Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: 8zCui3/2NtuRIRzgtb70oyKj0B09ws+AtfAly5KNFwE=
Subject key identifier: 1C:4E:9D:DC:A0:62:5C:83:AA:E1:99:33:AC:65:84:FE:41:DC:75:5D
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 0198CA25840DB92A3F2234E61009EB8D2E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1359
Signing time: Thu 21 Aug 2025 01:01:52 +0000
Manifest this update: Thu 21 Aug 2025 01:01:52 +0000
Manifest next update: Fri 22 Aug 2025 01:01:52 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: pO2Ar5k3kO7S/PV30Ek2fL6zXa2+JognqsKyJagpbX4=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:25:84:0d:b9:2a:3f:22:34:e6:10:09:eb:8d:2e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Aug 21 01:01:52 2025 GMT
Not After : Aug 22 01:01:52 2025 GMT
Subject: CN=1c4e9ddca0625c83aae19933ac6584fe41dc755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:cd:c9:0f:48:83:84:d2:ef:7d:70:ea:d2:
6b:1f:93:43:60:36:11:1c:4a:13:68:e1:64:51:5f:
17:9c:f6:a0:dd:c8:b1:58:2c:85:e0:50:13:e7:74:
ab:14:43:61:98:f1:c6:b0:dc:02:62:25:87:5d:89:
5e:98:55:16:ed:d0:bd:6e:31:58:25:e3:e0:7b:0a:
65:50:d3:b4:8f:f3:d7:4b:2b:7a:9c:2b:24:5f:ae:
1e:5f:d7:5a:ef:7d:86:5a:42:8b:c4:d1:f9:fd:d7:
99:6f:d9:9e:25:2d:1c:1d:3c:ae:05:37:63:9b:98:
10:d0:c8:10:d4:8c:45:6b:4d:dd:7e:a8:36:24:0c:
ea:9d:60:e7:8a:92:29:45:f4:75:30:b4:dd:ed:b1:
74:47:22:eb:42:5b:ed:14:f4:e1:1e:52:8a:c9:47:
77:a7:cf:79:eb:b8:88:bb:91:0c:c2:2d:46:69:01:
7f:09:64:13:41:90:58:6e:84:6d:e7:b9:1d:93:41:
ea:d4:ff:de:39:62:7d:02:5c:e1:39:55:55:60:1c:
19:ce:aa:15:7e:da:54:88:47:4b:1b:1d:ab:a9:22:
b3:25:8d:83:93:4c:cb:8e:e8:f9:a8:72:2d:49:4c:
59:1b:9e:94:34:c4:07:ca:6c:5b:c6:ec:b5:af:20:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:9D:DC:A0:62:5C:83:AA:E1:99:33:AC:65:84:FE:41:DC:75:5D
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:d4:f4:85:bd:68:52:b3:b7:c1:76:6e:6c:f8:f0:d0:af:
b1:6a:d9:4c:88:27:df:5b:e9:68:58:cd:42:7d:cb:9b:6d:e9:
e5:a3:4a:1e:cd:1a:7f:ff:c1:2f:42:eb:11:88:4f:50:be:4e:
9b:b7:93:26:11:a1:4e:68:8a:07:f0:30:3e:40:ca:3b:b8:7d:
45:68:50:bc:d1:c1:c6:8b:05:47:73:ee:04:bc:be:d2:92:9e:
84:1a:b1:d2:dd:88:1a:6a:20:26:b6:d8:5e:c5:c0:4c:6c:d0:
45:a1:a0:bd:87:00:32:cc:11:ac:72:d2:b0:9c:e8:d9:cc:d6:
ce:5d:82:03:01:c5:d6:44:ba:5d:b5:4b:b2:aa:9a:54:8a:9f:
9e:f6:8d:cc:5c:83:ca:bc:30:f3:80:22:f5:5d:dd:26:3d:c1:
28:8b:f8:08:03:95:28:db:75:77:9e:58:0b:62:d3:1b:f8:47:
89:3a:0b:79:ab:2b:ce:93:b9:ac:ba:29:92:54:1c:ff:dd:50:
72:a9:9d:f5:0d:a4:87:a4:fe:93:d6:03:87:62:de:d1:1f:bd:
fa:21:28:65:af:63:fd:00:7c:e5:24:0e:49:00:07:b8:da:3c:
18:9d:97:63:5f:04:33:b4:da:31:f5:2a:bd:ea:cf:6e:84:b3:
ea:1f:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:16:57 2025 by rpki-client