Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: 2B2a7hUXgGYVUFva7uUZVtFxgmyB/HrMO4vypVk6hao=
Subject key identifier: 3F:9F:25:70:7D:48:BC:35:F6:C3:E4:C4:CA:67:B2:24:7D:66:23:BD
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019A71EED20DE02106D364A6EA28D059BA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 0643
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 7ot5xfCZbssYtwbw8Cd1u6ctPfFzqyzXvdq76P7hUVQ=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d2:0d:e0:21:06:d3:64:a6:ea:28:d0:59:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=3f9f25707d48bc35f6c3e4c4ca67b2247d6623bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:55:85:c5:68:ba:b7:18:2c:85:2a:d2:0c:
ba:93:d8:77:0c:cd:48:af:b0:b1:0b:7b:d5:33:9b:
b4:83:b4:c2:8a:06:a5:b3:3d:dc:3c:78:9e:99:1c:
50:f5:d7:5f:22:b6:be:4c:a6:50:b0:8f:58:50:fb:
6e:fd:eb:31:aa:2b:ff:99:68:cd:e1:ab:4e:b3:12:
27:ec:7d:22:1e:30:e2:f2:72:c7:c7:d0:d2:fb:48:
bc:0d:51:92:41:27:93:b6:b4:ea:f3:79:f7:4c:43:
cd:4f:9e:8b:36:9b:f0:e3:68:e7:43:97:a1:cb:d2:
d9:7a:2a:ad:5d:46:fc:15:87:d0:71:c4:86:da:e6:
63:11:d5:7c:0f:54:e0:cf:46:10:35:fc:b2:fc:bd:
ad:1d:d1:5b:32:57:4e:68:0c:11:f0:18:b1:b0:0e:
47:f8:b5:58:51:37:8c:ae:93:00:c8:cf:85:dc:c2:
b4:63:44:66:31:c2:1b:d1:1b:ed:21:6a:e1:43:72:
c5:2a:73:93:f4:e0:6d:3d:3c:c9:ef:86:80:89:93:
5c:c3:2a:3b:d9:e4:22:60:3d:9b:61:3d:62:9f:55:
f0:e6:1e:59:e1:33:54:cb:5c:a5:86:5b:f5:88:99:
47:b5:e4:bb:5f:39:20:26:2c:d7:32:af:05:fe:f6:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:25:70:7D:48:BC:35:F6:C3:E4:C4:CA:67:B2:24:7D:66:23:BD
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:69:9d:3c:45:b7:4d:93:cf:2e:31:f1:79:7d:3b:d8:ee:52:
26:bc:11:89:fd:23:e7:fc:8a:7d:68:74:05:4d:f1:cd:95:7b:
1a:64:6b:cb:46:a4:32:41:f6:28:13:d0:93:7c:6f:ab:fd:63:
fd:43:a8:2b:71:86:47:e0:4e:f1:63:41:af:06:64:8e:38:35:
79:c8:ef:e7:83:45:dd:67:18:da:ff:77:a9:13:6d:a5:82:b9:
94:98:f9:3c:e4:76:8c:fd:02:23:1d:e1:8e:5f:df:cd:c8:58:
69:c2:48:3f:4e:eb:a3:72:0b:e4:72:07:28:65:9d:a4:fb:8e:
26:59:b0:23:14:68:b2:41:61:d7:56:51:39:9e:55:1d:00:d7:
ac:4a:aa:c5:01:88:f1:69:27:b9:a8:f9:4f:6c:38:be:6b:08:
68:fa:60:b4:08:11:50:1d:f7:3e:81:e4:cb:aa:55:6d:2f:ca:
5f:2a:ab:50:1d:0b:7d:3d:53:e3:98:83:c1:f9:b7:a9:5b:95:
72:72:73:98:cf:b7:d7:33:e1:2e:ef:64:6f:62:07:93:da:cd:
ab:25:ba:1e:62:fd:1c:50:bd:e3:94:41:f6:b5:f8:5f:19:73:
ab:8e:fb:e1:62:41:b3:61:d6:d9:e2:91:e9:6d:48:9a:ee:d3:
31:43:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:32 2025 by rpki-client