Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
File: avKqUEvzdkSAPC7vFgTThgsd74Y.mft (raw, json)
Hash identifier: EKah5LUiiVqLF+PkcnAOKvU8M0j7SI/cPKfBrOpubE8=
Subject key identifier: B3:C1:99:FB:6C:CF:C6:92:FD:68:D9:37:28:C0:E5:82:99:C5:45:8A
Authority key identifier: 6A:F2:AA:50:4B:F3:76:44:80:3C:2E:EF:16:04:D3:86:0B:1D:EF:86
Certificate issuer: /CN=6af2aa504bf37644803c2eef1604d3860b1def86
Certificate serial: 01984A09B4DED6FB3DCF4418957724459C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKqUEvzdkSAPC7vFgTThgsd74Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
Manifest number: 0560
Signing time: Sun 27 Jul 2025 04:00:06 +0000
Manifest this update: Sun 27 Jul 2025 04:00:06 +0000
Manifest next update: Mon 28 Jul 2025 04:00:06 +0000
Files and hashes: 1: avKqUEvzdkSAPC7vFgTThgsd74Y.crl (hash: t/zCLuvCv3VqwZyRpGFhEUHdI9NTikxV398GLohnMjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKqUEvzdkSAPC7vFgTThgsd74Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b4:de:d6:fb:3d:cf:44:18:95:77:24:45:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2aa504bf37644803c2eef1604d3860b1def86
Validity
Not Before: Jul 27 04:00:06 2025 GMT
Not After : Jul 28 04:00:06 2025 GMT
Subject: CN=b3c199fb6ccfc692fd68d93728c0e58299c5458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:a2:82:53:a5:bd:6c:7e:41:0a:c9:38:1f:
4f:d8:ac:33:b9:39:a0:e1:98:19:b7:dc:0a:03:7a:
8c:4a:46:8e:a6:52:e2:6d:de:ca:ac:5f:37:a5:10:
8f:b7:cd:ae:3e:d8:fb:08:8b:69:8e:78:08:a4:f0:
c5:6c:dc:fc:08:49:50:f0:d8:44:a7:01:bf:8d:80:
e2:f9:1e:d0:ef:3c:f7:04:0e:e0:7b:81:fe:fd:c4:
62:a7:64:51:53:9f:11:bf:e0:16:f9:e3:8a:f1:f1:
6c:0c:2c:c7:9e:ef:da:bb:6d:a0:4b:91:92:be:f6:
3e:ab:54:94:dc:0b:81:fc:b0:c2:bc:39:b1:b9:b5:
5e:26:f3:d7:18:42:c6:d2:33:a0:51:89:a8:03:f8:
9a:b6:1e:8d:10:6e:22:b6:9b:05:0c:90:b6:83:2f:
ef:3a:42:e5:1d:7a:fa:cc:fb:51:9a:b8:1a:82:bd:
b3:d0:09:33:b7:c2:ba:d1:33:e8:4b:08:fe:9c:86:
52:f6:3b:2d:d8:3e:6e:2d:33:65:fa:56:20:7d:9c:
c6:f7:c4:8f:9e:7b:e1:fb:d1:16:61:0e:7e:5d:06:
91:d7:0f:bc:e8:15:17:9a:88:56:cc:50:5f:6b:07:
f9:c5:7c:cf:1d:46:fb:ee:b2:05:e0:b1:81:0f:bd:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:99:FB:6C:CF:C6:92:FD:68:D9:37:28:C0:E5:82:99:C5:45:8A
X509v3 Authority Key Identifier:
keyid:6A:F2:AA:50:4B:F3:76:44:80:3C:2E:EF:16:04:D3:86:0B:1D:EF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKqUEvzdkSAPC7vFgTThgsd74Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a01938-fabc-4362-9fd0-d4343d9e47bf/1/avKqUEvzdkSAPC7vFgTThgsd74Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:94:15:47:70:3c:cd:09:87:50:03:b0:47:b9:f4:6e:6b:6b:
44:2c:a3:b8:0a:59:38:5f:33:9d:b5:b9:29:85:9a:06:7a:4c:
ff:39:aa:c1:de:40:2c:d2:a7:8a:67:d7:f3:63:10:64:1d:3a:
9e:e4:81:37:22:b0:96:d4:7b:8b:e1:e0:42:61:1d:f1:b2:f1:
b4:33:e5:a2:ee:bb:fb:e9:a3:c1:e9:2e:a0:2e:3a:10:ba:14:
19:e6:24:5d:3a:9b:eb:d9:13:38:15:ab:6f:a2:f6:15:31:e1:
7b:14:8d:3b:14:8d:87:63:22:52:37:46:ec:a6:40:b8:62:ca:
10:ea:8f:47:65:33:de:35:37:5a:33:99:7d:91:5c:d8:8c:37:
f2:f6:08:56:69:e9:b5:fa:c9:06:65:85:48:26:6e:03:0b:c4:
3e:da:20:7d:84:fe:d5:f3:8d:0e:61:c2:85:72:b1:c4:a6:51:
ba:9f:b9:47:15:4d:0c:a4:08:78:2e:22:09:6b:e6:1b:2b:89:
6f:bd:6b:d2:9d:a6:39:a4:b1:7d:d9:2d:e9:cb:95:be:ec:8d:
62:02:c9:c9:93:85:5f:ec:02:f1:31:f7:37:88:ea:c2:2f:25:
cb:c8:43:47:24:2c:2e:3f:aa:85:a6:21:d4:e5:37:dc:0a:b5:
7a:85:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:33:31 2025 by rpki-client