Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: kslEk/y5XNnhjzffo0RuotpZh3Ai9c7IwRrNQVP5jxQ=
Subject key identifier: E5:76:E1:93:09:20:64:D4:3F:7A:F9:D6:EB:DF:1D:37:BD:AE:4F:2B
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019847AD9370C12744FA585F537B9135CD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 1115
Signing time: Sat 26 Jul 2025 17:00:14 +0000
Manifest this update: Sat 26 Jul 2025 17:00:14 +0000
Manifest next update: Sun 27 Jul 2025 17:00:14 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: lmo6X3jI6bz+QIzs/0UGMmZQmESVWPc+6u1n3P1b+yo=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:93:70:c1:27:44:fa:58:5f:53:7b:91:35:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jul 26 17:00:14 2025 GMT
Not After : Jul 27 17:00:14 2025 GMT
Subject: CN=e576e193092064d43f7af9d6ebdf1d37bdae4f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:12:5d:29:f8:bf:ed:ca:15:05:3c:cf:0f:
6e:ff:fd:fe:5f:f4:6b:69:03:0c:1e:c4:66:7d:f3:
fb:70:e9:20:d3:d5:b0:e3:8d:73:f0:c1:e2:32:25:
d8:24:b0:7b:37:91:56:9d:de:94:99:f9:77:b3:2a:
b9:16:26:ba:6d:c2:24:f2:1c:d7:19:54:44:a7:a8:
1b:b4:b7:2a:76:2c:7d:39:69:66:ff:25:05:ba:de:
dd:7d:d6:72:66:5f:b0:87:de:6c:fe:f1:4d:49:c1:
11:5e:34:25:df:a5:f7:5f:bf:0e:99:29:fb:bb:f9:
27:56:a7:40:45:ed:78:14:72:aa:32:0c:7c:56:3e:
e9:9e:e5:d1:84:01:8e:94:9b:dc:90:c7:fa:64:f7:
ae:48:87:78:82:12:50:17:e8:a8:f3:2a:54:02:1e:
7b:4f:12:bb:e0:a4:43:8a:a9:09:40:02:10:d5:3c:
16:1e:04:07:0d:47:b7:06:7e:90:59:1a:27:1e:8c:
3e:76:e9:57:95:e5:d5:c5:ed:6a:6b:dd:64:1c:9f:
ea:64:c8:53:fc:b3:f2:a4:ca:d3:6b:b7:d2:dc:86:
86:97:c5:62:44:19:bb:e5:db:45:49:8b:8e:97:a9:
a2:bd:ff:32:54:b6:d7:59:7a:98:45:45:b2:44:c4:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:E1:93:09:20:64:D4:3F:7A:F9:D6:EB:DF:1D:37:BD:AE:4F:2B
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:e6:6f:ca:6d:07:4c:e5:0c:78:58:f8:45:94:b8:54:1d:
fc:ba:a6:95:55:e5:36:53:49:ec:c1:f5:b1:e0:30:2f:c4:7b:
9e:3e:d9:17:bf:d8:eb:7d:79:5a:d1:e6:97:11:3e:a5:2a:8a:
f6:6d:f9:4e:62:99:a8:63:3b:5f:8a:1f:4b:75:9e:be:c4:81:
c7:65:55:82:a6:b5:70:73:14:61:87:17:d9:ba:7d:66:e1:33:
72:99:ef:18:a3:68:82:07:b8:d6:38:c4:bc:f9:e9:9d:cd:93:
36:08:7d:82:36:22:a1:d3:d6:58:7c:df:c0:85:1a:92:6b:22:
88:02:8a:5c:cb:21:00:ec:c3:19:f6:bb:1b:61:2b:bf:78:ed:
f8:d6:5c:b0:14:4d:6d:af:be:91:e2:1f:86:0c:99:e5:8c:18:
53:86:97:fe:78:cc:50:24:4e:a8:79:e7:03:8a:08:a7:b8:cc:
f9:29:8d:b0:bb:82:ec:33:13:51:2e:98:28:cc:39:9b:fe:3b:
89:02:fc:31:ca:d5:e4:39:7d:54:28:40:f5:ff:0a:d2:03:5b:
40:53:9b:b7:60:50:1a:14:e5:dd:73:eb:c9:ec:f4:47:2f:08:
70:90:ff:7d:1e:c6:12:22:65:c1:7b:3b:41:29:02:24:19:41:
81:16:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:04:57 2025 by rpki-client