Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: UZaAbHIh7nijsGL+LN0JEQFT/lpUOlku7sV1TIq6CNM=
Subject key identifier: 25:85:4D:5A:7E:66:1F:D4:E2:DC:14:06:21:3A:5C:3D:1F:79:BA:6F
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019847AE061C22659493C737228CD0FC5593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 0524
Signing time: Sat 26 Jul 2025 17:00:43 +0000
Manifest this update: Sat 26 Jul 2025 17:00:43 +0000
Manifest next update: Sun 27 Jul 2025 17:00:43 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: FL3d+qqNTkspY5LQwB1v9SV7SpdXSs/tCXFd1/kM2Cc=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:06:1c:22:65:94:93:c7:37:22:8c:d0:fc:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jul 26 17:00:43 2025 GMT
Not After : Jul 27 17:00:43 2025 GMT
Subject: CN=25854d5a7e661fd4e2dc1406213a5c3d1f79ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:07:1c:c2:d8:7a:9c:44:21:ef:57:94:66:
92:1a:7b:1c:8b:14:c7:4c:00:f5:68:c2:c3:7e:bb:
bc:c3:44:dd:7c:07:60:3e:f7:a3:03:39:6e:45:86:
f0:07:a1:a8:6a:a6:30:e9:eb:93:03:ad:3f:d7:4e:
4f:74:c8:5c:48:c7:8a:6e:8e:f7:b8:39:6a:a4:d6:
9c:ae:ea:95:37:ce:0a:9c:f4:85:8d:75:a4:40:65:
c9:41:d7:4c:ca:d5:a5:d4:6a:f8:2b:a6:8d:ce:f5:
75:85:34:e3:3d:3e:dd:c0:85:4e:b2:c9:e4:56:77:
a1:d9:6a:1d:40:4c:e4:66:70:e7:35:e0:3a:db:99:
8a:12:e8:1a:7a:41:dc:3f:54:35:02:a3:c1:c1:c6:
5d:1c:f5:dd:c8:9f:e7:97:88:ec:cc:5a:c8:8a:ed:
ab:d3:4d:d8:72:9e:31:1f:2d:7f:e3:a3:72:b5:b6:
ef:e6:d4:37:97:03:b7:4a:76:c7:d6:53:77:24:d8:
cf:db:47:ba:b8:7a:94:1c:b1:b3:09:55:41:f8:b1:
63:1b:4c:e6:c6:f1:b9:a1:52:f6:51:29:5f:86:9d:
ee:fb:a6:57:30:52:80:c0:88:d7:0b:9c:63:3e:c3:
ec:82:78:c0:f0:5b:8a:d6:8d:42:b2:c3:ad:7b:b0:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:4D:5A:7E:66:1F:D4:E2:DC:14:06:21:3A:5C:3D:1F:79:BA:6F
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:f7:54:63:3d:ef:9e:b7:aa:47:d5:d0:8d:3d:c9:e1:aa:
ba:b4:e1:8f:55:22:45:0e:38:05:82:55:68:5d:9f:ef:45:92:
91:93:0a:17:1f:e3:c8:91:8b:66:4b:f4:ba:0c:1b:a8:86:30:
c7:36:ef:b5:9a:70:3d:0c:39:fb:e1:f2:0f:66:e6:ec:be:71:
34:b5:e7:8e:e1:72:14:83:e9:9f:3d:20:f1:93:76:69:71:cb:
a3:ff:51:8c:4c:21:26:89:11:89:66:bb:79:56:f4:86:27:f8:
ad:1c:88:8f:ab:50:e3:b0:37:4b:ba:de:31:8b:28:ab:1b:ba:
e9:e6:50:32:c9:7e:f0:80:9a:68:8b:82:d1:5d:d6:99:e1:d7:
ce:97:3a:5b:d6:b7:47:05:dd:16:d4:dc:f8:10:82:d3:52:08:
d2:ac:ad:df:35:07:18:c1:d8:77:72:e4:9d:01:f6:3a:a5:8c:
46:93:23:34:9f:a3:a0:05:00:72:bd:ce:79:a5:c3:7f:ef:9d:
f9:f4:93:e8:48:68:ee:c7:bc:fb:eb:67:15:3b:47:17:d2:8a:
ff:59:2b:4b:f9:23:df:da:d9:8c:03:4b:44:9e:77:df:98:fc:
fe:e4:01:8f:a4:ed:a1:fc:58:f3:cc:a6:3f:3a:e5:a7:b9:b8:
6b:a9:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:32 2025 by rpki-client