Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: iEpkuhufgOg6rCdVN5hX7PvQoCm/KADlLsy3QhMdxLQ=
Subject key identifier: B5:FD:2C:E3:9F:64:06:49:FD:D8:B6:15:4A:50:02:B7:DC:19:6F:3C
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 019A725C6B290C2A74111A905E22119216E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: jYc2qbQYxuDevvPgKLCQXRe08o9oqIJt/oMasqt9Nfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6b:29:0c:2a:74:11:1a:90:5e:22:11:92:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=b5fd2ce39f640649fdd8b6154a5002b7dc196f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:4f:26:26:81:50:9f:c8:9e:2b:80:ab:57:
2c:0e:62:e1:93:1e:7f:d5:de:92:cd:ec:32:4b:e3:
04:58:74:06:a8:e7:14:f6:61:e9:9a:14:15:e0:bd:
cb:8c:47:b8:30:7d:05:0f:cb:18:84:2f:e2:01:4e:
9c:ce:3e:0d:36:17:83:a0:5e:ea:6a:16:8a:46:f0:
48:ed:bd:98:c6:ac:94:5d:b4:f5:4a:5a:de:77:71:
4f:13:43:87:21:06:a3:bf:88:81:64:ab:13:e8:86:
ca:17:7b:2a:63:84:d3:e1:28:79:88:78:2d:b6:bc:
3f:58:97:3a:b5:12:52:e7:c6:09:96:84:00:72:10:
54:4e:7a:93:fe:c2:fc:69:a6:25:86:5a:29:b7:b6:
18:d9:58:08:9c:65:06:9f:c0:b5:55:ff:22:ee:e0:
f9:02:b7:48:15:5c:34:c0:59:40:f1:4f:70:71:ce:
b3:bc:7c:90:c2:cd:6b:52:71:94:a1:a3:43:52:da:
07:fc:2e:2c:f5:31:b9:3c:83:bd:24:66:d8:9e:07:
9a:5b:7e:50:bd:d7:04:1e:fc:03:a8:f3:66:bd:af:
25:69:21:d0:4c:fd:eb:be:9d:77:b2:ef:2d:44:90:
9a:f8:2d:7a:1c:4c:07:82:b2:10:2e:4e:40:2d:05:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:2C:E3:9F:64:06:49:FD:D8:B6:15:4A:50:02:B7:DC:19:6F:3C
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:85:91:a5:93:55:58:98:f5:c6:0c:98:8b:26:57:a2:2c:
cb:97:dc:18:e3:7d:3e:6a:e3:91:7a:70:fd:60:fa:77:23:d3:
e4:5c:9c:a2:9a:82:d0:87:b8:d5:0a:ec:31:52:bf:fc:1e:7d:
74:f2:5e:e2:a7:69:b9:75:4b:9d:d9:1a:c7:ad:85:4f:ca:f2:
a6:a1:28:8d:c5:63:be:80:73:c2:09:77:a7:1d:d5:78:0c:5f:
7a:07:a6:d5:46:ed:67:56:8a:3e:aa:82:ca:76:45:a2:df:67:
cf:9c:d4:44:e3:6a:34:ed:1a:5e:a1:7a:67:87:31:56:c3:5d:
3d:9c:51:a6:dd:59:4a:17:1f:06:ee:6a:3a:64:c8:7b:a2:85:
15:72:54:a2:c8:59:92:e9:44:97:32:06:97:d7:d0:d2:72:a3:
50:e9:15:68:ae:51:ef:ef:99:f4:e0:f9:03:e8:46:75:4e:28:
05:4e:b4:57:4a:a0:9e:b5:22:f9:f5:ad:db:58:e4:60:88:ab:
cb:db:70:aa:ba:2e:6e:e0:06:54:72:97:05:2a:b6:97:df:25:
6b:56:a5:95:2b:08:b4:5a:5b:99:60:5a:05:bd:b9:04:90:70:
ab:c3:dc:7b:1c:8a:5f:01:dc:3d:c0:dd:e4:f0:c8:a5:e3:96:
fe:f7:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:09 2025 by rpki-client