Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: 3s8C5a9XVbaK9TVfStbyWWxNHD1ct5DiU3E0tjOc89I=
Subject key identifier: 9C:80:F5:F1:4D:81:A4:34:06:75:F6:74:D5:56:CB:F6:61:E4:18:78
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 01974BC420244933B53BC6B4C01A191DE99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1293
Signing time: Sat 07 Jun 2025 19:00:33 +0000
Manifest this update: Sat 07 Jun 2025 19:00:33 +0000
Manifest next update: Sun 08 Jun 2025 19:00:33 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: LbLS6sMyPU2lVTvazBU6d2izv1OIvh73RrvF1j9EjEQ=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:20:24:49:33:b5:3b:c6:b4:c0:1a:19:1d:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Jun 7 19:00:33 2025 GMT
Not After : Jun 8 19:00:33 2025 GMT
Subject: CN=9c80f5f14d81a4340675f674d556cbf661e41878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:94:22:46:1f:be:56:d1:64:a3:f5:6f:98:
da:08:00:b6:4e:1b:c8:94:44:6f:77:e5:7b:26:f1:
1e:bb:b2:36:6c:4f:57:31:58:d7:79:d3:27:dc:09:
5d:cd:13:a6:28:d8:25:9c:46:da:bc:71:fd:00:41:
21:25:6f:06:72:25:4b:91:70:25:a1:16:7d:79:f3:
38:28:f2:c4:79:f6:cf:b2:e8:1a:66:21:1f:07:5d:
ed:34:ce:92:4d:62:e6:2a:b6:81:3d:77:b7:96:01:
58:e4:db:ef:01:ad:f5:b0:56:24:7f:87:50:e6:7e:
2c:27:92:a2:4b:7b:fe:d7:fb:c9:82:75:e4:bf:b6:
a4:f4:28:da:7c:a9:77:31:03:3d:4f:e6:71:67:a8:
10:eb:6a:be:79:09:5a:9f:c7:a0:c6:c7:20:25:e3:
68:1e:b5:7b:80:91:bf:2b:7e:dc:17:05:ea:8d:d7:
69:ac:4a:f7:17:e8:ce:e2:db:7b:46:ff:0e:79:fe:
3c:91:26:2a:1e:d2:55:01:38:16:f7:ac:30:a3:6a:
d9:b9:75:ae:ab:1e:d9:84:14:60:6c:25:05:5f:0e:
c1:ee:41:4a:61:73:3f:eb:09:9f:db:58:d3:c3:c3:
d2:ac:9f:bb:c8:2b:a7:9c:b1:cb:99:63:4c:6d:1f:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:F5:F1:4D:81:A4:34:06:75:F6:74:D5:56:CB:F6:61:E4:18:78
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:9f:73:f4:64:d3:5e:27:33:73:d9:1b:bb:81:31:8d:82:
12:52:f8:15:ea:91:57:b0:58:e2:93:49:e3:51:ec:67:88:ee:
fd:1c:4e:2a:f2:a4:2c:d2:18:20:96:45:21:b2:15:ce:b3:b5:
68:5f:07:8f:a0:08:4e:f2:9a:dd:16:5a:c0:44:55:24:15:da:
a0:d5:d3:a1:1f:9d:72:da:1b:fe:35:44:ff:01:c8:d1:c0:b0:
62:43:65:b4:38:5c:f1:ae:a3:6f:a9:13:79:29:ed:98:1b:ae:
5d:42:aa:25:12:5c:05:3b:95:7b:2b:3d:a5:39:7e:4b:42:30:
dc:ea:83:d8:82:ce:08:f1:a3:b7:1b:9b:c5:bc:44:f8:12:d1:
6b:53:b3:45:55:4b:17:62:0d:3f:57:bb:6f:93:45:47:37:db:
92:90:f2:fb:6c:71:6a:b3:71:fd:e7:7a:fb:e9:8d:97:f0:4a:
39:4c:39:a7:7b:87:9c:58:c3:af:39:ac:54:98:19:29:74:e7:
49:3f:39:fd:9f:b8:9e:9f:80:4c:17:ee:64:bc:8e:b4:d5:ce:
6d:85:ab:30:71:72:8e:5d:b2:1a:5e:cd:5e:0b:e1:b1:52:33:
32:b1:82:82:47:af:7c:f8:62:d3:31:61:43:ed:f0:c8:d8:5d:
2f:be:87:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxCAkSTO1O8a0wBoZHemeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWNmZWUzYzJiNmVhNDlkMjllMTAzZTIzYTUyMmM2MmUz
ODUzMTEwHhcNMjUwNjA3MTkwMDMzWhcNMjUwNjA4MTkwMDMzWjAzMTEwLwYDVQQD
Eyg5YzgwZjVmMTRkODFhNDM0MDY3NWY2NzRkNTU2Y2JmNjYxZTQxODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5OUIkYfvlbRZKP1b5jaCAC2ThvI
lERvd+V7JvEeu7I2bE9XMVjXedMn3AldzROmKNglnEbavHH9AEEhJW8GciVLkXAl
oRZ9efM4KPLEefbPsugaZiEfB13tNM6STWLmKraBPXe3lgFY5NvvAa31sFYkf4dQ
5n4sJ5KiS3v+1/vJgnXkv7ak9CjafKl3MQM9T+ZxZ6gQ62q+eQlan8egxscgJeNo
HrV7gJG/K37cFwXqjddprEr3F+jO4tt7Rv8Oef48kSYqHtJVATgW96wwo2rZuXWu
qx7ZhBRgbCUFXw7B7kFKYXM/6wmf21jTw8PSrJ+7yCunnLHLmWNMbR8iXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyA9fFNgaQ0BnX2dNVWy/Zh5Bh4MB8GA1UdIwQY
MBaAFAFc/uPCtupJ0p4QPiOlIsYuOFMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2Yt
NGJmNzZjZTM1NjFkLzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2YtNGJmNzZjZTM1NjFk
LzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+Ofc/Rk
014nM3PZG7uBMY2CElL4FeqRV7BY4pNJ41HsZ4ju/RxOKvKkLNIYIJZFIbIVzrO1
aF8Hj6AITvKa3RZawERVJBXaoNXToR+dctob/jVE/wHI0cCwYkNltDhc8a6jb6kT
eSntmBuuXUKqJRJcBTuVeys9pTl+S0Iw3OqD2ILOCPGjtxubxbxE+BLRa1OzRVVL
F2INP1e7b5NFRzfbkpDy+2xxarNx/ed6++mNl/BKOUw5p3uHnFjDrzmsVJgZKXTn
ST85/Z+4np+ATBfuZLyOtNXObYWrMHFyjl2yGl7NXgvhsVIzMrGCgkevfPhi0zFh
Q+3wyNhdL76HCA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:47 2025 by rpki-client