Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: Z9z7UMqY2kZLlzrH+PryDudliq6KnNBU637i2Zo4Zho=
Subject key identifier: A0:41:D2:22:64:D6:48:7B:12:B8:23:D8:22:EA:05:AD:4B:25:53:F6
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 019A4E4FBE3499E9502263B12BF8C1A8DE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1422
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: V9O0XKpm9WnTY3czlROAJsd+OmuL4kFfxURRwATBS2w=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:be:34:99:e9:50:22:63:b1:2b:f8:c1:a8:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=a041d22264d6487b12b823d822ea05ad4b2553f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:6d:72:71:e1:ef:23:cc:77:ea:ff:20:74:
90:03:ec:20:ea:e1:9e:33:a7:5a:cc:14:15:b3:b2:
9a:37:2a:2a:d3:af:2d:b5:dc:db:c4:fc:3a:95:6e:
7e:39:49:d8:9d:07:f9:89:f8:6a:c2:51:81:da:1e:
2a:3f:5b:3d:75:bf:69:be:b9:80:e7:0a:c8:71:f4:
1c:23:99:e5:6b:53:4a:b8:21:3d:12:06:3e:38:4b:
42:0c:f3:ad:9c:aa:0f:0f:99:0f:97:4c:bb:74:bd:
2a:22:ce:bf:91:d6:92:fb:0c:d9:f9:f5:7b:19:6a:
46:3f:2e:7a:d7:5f:cd:53:8a:75:df:05:ad:71:a2:
97:e9:c7:b8:64:a9:fb:4d:23:93:54:3b:7d:4c:56:
2d:82:ac:48:34:84:5a:25:a6:23:b4:b5:2d:df:ee:
82:da:82:36:d0:f1:1d:f6:7b:68:91:62:95:45:78:
59:cc:f1:91:b1:68:62:ef:ef:7f:60:48:9d:68:8b:
4f:4b:b9:c8:4e:19:5b:f0:e6:6d:f3:c0:9c:da:f9:
34:92:c8:47:f3:2b:56:79:f5:ae:44:b9:c0:84:87:
34:40:0c:74:6d:ee:74:e2:75:cf:c1:be:8f:53:a4:
11:5d:da:30:71:e9:64:45:fb:7c:f0:99:96:8e:0b:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:D2:22:64:D6:48:7B:12:B8:23:D8:22:EA:05:AD:4B:25:53:F6
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e9:0b:f1:c2:13:5b:e3:e7:d6:ac:91:9f:88:01:28:f4:85:
bc:ca:aa:39:52:11:f2:d6:0d:d1:04:bb:de:a4:f3:b6:e6:a5:
f6:5b:96:92:be:8c:f4:af:95:7d:3e:ba:72:f3:03:6b:38:61:
69:8d:b5:7f:81:88:74:bf:b5:c3:57:b1:ec:66:2c:10:e1:e0:
2d:00:05:f0:ce:2e:6d:37:82:43:51:cd:58:3a:8d:79:5f:b2:
8b:20:66:c5:0c:b5:8c:16:0f:49:92:f5:d9:72:2f:79:df:18:
24:4f:53:95:b7:de:d4:19:f0:81:88:80:9a:5d:8c:05:c0:11:
9d:39:7f:c6:a1:e6:d6:e1:73:02:e0:04:a3:7a:78:06:d3:13:
d9:6d:a3:a3:6b:4f:05:a9:e1:c7:fd:9a:c4:c3:67:ee:1e:c8:
1d:f7:ac:57:8e:6c:00:c6:6b:16:6b:43:4b:ca:43:ed:cd:ac:
f7:fd:cc:b3:0c:56:d3:cd:3a:58:66:c1:91:41:bf:af:2a:b3:
67:6e:8d:10:e2:eb:81:71:4e:1b:f1:ed:5a:6e:8c:44:3a:a6:
63:39:c9:f5:0e:04:ba:83:9f:04:f1:85:8a:fd:f4:1a:b2:6e:
d6:12:d6:b8:d6:c6:3e:ac:43:a7:be:15:3d:88:9e:54:9a:c8:
29:c0:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:35:50 2025 by rpki-client