Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier: 8F22gGLvD+GlwwGCqgX8qnrrg4514a5BrfQ/51EEQNQ=
Subject key identifier: 66:8A:CF:9B:FA:CB:9E:5C:AB:5A:9C:34:A4:33:5E:E8:AF:47:C3:81
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial: 0197477980F0BF32AC6676133AFC24D1301B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:34 +0000
Manifest this update: Fri 06 Jun 2025 23:00:34 +0000
Manifest next update: Sat 07 Jun 2025 23:00:34 +0000
Files and hashes: 1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: fe9E4wyXYyq693cTZqHeg4TsbR4KQrGF7geY03I3d0g=)
2: voTBQK08ae5dJLLPC_WLTf299J4.roa (hash: IJFytwQyok533gq1H2eNYMHcRnLoiQur1Z7mEoU5py4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:80:f0:bf:32:ac:66:76:13:3a:fc:24:d1:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
Validity
Not Before: Jun 6 23:00:34 2025 GMT
Not After : Jun 7 23:00:34 2025 GMT
Subject: CN=668acf9bfacb9e5cab5a9c34a4335ee8af47c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:bc:dc:e0:5b:6b:f2:41:64:1d:92:35:d8:
b1:2f:54:8b:a7:fc:4d:1f:44:c3:7b:5e:b1:f3:b0:
23:a4:c4:cc:ab:1d:3d:ca:91:45:c5:b9:e1:65:ee:
5c:15:40:d8:c2:a3:ee:1e:29:ac:2d:f1:98:db:a4:
d3:7d:89:7e:ce:06:f3:65:79:eb:5c:90:52:48:a1:
2a:83:1e:f6:88:fa:f9:42:96:a9:a9:6c:5f:f0:12:
c8:8c:2d:f1:6a:9e:a2:d0:71:bf:5a:c4:8f:64:2b:
e2:82:02:98:62:75:74:fc:a9:7a:a0:a5:8d:77:2c:
5b:6b:6e:47:57:68:18:3d:b6:f8:a6:a2:b2:31:9b:
67:8b:f8:27:cd:a6:a7:81:de:53:87:5a:fa:85:0e:
ef:7a:54:3a:63:89:d0:3a:8b:0c:c9:39:5c:b9:98:
e8:90:8a:91:95:0b:21:40:69:33:16:66:a6:ba:6c:
08:cb:ae:61:c1:1a:a0:2d:6d:92:00:8a:3d:8e:28:
61:41:df:9e:bd:66:c3:0d:95:bb:ed:eb:89:14:d2:
5c:d0:bb:77:4f:a4:f3:02:37:37:7b:c8:af:3b:42:
56:1e:82:69:f9:85:85:aa:d2:ce:49:ca:6f:dd:72:
44:f3:f6:0d:f3:1c:71:79:91:2a:60:07:3d:9f:6d:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:CF:9B:FA:CB:9E:5C:AB:5A:9C:34:A4:33:5E:E8:AF:47:C3:81
X509v3 Authority Key Identifier:
keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:c6:c3:23:fe:15:b2:6d:6b:f8:c9:76:9d:43:36:79:37:
fd:8b:87:d9:fc:78:fd:3c:dc:c3:95:e5:76:d7:42:13:54:aa:
18:2f:e2:5d:e4:04:3b:3e:7e:eb:2e:d7:e1:be:1c:77:e1:de:
11:7e:3e:85:40:51:8f:1c:e7:d0:f3:bc:09:72:67:41:a3:21:
3d:f6:83:11:f6:63:5e:21:1f:da:c5:7a:75:25:0e:ab:fb:38:
89:df:5e:93:61:24:00:29:ca:cb:c1:59:76:ec:53:ef:14:00:
ff:27:b4:c5:63:20:d8:3a:2f:ad:d2:78:20:16:c6:a1:b1:95:
0a:67:ef:82:61:ce:58:0a:74:fe:6b:e7:49:69:2e:40:35:1d:
c4:df:38:91:78:be:b2:8f:b0:76:92:70:43:ef:de:01:0d:f6:
50:63:5f:64:08:29:1d:5c:15:33:da:51:d6:89:aa:ef:71:5a:
c9:6e:f4:e7:f3:b0:23:60:f2:94:d6:b9:9d:11:74:18:52:26:
cd:35:f8:c4:3b:c6:b4:da:56:f3:e2:a0:14:9e:52:fc:15:09:
d6:c5:38:3d:63:03:44:1d:c9:25:1f:5b:7e:73:67:0f:a7:b3:
c7:c5:5b:49:cd:c5:6c:26:df:c2:bc:26:08:16:4b:21:0b:92:
18:cc:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:39 2025 by rpki-client