
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: tSBzKMMZ0iE9lbBSApq1g1FMIPqH1Dp6UzVGLtBafbQ=
Subject key identifier: EC:F2:40:3A:0B:DF:D4:A0:13:37:C0:2B:46:3E:87:1B:F1:DF:F5:34
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 0199239FBD5063B591404ACFE2A8B31C1D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 106A
Signing time: Sun 07 Sep 2025 10:01:35 +0000
Manifest this update: Sun 07 Sep 2025 10:01:35 +0000
Manifest next update: Mon 08 Sep 2025 10:01:35 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: FP4pykdSsSZgGIGnjYKK9TqnsoxF/zzt+ilswc/vRp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:bd:50:63:b5:91:40:4a:cf:e2:a8:b3:1c:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Sep 7 10:01:35 2025 GMT
Not After : Sep 8 10:01:35 2025 GMT
Subject: CN=ecf2403a0bdfd4a01337c02b463e871bf1dff534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:2d:96:73:23:c7:a1:ba:aa:10:46:e2:6b:
d8:47:f2:f8:64:36:94:3b:aa:3f:bf:a4:1a:ce:be:
b9:b7:94:39:f0:ff:b2:66:4a:52:72:d0:7a:e9:1b:
33:51:f5:e1:cc:58:00:fb:bf:cd:1b:79:57:15:9d:
f5:2f:ae:c3:e9:0a:1f:f2:f3:05:7c:85:5f:d3:7b:
a7:85:ab:9f:39:26:fa:8d:11:20:a2:ad:81:a5:4d:
68:db:d3:ad:ae:4a:df:3f:b0:a9:4e:43:19:cf:4b:
19:ea:7c:a6:dd:f5:9e:ed:0f:f0:a7:6d:13:61:f6:
ee:70:64:d5:25:ce:21:5e:78:a4:3c:ac:f8:fa:94:
9f:3e:f9:92:88:ce:f0:fc:88:b4:ae:9d:1f:cc:7f:
89:81:1a:f9:0d:b2:96:e4:ce:19:2a:fa:29:f6:d8:
6a:67:dd:a9:16:90:24:98:81:8c:14:aa:b9:2d:34:
29:bd:b2:1a:02:ec:82:62:6e:37:03:ee:0e:f3:34:
77:2e:4b:0d:da:ee:fb:a3:ac:46:0e:22:7a:e1:d5:
40:27:72:cd:80:77:43:c6:4c:94:34:ab:d0:d9:6c:
13:67:ff:60:73:c6:9e:a0:31:11:56:9b:dc:f3:b3:
95:bf:47:86:86:c5:12:f1:f9:d3:db:47:18:7a:2e:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:40:3A:0B:DF:D4:A0:13:37:C0:2B:46:3E:87:1B:F1:DF:F5:34
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:50:ba:01:ec:f0:f1:6b:70:48:64:47:8f:54:f9:64:b4:da:
a5:6a:1e:f1:e2:ee:52:d0:00:9f:d7:72:a9:3c:24:54:cb:49:
76:be:c1:c8:52:15:80:66:1b:e9:71:6b:40:30:3a:57:8c:ac:
bb:25:36:1b:f4:1b:7b:71:42:b5:87:e9:a7:2c:ec:7c:fc:d4:
94:d5:f5:a0:cf:2a:aa:f6:aa:c2:c4:d0:90:bf:6e:1b:06:21:
13:b4:f1:8b:dc:ad:ce:ae:e5:f6:66:f1:aa:a2:18:75:7a:34:
fc:82:11:c7:44:f4:95:a6:e9:e2:c1:97:d4:af:c4:0f:c7:c0:
45:43:ee:a2:b8:f9:f2:b9:54:32:01:9a:ae:6e:a7:9c:85:09:
88:81:c3:b6:b0:d8:6e:df:e9:e3:05:86:c5:57:ee:33:3d:ea:
77:ed:b1:b1:14:eb:a5:a8:35:2d:d0:5d:ec:be:1d:9b:a8:00:
c1:70:c2:6b:6e:c9:d2:b9:f9:0b:97:51:b4:14:1d:9f:f6:24:
ff:c5:e7:76:91:1c:96:12:7b:ce:5d:79:8e:cc:64:28:3f:e6:
44:54:41:d2:20:ff:79:0f:1c:ab:37:a2:cb:4d:c6:54:40:2e:
b9:70:86:58:bc:21:da:87:ee:1f:78:74:98:58:f8:07:13:53:
62:7f:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:08 2025 by rpki-client