Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: X49Zj22aAMhBBnsR06z7vPFOoU2RA7duov7OL/tz+Ec=
Subject key identifier: AB:A8:34:21:86:8E:5F:2D:C5:ED:C1:47:86:20:0A:96:4A:CF:A7:37
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 01974D44C7C1EBAD8A26917A266CD2ADFE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 05A8
Signing time: Sun 08 Jun 2025 02:00:42 +0000
Manifest this update: Sun 08 Jun 2025 02:00:42 +0000
Manifest next update: Mon 09 Jun 2025 02:00:42 +0000
Files and hashes: 1: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: o1jIsdc/ReV4ig5ReRzv8VoRU5tgnMjuRIEyT1ElUUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:c7:c1:eb:ad:8a:26:91:7a:26:6c:d2:ad:fe:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Jun 8 02:00:42 2025 GMT
Not After : Jun 9 02:00:42 2025 GMT
Subject: CN=aba83421868e5f2dc5edc14786200a964acfa737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:bc:ba:20:82:ee:4f:35:57:a8:d3:18:77:
15:8a:00:7a:cc:54:b5:56:36:a2:36:9f:5e:a9:25:
74:ac:ff:32:f0:ba:b8:79:4e:8b:fd:df:a2:69:be:
1b:31:2f:88:8d:42:ee:42:73:31:fc:ba:9a:68:73:
85:1c:9d:91:4f:f2:95:24:81:44:ed:cd:73:f4:0a:
aa:d9:96:2f:f3:43:e9:a9:e0:8a:6a:d6:20:d2:26:
8d:2d:fa:53:66:54:55:4c:50:b3:0b:63:ef:15:68:
ab:10:1a:18:e6:29:53:cc:a1:18:4f:03:0d:da:0e:
07:c8:45:c2:fb:e9:be:f8:82:e3:fe:e8:59:36:cd:
f6:bc:56:59:58:f6:1a:0a:80:65:b9:77:68:c7:61:
f5:c4:15:c8:09:e1:7e:b1:6b:65:0b:ec:1c:70:96:
42:65:97:ed:dc:5d:c4:53:fa:dd:ba:c2:5f:a2:a4:
b0:c0:a7:e9:0f:1a:99:1f:82:1b:c9:f7:a9:01:2f:
33:4d:b8:f3:a2:48:f2:df:b7:1a:d2:9f:0c:fe:05:
c2:69:ac:c1:1c:70:ed:57:57:a6:f4:72:84:fb:3e:
76:40:fe:dd:2c:c8:25:bc:7c:03:56:0a:20:78:09:
7c:40:13:5b:f0:a4:9c:20:2f:67:1b:1a:4e:70:9d:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:34:21:86:8E:5F:2D:C5:ED:C1:47:86:20:0A:96:4A:CF:A7:37
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:aa:c3:70:45:89:e0:32:17:03:c7:81:67:d4:15:cb:14:d3:
ee:a9:55:74:fc:01:27:c4:f7:75:55:70:61:9b:78:a8:e0:da:
1f:6f:f8:20:89:06:15:f8:6d:42:e3:7e:53:25:d2:af:01:67:
b2:5e:0b:9d:e5:02:22:41:a6:7b:1a:10:a6:af:b3:8a:82:5f:
c5:9e:31:f6:cc:46:b4:48:00:8b:2b:ff:b1:21:12:e0:36:fa:
5f:47:b4:a5:fd:2c:62:26:8a:1f:7b:52:e5:15:37:47:af:e3:
da:b0:2b:0c:33:d0:28:d6:44:cc:7e:9e:71:e7:e9:ad:ef:d8:
33:c3:95:34:2f:bb:6c:9b:3f:ad:74:53:dd:da:f5:24:46:a0:
4b:08:6a:58:65:26:e6:2a:ab:85:ed:ae:1d:f1:eb:b0:f4:96:
c3:4e:20:1f:d5:ee:50:2b:76:03:80:07:3f:2b:75:82:81:76:
8b:b5:45:74:f6:d6:14:2a:94:d6:e5:00:d1:5b:ba:c3:02:2b:
b0:86:6a:70:fb:51:f9:bb:7f:84:2e:51:41:d1:32:9a:cd:18:
8e:09:55:bd:12:ec:20:1a:20:24:5e:3e:6d:d9:a7:c2:d2:d6:
6b:d0:c4:ed:6d:2d:10:64:7f:cf:60:83:ca:bc:a9:c8:81:46:
30:51:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:10 2025 by rpki-client