83:bc:b4:82:16:3d:
65:8b:52:bc:32:33:3f:61:90:62:66:2f:98:a5:8a:97:21:43:
38:bf:52:43:b7:5f:17:e3:c9:97:ef:ba:b3:f8:cc:16:85:44:
64:b5:b5:70:4e:1e:64:44:c7:63:31:dd:1d:bf:ee:87:63:a8:
26:a9:5c:41:5b:90:07:d9:60:39:37:19:b8:82:29:b1:08:f0:
47:08:21:d3:1d:5a:e9:d2:31:c7:d2:c9:42:30:b1:aa:0f:63:
e0:35:ef:e6:f3:09:a0:38:de:d0:76:dc:3f:4c:33:0f:93:14:
c4:25:fe:ff:34:02:c6:5b:be:b5:d7:35:e2:b4:57:51:94:bd:
3d:71:76:fb:47:ef:9f:27:21:95:0b:d3:d5:59:cb:24:80:01:
2b:30:5c:42:38:a5:76:fe:71:94:fa:cc:2b:e4:99:af:5c:c5:
dd:4e:b8:b9:a1:33:57:77:ec:71:62:96:99:c9:17:64:2b:d0:
b1:0c:59:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhlgjXDOGARo33moN4nKGT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmM1YzA2NGY1MTU5YzhhMWZhNDA2NmM4Y2I4ZmY3MDE2
NzFkZDIwHhcNMjUwODAxMTIwMTI4WhcNMjUwODAyMTIwMTI4WjAzMTEwLwYDVQQD
Eyg4Nzk0YmI4OTE1NDJiN2IzYzQxZGU4OTEwYzJjZGNhY2NmYjM1ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ2meEIIICE0tbJ+9e5yrMmGBnyO
4sCGRcl4m/4KBJ4WNoGZCz8mg04Iw8XFGGVWDcUi1qDoDFha2YRBw8W/GR3FZ56U
qNNcuA+1BtQXO+/uGUitZY99T84TLx8n+aKlDajzNVNkGn67jfOBz72rBQ8Ofgk5
g2UpZdprt5OofinRWECsDzLU4/y3COplhWIi00svYvPOyWnRP2l5ZjQN0xbp2gX9
+6KxqGn9jC9dSY9XvYo1jqBXaAz2BG0pJe90RNgX68x9FwUS0rHSwfjfoZNPjB/c
Hy2Ays9/lYYdDyxqtTo3qXY7WiV0wgKBMKd11PcmvPVtKepcHFmq7OK6kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeUu4kVQrezxB3okQws3KzPs13bMB8GA1UdIwQY
MBaAFAL8XAZPUVnIofpAZsjLj/cBZx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEt
NzkyYTkxYzVjYTJiLzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEtNzkyYTkxYzVjYTJi
LzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh08Dymb7
N01PNph17zLInnPyA/dUtF0ReNS3yW3nX4MFT9Z9bcRdwYQ502Wrk6qqmkhlWWrN
mz4jKM3YRTX83bpvg7y0ghY9ZYtSvDIzP2GQYmYvmKWKlyFDOL9SQ7dfF+PJl++6
s/jMFoVEZLW1cE4eZETHYzHdHb/uh2OoJqlcQVuQB9lgOTcZuIIpsQjwRwgh0x1a
6dIxx9LJQjCxqg9j4DXv5vMJoDje0HbcP0wzD5MUxCX+/zQCxlu+tdc14rRXUZS9
PXF2+0fvnychlQvT1VnLJIABKzBcQjildv5xlPrMK+SZr1zF3U64uaEzV3fscWKW
mckXZCvQsQxZEw==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:43 2025 by rpki-client