Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: 1YGdx4mz4a2FEiNl4pGVK3XS7QZc6UesTXZnhXt94jE=
Subject key identifier: 95:FE:CE:C8:EF:59:1A:B9:50:81:A0:55:43:F4:69:83:F4:8E:87:32
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019A71B8E586C675DF125C8A21D974ED7433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: NvDrm/PXtfpnH3cS93pyu7bei6tbf3Cku1zn72xv6So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e5:86:c6:75:df:12:5c:8a:21:d9:74:ed:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=95fecec8ef591ab95081a05543f46983f48e8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:4d:2a:58:de:8e:e6:f1:0a:db:09:a5:00:
35:db:45:71:80:3c:6a:3d:61:84:1e:ee:3b:ca:de:
6a:d6:22:43:fd:80:5b:89:f9:f1:eb:09:5c:a7:d5:
4a:6f:ea:17:2f:b0:a4:0c:b7:8c:4e:68:89:69:ca:
dc:ff:b0:e7:01:0c:5b:8c:d0:7d:be:b1:cb:69:1d:
27:1d:09:e3:c2:02:02:29:09:cf:4b:41:a7:60:73:
be:73:4b:6d:10:ba:8b:f3:b2:6c:89:96:33:6c:a7:
93:5d:b6:89:9b:77:51:fe:7c:e7:d0:cf:be:0c:f5:
89:3b:28:73:e3:a2:50:fb:5a:11:33:df:0a:d2:1e:
09:ca:c9:4e:84:24:66:7f:8f:90:f6:db:a1:99:09:
04:66:2d:17:46:25:fa:ce:1d:88:36:2a:27:8f:af:
3d:00:77:c2:bc:84:b8:a1:74:7d:04:d2:a5:76:65:
f5:b4:b7:6a:ac:c4:fe:59:40:8d:4a:da:cb:d7:33:
97:29:87:21:ea:70:d1:81:9a:30:59:23:bf:b1:25:
77:5c:37:6c:74:06:f7:e8:b3:d0:c1:01:7e:d5:78:
a4:85:d6:ba:54:5b:57:49:9f:36:28:e8:21:5b:1a:
7d:b0:2e:ab:b8:3d:31:6b:9f:eb:3e:bf:c7:4e:81:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:CE:C8:EF:59:1A:B9:50:81:A0:55:43:F4:69:83:F4:8E:87:32
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:17:70:81:42:4d:89:6a:24:b4:36:b8:ba:e4:97:ab:8d:9c:
f8:5d:0e:bc:91:ab:63:51:02:1e:42:62:88:2e:bb:e7:3a:e4:
fb:35:66:ca:0d:f5:bc:ea:39:32:0c:df:92:e9:19:03:2c:38:
bb:0e:63:f2:f8:74:35:51:fa:02:0a:ae:38:01:ec:42:42:be:
1e:03:43:10:2c:58:ab:37:f9:49:8d:db:18:3b:8c:33:a2:c2:
88:d1:df:f5:87:cc:6c:66:44:3e:ef:37:af:43:55:5d:1c:06:
78:5e:fe:20:e7:3c:48:50:4b:88:77:96:25:24:2e:96:66:0b:
21:c1:ea:c9:5a:98:16:a0:d0:f0:36:bd:84:64:ac:db:7c:a5:
73:58:5d:f4:0f:97:d1:d1:3e:43:4b:0f:d0:13:86:bd:bf:b3:
e6:5e:70:e6:a5:dc:d5:2e:a8:18:5b:09:c7:b3:16:91:71:c0:
17:22:1d:ec:7f:0e:a9:c2:ce:2d:7f:d8:86:5c:a2:46:13:8f:
16:69:cb:83:17:99:5d:d3:e2:c5:83:60:e6:8f:54:06:4c:11:
ef:4e:92:c0:cd:50:c2:dc:42:44:bf:c1:34:d5:99:00:f1:1f:
09:21:31:63:69:dc:64:cc:bd:a9:4e:51:0a:55:91:ea:2f:52:
3c:77:50:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOWGxnXfElyKIdl07XQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh
ZjM3YzYwHhcNMjUxMTExMDcwMjE0WhcNMjUxMTEyMDcwMjE0WjAzMTEwLwYDVQQD
Eyg5NWZlY2VjOGVmNTkxYWI5NTA4MWEwNTU0M2Y0Njk4M2Y0OGU4NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvpNKljejubxCtsJpQA120VxgDxq
PWGEHu47yt5q1iJD/YBbifnx6wlcp9VKb+oXL7CkDLeMTmiJacrc/7DnAQxbjNB9
vrHLaR0nHQnjwgICKQnPS0GnYHO+c0ttELqL87JsiZYzbKeTXbaJm3dR/nzn0M++
DPWJOyhz46JQ+1oRM98K0h4JyslOhCRmf4+Q9tuhmQkEZi0XRiX6zh2INionj689
AHfCvIS4oXR9BNKldmX1tLdqrMT+WUCNStrL1zOXKYch6nDRgZowWSO/sSV3XDds
dAb36LPQwQF+1Xikhda6VFtXSZ82KOghWxp9sC6ruD0xa5/rPr/HToHhtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX+zsjvWRq5UIGgVUP0aYP0jocyMB8GA1UdIwQY
MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt
Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0
LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxdwgUJN
iWoktDa4uuSXq42c+F0OvJGrY1ECHkJiiC675zrk+zVmyg31vOo5MgzfkukZAyw4
uw5j8vh0NVH6AgquOAHsQkK+HgNDECxYqzf5SY3bGDuMM6LCiNHf9YfMbGZEPu83
r0NVXRwGeF7+IOc8SFBLiHeWJSQulmYLIcHqyVqYFqDQ8Da9hGSs23ylc1hd9A+X
0dE+Q0sP0BOGvb+z5l5w5qXc1S6oGFsJx7MWkXHAFyId7H8OqcLOLX/YhlyiRhOP
FmnLgxeZXdPixYNg5o9UBkwR706SwM1QwtxCRL/BNNWZAPEfCSExY2ncZMy9qU5R
ClWR6i9SPHdQlA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:34 2025 by rpki-client