Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File: AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier: AAhvFDQpx433419SbKADskNOaLgvLwciftQ+B+NZ2r0=
Subject key identifier: D9:47:51:59:F7:36:3B:2F:76:17:34:A7:AB:16:BD:D7:91:F0:2C:E9
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial: 019A71B94647838E3C1C4E7CB635862079F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number: 096E
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: 6Oy6WlhhlIEI5Gxe8ma2z2zWDj354ynBk9ILBfsZ/Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:46:47:83:8e:3c:1c:4e:7c:b6:35:86:20:79:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=d9475159f7363b2f761734a7ab16bdd791f02ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:d6:05:a1:0a:60:b5:14:39:e5:dd:9f:ac:
4b:29:ec:cc:5e:75:82:5d:f8:c3:49:20:a6:e3:66:
10:84:3b:e6:ff:77:69:19:bd:4d:6a:cf:c5:74:df:
40:17:36:95:73:36:f0:f4:0a:41:49:b5:cf:e2:92:
f1:a3:e9:a1:9d:8c:00:db:3a:d0:6b:05:45:c2:2b:
09:9a:2b:b6:ad:b2:88:5e:e4:e3:86:a8:12:f7:e1:
6c:1d:05:d1:ce:30:d7:56:4e:11:60:21:72:eb:74:
77:80:36:07:39:47:dc:42:5d:fa:e7:69:0d:63:a1:
3b:78:a4:1d:eb:7e:56:89:86:16:13:c0:92:29:8a:
71:d9:11:f6:e0:03:bf:51:4a:42:f8:1d:a6:22:ba:
92:41:37:be:ce:e0:7a:c9:f3:70:9a:7e:b2:1c:50:
fd:03:89:e3:62:f8:dc:f4:d6:68:05:82:16:6a:b3:
77:f9:78:c4:3a:50:9a:8d:f2:72:75:bc:cf:58:aa:
af:f9:fc:0e:42:bb:6a:68:44:1f:93:7e:1a:c5:f3:
e3:82:0a:5e:02:c4:30:f4:cb:bf:64:ea:23:a4:10:
e0:0d:d7:37:27:d6:45:0a:df:1c:98:4b:b0:c8:e1:
ba:7b:f4:d9:b6:eb:6f:2f:ec:9d:1a:1f:9e:45:36:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:51:59:F7:36:3B:2F:76:17:34:A7:AB:16:BD:D7:91:F0:2C:E9
X509v3 Authority Key Identifier:
keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7f:b5:5d:b3:34:c5:78:68:a3:3a:ed:5f:01:62:d4:1b:6a:
6d:6e:f0:d9:79:b0:70:45:ff:65:6a:53:33:79:a1:2d:e8:6d:
5f:e0:79:8a:b4:a1:e9:4c:13:e2:15:35:da:d4:b9:f4:e3:8b:
9b:7a:a1:63:08:70:e3:b1:2c:4d:8a:c8:bd:b3:72:d4:c3:91:
d1:ee:ae:42:cd:91:5c:f9:2c:8d:f8:3e:c9:5e:5a:54:47:06:
a4:68:e7:5d:ad:97:f6:69:0a:99:82:53:e0:aa:8c:9a:f8:c4:
29:19:39:ec:28:6f:0f:f2:8b:d1:42:19:82:c2:d3:f4:27:91:
1d:c1:db:fa:6d:c4:4b:72:72:6f:81:39:ff:1d:e7:f9:c3:b3:
9f:23:d3:5f:32:ae:64:e0:2b:83:85:7c:af:eb:ef:f4:aa:e7:
79:de:1b:f6:f1:be:19:de:60:40:fb:08:fd:d0:2a:52:fb:af:
20:99:a3:53:ee:2d:0e:e5:d7:65:bf:0d:33:6f:79:58:b0:f0:
2c:eb:0f:66:7f:71:be:1b:63:3e:12:2c:61:a6:d5:65:6a:8f:
ca:8a:72:18:a7:63:48:3e:b4:91:64:ae:84:2f:cd:94:f5:7d:
cb:e6:84:e6:ed:c7:cb:b9:cd:a2:e6:1f:54:55:87:cc:ff:0e:
ba:3a:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:24 2025 by rpki-client