Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: JjyJAprWZhJf2WKocCo8b/e9i2YZCS6+fy5MHHsXoxQ=
Subject key identifier: 1D:AA:EE:36:E5:D1:F5:8D:1E:EF:30:31:79:9A:BF:2A:EC:70:C6:B6
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019A70DBF408AD526E83E0BE37D1B7CF521C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0C3F
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: 5d3BkT4g6BSm4A2tPk7SLnm-a2o.roa (hash: r7O0hom8hw87s+SCAknwxnQSAbbhz820jIMuUD9IwqI=)
2: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: 85oAoSg++Sd3jUFH7X+HjiI/dGfa6gDdyAO+Ve9QUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f4:08:ad:52:6e:83:e0:be:37:d1:b7:cf:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=1daaee36e5d1f58d1eef3031799abf2aec70c6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:18:fd:3a:cf:d0:13:eb:8b:1c:bf:1e:34:
e9:06:3d:80:75:db:77:e4:59:81:f7:ed:2c:4a:91:
35:77:84:64:b4:db:b0:e7:05:8e:aa:ef:80:ba:46:
7d:84:7b:21:67:c8:75:b0:bb:3f:5e:2c:24:0a:e1:
00:e3:bb:f0:ce:ac:8f:83:a7:63:67:7f:74:49:44:
18:ca:31:57:33:9f:3b:be:35:3e:a9:55:50:02:0c:
39:01:2c:6c:66:0b:01:aa:86:78:09:a6:f0:26:ee:
29:bc:84:da:25:49:fb:41:3f:64:4e:4e:04:9c:31:
84:3d:63:ab:94:5b:f4:37:f3:71:b2:47:2d:00:7f:
15:e6:78:10:f1:b1:b8:b8:8d:aa:ae:ed:0c:9b:9f:
5e:35:6b:51:4f:d1:e6:50:56:f0:93:25:8d:6c:44:
50:87:b1:75:25:b2:7b:b2:00:d4:70:ae:f5:77:05:
20:16:8e:c1:60:13:f9:5f:96:20:38:d1:1d:34:4a:
8a:7f:f5:51:a4:ee:22:54:ac:c3:ec:09:5e:2c:2d:
7a:92:78:d1:42:85:66:cf:bd:16:8b:77:92:15:88:
ee:3f:67:ff:15:6d:86:a4:ad:f1:15:cb:58:f4:bb:
09:65:b2:08:12:be:22:7d:25:14:ae:d0:b3:9e:1e:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:EE:36:E5:D1:F5:8D:1E:EF:30:31:79:9A:BF:2A:EC:70:C6:B6
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b4:e1:87:2e:df:07:95:96:7d:ea:3f:dd:68:60:2a:40:cd:
13:83:6e:c6:98:7a:60:88:bc:1a:46:23:45:ad:fb:49:7b:c7:
37:04:0b:0f:0f:79:f0:5d:9a:84:e8:65:9a:d3:27:ef:f2:0d:
cb:a3:bf:fb:14:81:7c:8a:fd:e0:4e:b0:9d:7f:93:90:5c:5c:
32:9e:3b:a1:54:4d:07:81:99:29:1e:73:d8:35:e4:67:c8:01:
35:82:7e:b4:de:8d:e6:39:7e:d6:fe:1f:62:4d:1f:47:e0:4a:
5b:3c:85:0c:31:7e:5c:68:1e:7a:5f:43:1c:4e:5d:13:62:e0:
56:b8:34:71:04:3d:2a:fe:66:26:ed:35:43:46:a1:8a:2c:6d:
e5:94:56:2f:2a:56:bb:65:09:c0:6e:83:1a:2b:6d:5e:7c:11:
75:5c:d9:3e:74:96:c0:60:15:aa:6d:d2:45:e7:ae:3b:30:5d:
cb:41:fb:f7:34:3a:5b:46:3e:92:1b:98:db:4f:e7:e3:07:28:
49:f0:18:54:3d:a5:b6:5b:1e:cc:cc:ac:8a:57:03:37:a0:74:
a4:ff:72:11:ec:97:2a:12:4b:1e:d0:e9:6e:55:d4:fa:2e:c6:
d7:b8:1e:61:ac:70:18:b9:e7:91:6e:5a:e7:61:66:42:67:18:
7c:e4:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:25 2025 by rpki-client