Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: jAS+P6NWzMvg/0AwXHiiaB5bjQoAT9nhB87q9ADmhJ4=
Subject key identifier: 1D:0E:D7:3F:9D:C0:0F:62:A1:CA:5A:0E:4A:75:64:F7:B2:B4:7A:86
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 01974C6934D92889D45433FDE869E3FB305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 22:00:52 +0000
Manifest this update: Sat 07 Jun 2025 22:00:52 +0000
Manifest next update: Sun 08 Jun 2025 22:00:52 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: zmswWas+01r850Q7sPnMNF6dGdFm6RXcyp1KoMFrylM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:34:d9:28:89:d4:54:33:fd:e8:69:e3:fb:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Jun 7 22:00:52 2025 GMT
Not After : Jun 8 22:00:52 2025 GMT
Subject: CN=1d0ed73f9dc00f62a1ca5a0e4a7564f7b2b47a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:74:27:31:40:04:32:43:b1:24:87:0c:bd:
25:ec:40:ef:b5:98:4b:ae:e6:b5:56:40:3f:52:98:
fc:ea:47:33:ec:8f:43:76:e6:8c:a6:15:a0:72:36:
74:93:26:e0:71:bb:7f:c4:22:88:38:ee:3e:60:cb:
c1:28:5c:12:a2:d0:08:31:37:e3:6e:45:d4:19:18:
59:eb:46:05:32:82:f2:f6:cb:d4:d8:c5:bd:6b:21:
6a:43:19:36:1e:68:0c:46:2f:eb:74:3c:70:bc:ee:
2e:58:75:1a:b1:39:e8:75:4a:8e:8c:0e:a7:72:72:
42:61:c9:5a:d5:18:3d:a4:10:3f:fa:84:55:15:08:
80:aa:cc:99:d8:bf:d6:4a:fe:23:d9:d8:3f:68:d2:
0f:78:0b:90:33:ac:ef:ea:2c:93:49:08:fe:1b:26:
d3:10:3f:e0:b6:1d:8d:64:2d:55:c3:53:85:74:60:
d8:b1:de:ab:fd:66:e8:e3:0b:c9:6d:a0:85:74:31:
c6:78:fb:51:eb:f5:c7:69:c7:e0:08:89:b0:d1:a6:
54:42:9a:43:b5:7a:78:15:5f:23:1d:8a:45:36:1d:
75:b7:80:84:a6:1c:4b:e9:66:3b:be:36:56:87:be:
eb:1e:04:a0:e0:5f:86:b2:5e:0a:b9:83:90:1f:68:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0E:D7:3F:9D:C0:0F:62:A1:CA:5A:0E:4A:75:64:F7:B2:B4:7A:86
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:03:87:ff:98:e5:da:44:91:78:90:60:62:68:c6:55:f8:53:
79:e4:60:ae:17:4a:d4:e7:c4:15:60:64:13:11:58:2e:ba:3f:
6e:19:04:f1:76:2a:5e:44:59:0c:ea:ce:63:cf:06:bd:62:45:
2b:8f:5c:5d:7b:1a:64:e2:fa:65:c8:a8:d4:53:b5:c1:74:84:
0e:3b:4c:34:40:cd:e0:f2:a7:46:c3:8b:fa:0b:83:a6:4c:da:
e6:f8:98:d5:48:f7:fb:4f:5f:f6:64:c9:f5:03:86:c2:02:19:
9c:0a:14:b3:ec:98:5d:89:ce:b0:ac:4f:10:eb:b0:44:28:c3:
8e:3a:0a:54:0e:1b:eb:75:26:8f:fd:c6:05:fa:e2:1b:53:92:
49:55:b5:f5:8f:0f:7a:40:87:cd:fe:a0:98:f7:a7:53:80:c6:
9c:9e:bd:86:fc:a2:21:fb:64:ed:12:15:94:d3:bf:1d:be:91:
46:c2:3c:ef:e8:71:50:ce:0c:43:0c:f7:80:49:90:1a:51:8c:
ec:c1:d3:fc:1e:dc:a1:83:e8:bc:d3:65:d6:9b:7e:7a:b8:2d:
3f:22:89:ac:10:2e:a7:48:fb:c9:0c:a2:3a:f6:bf:19:47:e4:
89:96:17:1e:08:02:f2:cb:7c:90:2a:4b:f5:59:1d:7e:b1:1f:
08:af:4b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaTTZKInUVDP96Gnj+zBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh
ZjM3YzYwHhcNMjUwNjA3MjIwMDUyWhcNMjUwNjA4MjIwMDUyWjAzMTEwLwYDVQQD
EygxZDBlZDczZjlkYzAwZjYyYTFjYTVhMGU0YTc1NjRmN2IyYjQ3YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYN0JzFABDJDsSSHDL0l7EDvtZhL
rua1VkA/Upj86kcz7I9DduaMphWgcjZ0kybgcbt/xCKIOO4+YMvBKFwSotAIMTfj
bkXUGRhZ60YFMoLy9svU2MW9ayFqQxk2HmgMRi/rdDxwvO4uWHUasTnodUqOjA6n
cnJCYcla1Rg9pBA/+oRVFQiAqsyZ2L/WSv4j2dg/aNIPeAuQM6zv6iyTSQj+GybT
ED/gth2NZC1Vw1OFdGDYsd6r/Wbo4wvJbaCFdDHGePtR6/XHacfgCImw0aZUQppD
tXp4FV8jHYpFNh11t4CEphxL6WY7vjZWh77rHgSg4F+Gsl4KuYOQH2hTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0O1z+dwA9iocpaDkp1ZPeytHqGMB8GA1UdIwQY
MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt
Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0
LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawOH/5jl
2kSReJBgYmjGVfhTeeRgrhdK1OfEFWBkExFYLro/bhkE8XYqXkRZDOrOY88GvWJF
K49cXXsaZOL6Zcio1FO1wXSEDjtMNEDN4PKnRsOL+guDpkza5viY1Uj3+09f9mTJ
9QOGwgIZnAoUs+yYXYnOsKxPEOuwRCjDjjoKVA4b63Umj/3GBfriG1OSSVW19Y8P
ekCHzf6gmPenU4DGnJ69hvyiIftk7RIVlNO/Hb6RRsI87+hxUM4MQwz3gEmQGlGM
7MHT/B7coYPovNNl1pt+ergtPyKJrBAup0j7yQyiOva/GUfkiZYXHggC8st8kCpL
9VkdfrEfCK9LHw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:05 2025 by rpki-client