Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: gbHuRqMaNCOZmLUHzlX1hGJ+NpIfsKBp9RNcgr4L2GU=
Subject key identifier: FA:F3:FA:1E:6C:EA:E7:61:A2:61:3E:B9:B3:64:3B:B7:DA:2C:48:A8
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 01984A7804FB0C69E290F940D7453931A683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:36 +0000
Manifest this update: Sun 27 Jul 2025 06:00:36 +0000
Manifest next update: Mon 28 Jul 2025 06:00:36 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: mN9pyjrnuifZnA7I6sVv6phuCXoUjrUDIoPcFIEIa8s=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:04:fb:0c:69:e2:90:f9:40:d7:45:39:31:a6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Jul 27 06:00:36 2025 GMT
Not After : Jul 28 06:00:36 2025 GMT
Subject: CN=faf3fa1e6ceae761a2613eb9b3643bb7da2c48a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:61:7b:dc:47:0c:78:48:a6:88:63:61:d3:
af:fa:d6:d8:22:bc:df:e5:bd:b1:d7:b5:ba:cf:62:
ad:7b:fe:68:67:97:d4:27:f5:fa:0b:05:42:90:07:
fb:62:dd:6e:70:92:0f:b2:b4:0b:5e:19:6c:81:b9:
c4:2e:0d:14:dc:98:16:72:1c:49:20:6f:07:20:e7:
a8:39:c2:5f:e4:49:7b:53:40:55:8f:f3:1f:55:49:
79:05:68:83:3a:39:08:14:80:0b:7a:6a:56:88:ec:
72:19:d4:7a:e0:f7:74:22:bd:a5:bf:c3:d0:32:06:
db:a7:f7:7a:be:53:ac:1f:4a:1b:94:73:43:df:d4:
a6:13:3d:b1:73:64:9b:db:dc:6f:6e:83:5c:d1:8f:
f9:ac:e2:21:f0:43:a2:5a:7d:4c:b7:09:a4:ed:e3:
86:e3:7b:3f:89:6c:35:e2:88:8e:51:7b:e0:bc:a2:
cb:da:8f:da:92:75:c2:6e:bc:f5:46:a7:60:8e:bf:
92:d1:e0:e2:55:34:4a:a6:2b:71:a5:2f:10:99:83:
d4:a1:77:1b:1d:34:c4:49:a3:75:20:a1:61:42:c5:
15:8c:ef:b0:db:f1:55:6d:dc:71:df:e7:b2:3c:1c:
e0:22:7d:8c:9c:0a:44:63:96:96:a1:65:9e:2c:c3:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:FA:1E:6C:EA:E7:61:A2:61:3E:B9:B3:64:3B:B7:DA:2C:48:A8
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:83:38:dc:d0:a5:e3:91:49:0e:fa:62:54:c2:07:5c:6e:89:
9f:98:c0:7d:cb:d3:a5:4f:19:a1:dc:e7:7e:52:56:8f:f7:49:
c2:9a:14:a6:c3:de:d4:98:88:54:5c:18:3d:25:ab:02:23:57:
b7:81:e7:f7:2a:0d:70:32:20:4b:8a:77:48:32:51:6e:38:1f:
df:2a:70:ce:a0:42:5a:bf:2c:f1:9b:c0:a2:0b:8b:fd:25:30:
84:ff:7b:a4:ad:b0:42:c7:7f:39:51:00:6b:ca:d3:74:d8:37:
65:7e:f9:11:e5:e7:eb:de:3e:eb:80:ca:76:a1:5a:be:90:5b:
ba:00:8c:f9:7b:90:2e:1f:26:d5:cd:36:15:e7:75:76:ff:b5:
1c:20:80:a6:95:df:07:54:44:af:d2:b6:0e:b0:56:7d:76:c9:
1c:cd:6e:c2:78:05:5c:48:d6:4e:13:29:55:4f:03:da:59:7d:
16:9c:4e:49:fc:46:41:b9:2d:c8:f6:8f:b6:8e:c8:2e:ba:70:
e9:68:99:b3:8b:1b:b0:7d:41:46:19:a0:d6:8a:6c:49:fd:b0:
d7:58:17:d2:87:6b:73:02:27:6a:66:0b:19:f6:25:d2:c5:7b:
a5:95:00:07:fb:15:22:f1:9e:42:5d:9a:68:e7:65:2a:74:8b:
88:f3:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:50 2025 by rpki-client