Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: woVTu5tQ/e6w4eFLQ19UFeeXoa1qE3E723i8M6jDfg8=
Subject key identifier: 9E:8E:45:23:5B:E6:CA:33:9B:F0:93:F4:37:16:77:2C:03:20:51:A8
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 01991809CB153743BC4E5CE8BB986A145AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1668
Signing time: Fri 05 Sep 2025 04:01:58 +0000
Manifest this update: Fri 05 Sep 2025 04:01:58 +0000
Manifest next update: Sat 06 Sep 2025 04:01:58 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: 9FMRYmx9HNCiu+z55h2/JAkov5avCfd+ybuqZWAAzqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:cb:15:37:43:bc:4e:5c:e8:bb:98:6a:14:5a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Sep 5 04:01:58 2025 GMT
Not After : Sep 6 04:01:58 2025 GMT
Subject: CN=9e8e45235be6ca339bf093f43716772c032051a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:08:a8:bc:1f:e4:2c:13:50:5a:88:75:21:
53:f3:f0:0f:57:5e:57:8c:37:35:5b:80:c4:a1:2d:
d0:e0:d5:d2:14:dd:20:9b:8e:4c:91:cf:95:5c:88:
d2:4f:c0:fc:06:d2:ed:5d:68:9e:b4:78:63:5f:57:
1d:28:7d:1b:3c:dc:18:21:19:7b:d2:c0:7f:55:12:
69:48:10:00:8c:07:86:9b:a6:1e:ec:d1:ab:f9:f9:
f8:0b:8e:bd:2a:5c:c1:5e:ec:f7:cd:40:80:7c:92:
03:3a:ed:28:d1:58:89:5f:42:c1:98:e2:f0:2b:a8:
70:7e:f2:95:49:6c:49:4f:fb:bc:8d:93:40:f1:0c:
52:15:d8:cd:16:0f:c7:05:02:ad:40:fb:91:52:af:
60:e7:11:1e:63:63:94:bb:4d:ac:e0:58:48:47:62:
f9:9e:3c:23:97:5e:ba:88:69:3f:35:c0:1b:68:bd:
94:d7:11:52:4d:b6:4c:5e:25:4d:fb:8c:50:a3:ef:
55:f5:fb:3b:a2:5b:3c:89:a6:7a:69:4b:60:2e:6f:
1e:25:52:db:96:3d:71:ff:da:32:25:37:cd:66:3b:
26:4e:90:d0:9e:6e:d5:13:06:28:a0:47:0e:29:82:
2e:52:67:c4:b8:06:6a:19:a0:45:a4:f0:b7:94:c0:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:45:23:5B:E6:CA:33:9B:F0:93:F4:37:16:77:2C:03:20:51:A8
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7d:20:57:ec:47:2e:ff:4f:be:0c:51:c1:f0:33:79:62:c4:
42:e7:42:78:bf:e4:9f:53:8b:b9:67:db:ac:62:2b:89:f0:42:
0a:6d:b0:bb:0b:2b:49:af:5a:4e:c1:f0:d8:d3:9c:ab:fc:11:
70:4b:a0:ea:33:f4:d6:ca:fc:9b:d4:ca:d4:98:67:63:9e:d3:
b4:13:99:21:74:97:2a:1e:77:4d:79:78:94:db:36:58:61:ca:
a7:12:00:13:01:5d:a2:6c:f3:1a:ce:9b:7b:4f:e2:82:e3:64:
35:82:6a:73:f2:7e:f6:c8:bb:bf:f3:65:e3:d8:54:62:5a:f7:
44:a2:eb:4a:a6:c4:dc:79:54:17:db:8f:68:51:ba:08:f9:28:
d2:1b:ce:4f:e8:32:91:19:ca:a3:7d:6a:03:89:f1:10:55:0a:
4f:6d:c1:9f:31:10:d1:01:09:75:1b:2b:d9:22:7c:a6:c8:06:
71:5d:21:7a:86:64:dc:90:df:93:e5:c2:a5:90:c8:3c:d4:87:
cc:65:71:73:7b:be:2c:8f:90:3e:26:78:39:a2:ed:09:be:7c:
1d:e7:14:6f:8e:9f:d5:7f:2b:c9:09:2b:fe:a0:2d:c5:bb:aa:
22:90:52:03:92:f7:cc:a2:fa:7b:a7:fb:e5:2b:a5:1f:e5:c8:
73:e7:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:05 2025 by rpki-client