Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: oT1LAdHe6y53VhunRaephk8MimAvdvD0aqGDb3o72q0=
Subject key identifier: 0C:80:05:D9:C9:71:C1:AE:2B:CC:1E:EB:F1:58:CE:B1:1A:8D:AA:D4
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019748C329A71E57E066D826340C8EC202EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 04A0
Signing time: Sat 07 Jun 2025 05:00:38 +0000
Manifest this update: Sat 07 Jun 2025 05:00:38 +0000
Manifest next update: Sun 08 Jun 2025 05:00:38 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 5XzZwsQgoY0SZzzfrBYE+aHgvAY3Nqzh+pPAPrOMPIM=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:29:a7:1e:57:e0:66:d8:26:34:0c:8e:c2:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jun 7 05:00:38 2025 GMT
Not After : Jun 8 05:00:38 2025 GMT
Subject: CN=0c8005d9c971c1ae2bcc1eebf158ceb11a8daad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:5d:ec:6a:a2:2c:26:71:54:51:ea:c1:97:
f2:5b:2a:66:f1:c9:74:bb:38:2b:a3:da:3e:dc:65:
b1:b9:5c:d5:58:1c:f8:30:b8:42:d7:90:10:b8:13:
b0:40:ac:25:a5:08:4a:f7:a4:2d:96:01:a8:2b:ad:
2f:c7:8f:3e:b7:f1:fb:36:2f:92:36:5a:48:f5:79:
df:37:e6:02:20:6c:73:eb:1e:03:34:cd:da:eb:b8:
ce:c5:97:a5:de:b9:9e:dd:03:1a:62:a2:f0:cf:28:
6d:a3:6b:69:c8:c1:73:de:e6:9f:36:a9:4b:cb:6d:
fa:3f:de:3a:f4:c5:6f:10:6e:8d:27:f7:b6:52:02:
b5:32:55:ec:24:16:36:4c:d5:13:03:35:15:fd:86:
39:18:ca:8d:cd:36:29:d5:5b:7d:0d:9c:99:6f:c0:
74:f6:cb:ee:70:0b:d4:1b:5b:91:9c:ed:5e:2c:cc:
43:0e:7c:32:3d:65:a5:cd:b1:f9:5e:54:ee:f8:e2:
57:d4:c7:cd:f4:f6:4e:f3:7a:aa:14:f8:34:70:cf:
7a:bc:cb:87:f3:db:78:e9:5a:86:46:c1:83:b4:6f:
e3:bb:54:61:5d:51:42:6c:98:44:ce:0a:13:65:b4:
d6:54:b8:6c:5b:aa:a8:36:f2:c1:f2:a2:ae:ce:23:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:05:D9:C9:71:C1:AE:2B:CC:1E:EB:F1:58:CE:B1:1A:8D:AA:D4
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:50:81:4d:81:68:e5:af:de:59:9b:1a:18:30:85:28:66:3d:
bd:e6:00:8e:99:00:fc:a1:bf:b2:69:ec:9e:9a:b1:fd:c1:87:
60:03:fb:d8:14:e0:ba:7f:43:c4:7a:a3:82:83:0d:49:f4:fb:
1d:99:3e:70:18:5b:0a:49:c2:a4:99:0e:3e:7d:e6:b8:53:28:
3d:24:2c:69:d3:68:5e:83:5e:8e:ee:56:67:ab:65:62:33:ac:
97:f6:f5:6c:2e:f3:53:4e:04:40:fd:78:45:0b:96:0e:fe:b3:
ea:f7:54:d7:bb:aa:20:a0:e6:22:ce:33:91:ab:5f:1c:3d:6f:
40:31:fc:fe:05:c2:0a:e0:70:ef:ac:67:72:b7:dc:23:3e:0b:
24:66:22:33:2a:13:a0:19:1d:a8:0d:68:9f:fe:f5:91:75:3d:
2f:ab:90:69:53:7d:11:01:cf:4d:5a:bb:f0:12:41:ff:63:7c:
3c:dc:03:d5:30:43:59:27:fa:7c:05:e9:d8:c5:ae:26:ea:78:
70:40:30:03:cd:b5:2b:01:f2:9d:43:e3:34:02:94:bd:47:6a:
85:f7:f2:5e:72:fd:4b:e7:74:f0:d3:ed:49:7a:cf:c1:54:02:
0a:31:62:c9:2b:a1:74:ca:aa:a5:f5:72:97:d2:53:0f:85:7b:
35:c8:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:35 2025 by rpki-client