Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier: kzRgvpr0r2oYzeQe/t0KJeQoPqgPv6+I/IiEh76LYEI=
Subject key identifier: 8E:87:8C:01:33:BE:3A:FB:73:A0:66:D5:F5:52:13:31:24:D2:FE:26
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial: 01984A40C303151A469C7070A6CBEA486A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:14 +0000
Manifest this update: Sun 27 Jul 2025 05:00:14 +0000
Manifest next update: Mon 28 Jul 2025 05:00:14 +0000
Files and hashes: 1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: R6gJnriXaRosxajRLowlDhxaj36xwPDjxBVIf6181Ds=)
2: voTBQK08ae5dJLLPC_WLTf299J4.roa (hash: IJFytwQyok533gq1H2eNYMHcRnLoiQur1Z7mEoU5py4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c3:03:15:1a:46:9c:70:70:a6:cb:ea:48:6a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
Validity
Not Before: Jul 27 05:00:14 2025 GMT
Not After : Jul 28 05:00:14 2025 GMT
Subject: CN=8e878c0133be3afb73a066d5f552133124d2fe26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:a3:48:55:e4:12:a0:e6:54:6b:39:c4:83:
24:34:18:81:76:06:99:8c:75:c9:50:ce:16:81:49:
74:b4:46:db:fe:9f:ff:9e:29:be:b5:b7:b5:dc:39:
c4:7b:3d:28:53:60:7d:8f:35:1b:a4:72:58:51:ee:
6b:7c:7b:6c:48:25:ed:be:bc:00:59:34:5b:93:58:
e4:1c:20:30:75:02:d5:02:9c:3d:6b:55:fd:ab:4b:
cf:88:06:78:a8:c2:a6:30:ac:bd:cc:ed:03:33:d2:
9e:73:ce:aa:2e:c4:2b:6a:e7:8c:6e:59:20:7d:f5:
ac:61:14:37:ca:52:08:26:b7:db:d1:69:74:eb:d8:
62:b8:09:14:1b:34:07:11:ff:4b:c2:37:e1:e4:2b:
98:a5:e4:d4:7c:12:5d:ba:56:e5:71:af:2d:60:cf:
e8:dd:e8:c7:f3:a9:6d:d9:53:9b:53:d7:5f:ca:aa:
aa:3b:1f:be:c4:b1:91:82:4a:9f:8c:7d:22:9c:8e:
c3:b2:80:53:f3:cd:d3:ee:64:71:b8:6f:68:a1:92:
54:63:01:0c:42:2d:4c:a9:7e:59:db:0e:ad:8e:4d:
32:c8:4f:b7:0a:97:92:df:94:41:6c:38:73:99:33:
6b:5b:0b:57:8f:1f:85:b9:da:0d:83:a2:e8:85:aa:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:8C:01:33:BE:3A:FB:73:A0:66:D5:F5:52:13:31:24:D2:FE:26
X509v3 Authority Key Identifier:
keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:47:91:da:98:b6:1a:f7:21:8f:87:23:0a:cc:21:e3:36:bf:
9c:e4:90:99:40:a5:06:f4:b9:13:87:df:bd:bc:e8:72:1e:5e:
a8:f8:37:ff:6b:a3:ae:18:65:3b:f9:2d:71:d6:d2:9d:dd:6d:
79:6f:a7:d1:4d:f1:54:ea:ff:4c:0e:26:bb:c8:b5:0a:20:e7:
62:d1:64:0a:86:f8:50:6d:d3:e8:66:bc:fe:dc:b7:9d:88:84:
29:12:6f:5e:cd:85:dd:74:e0:2e:37:4a:c4:a3:f2:53:56:c3:
01:67:7f:d2:ae:68:b6:66:a4:8e:59:cc:c1:14:b5:b4:53:ab:
21:fd:a7:0a:8a:a7:60:a0:25:4d:d8:db:1b:2f:f1:b5:42:80:
4a:50:ac:2f:0d:be:e2:40:cd:69:df:2a:b2:d3:ce:43:01:68:
a7:5e:e3:40:7c:02:5f:7d:c8:0a:18:d5:ce:05:e8:57:39:7b:
ae:fe:d7:f8:01:17:17:1b:b6:58:b9:e1:cf:ee:17:db:cc:e7:
4e:78:31:a2:26:a9:e4:4d:9d:c3:41:37:5b:cf:5b:70:84:0a:
c9:11:8b:af:4c:ce:d3:01:a7:72:b1:54:64:24:07:f3:69:3e:
60:bd:d7:5b:85:58:b3:4a:29:18:ba:02:c9:38:eb:a5:89:be:
aa:79:2c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQMMDFRpGnHBwpsvqSGpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTM4ODUxMTY3YjRlM2Q2ZjY0ZDUzNzk3YjA4Y2I0MTM3
MTg3MGYwHhcNMjUwNzI3MDUwMDE0WhcNMjUwNzI4MDUwMDE0WjAzMTEwLwYDVQQD
Eyg4ZTg3OGMwMTMzYmUzYWZiNzNhMDY2ZDVmNTUyMTMzMTI0ZDJmZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCmjSFXkEqDmVGs5xIMkNBiBdgaZ
jHXJUM4WgUl0tEbb/p//nim+tbe13DnEez0oU2B9jzUbpHJYUe5rfHtsSCXtvrwA
WTRbk1jkHCAwdQLVApw9a1X9q0vPiAZ4qMKmMKy9zO0DM9Kec86qLsQraueMblkg
ffWsYRQ3ylIIJrfb0Wl069hiuAkUGzQHEf9Lwjfh5CuYpeTUfBJdulblca8tYM/o
3ejH86lt2VObU9dfyqqqOx++xLGRgkqfjH0inI7DsoBT883T7mRxuG9ooZJUYwEM
Qi1MqX5Z2w6tjk0yyE+3CpeS35RBbDhzmTNrWwtXjx+FudoNg6Lohaoe5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6HjAEzvjr7c6Bm1fVSEzEk0v4mMB8GA1UdIwQY
MBaAFAFTiFEWe049b2TVN5ewjLQTcYcPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYt
NjI5NWI4NTRkZjg2LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYtNjI5NWI4NTRkZjg2
LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUeR2pi2
Gvchj4cjCswh4za/nOSQmUClBvS5E4ffvbzoch5eqPg3/2ujrhhlO/ktcdbSnd1t
eW+n0U3xVOr/TA4mu8i1CiDnYtFkCob4UG3T6Ga8/ty3nYiEKRJvXs2F3XTgLjdK
xKPyU1bDAWd/0q5otmakjlnMwRS1tFOrIf2nCoqnYKAlTdjbGy/xtUKASlCsLw2+
4kDNad8qstPOQwFop17jQHwCX33IChjVzgXoVzl7rv7X+AEXFxu2WLnhz+4X28zn
Tngxoiap5E2dw0E3W89bcIQKyRGLr0zO0wGncrFUZCQH82k+YL3XW4VYs0opGLoC
yTjrpYm+qnksCw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:15 2025 by rpki-client