Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: z/dQmBvZ2ZIvst+WnuD8gvUigOy1kPQM+72mUzLw8TE=
Subject key identifier: 8F:08:5D:09:3F:6A:FE:3F:2D:B1:51:8B:58:DA:48:71:D8:DF:2A:A5
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 019A21ADED1B9C6CC219DEC5D105C1B301C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 18:00:37 +0000
Manifest this update: Sun 26 Oct 2025 18:00:37 +0000
Manifest next update: Mon 27 Oct 2025 18:00:37 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: QDpBbub+yGTiI6Cjpyd5v2DgLJcPqpc1sGyq1bH3nYw=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ed:1b:9c:6c:c2:19:de:c5:d1:05:c1:b3:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Oct 26 18:00:37 2025 GMT
Not After : Oct 27 18:00:37 2025 GMT
Subject: CN=8f085d093f6afe3f2db1518b58da4871d8df2aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:df:98:97:42:71:8d:8e:03:9c:12:f9:76:
61:5b:53:94:55:14:b6:5a:f2:d4:0a:9f:99:92:38:
51:e6:77:f2:5e:d3:69:0d:dc:5d:56:fa:d3:ac:96:
61:d4:16:9e:95:ac:1b:92:37:39:55:4b:83:71:f0:
05:8c:98:0e:f1:96:e3:e5:8d:31:ee:67:5a:4e:6f:
e1:3e:24:36:3e:53:57:10:90:ff:62:3f:8d:3b:cc:
ca:7a:73:d0:e5:d6:a4:d0:59:cd:00:31:1b:d2:ee:
66:f3:98:58:4e:12:4f:15:c0:21:71:c3:d0:34:4a:
48:e5:13:89:b6:07:8e:b2:6a:e8:93:57:4d:d9:ef:
11:d3:7c:ea:38:32:4b:8c:5e:5f:36:67:94:aa:d6:
8b:cd:cc:72:e5:8c:e7:18:a2:c6:fd:be:a2:b4:15:
a8:15:0a:b5:26:00:bf:33:92:cc:7e:42:7e:06:74:
29:45:e3:ab:5f:46:9c:43:c0:e4:23:96:ac:24:c4:
5b:a4:67:d0:6d:b7:4d:27:fb:fc:5a:e5:4d:04:8c:
bc:19:22:2e:8f:a8:66:c0:8a:09:a7:c6:c8:06:99:
b7:b3:c1:d5:36:51:ce:79:ad:15:70:48:39:33:17:
6e:e4:a9:10:26:60:88:89:d5:a2:04:4a:8d:7c:5c:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:08:5D:09:3F:6A:FE:3F:2D:B1:51:8B:58:DA:48:71:D8:DF:2A:A5
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6e:62:9f:c6:12:df:91:16:4d:39:c9:35:75:ba:c5:c4:a9:
18:b2:90:bf:58:0e:37:bc:95:fd:c9:2a:57:15:0b:9b:26:72:
70:27:d6:18:72:bd:77:35:be:45:e0:d1:2e:e6:4c:22:4b:09:
8a:99:d5:7b:91:3a:ca:46:15:4c:ea:1e:f5:8d:91:c6:bc:76:
cd:96:3e:e5:6e:09:af:a4:21:22:42:a9:2f:8c:ec:e8:58:72:
a7:58:c0:de:68:7d:a7:cd:9e:57:70:dc:e1:dc:ea:26:9c:f2:
05:bf:a4:01:a5:b6:a7:c5:3b:76:f3:68:1b:93:bb:e8:3f:53:
d6:cd:11:c5:cf:9d:18:6d:53:ea:93:98:56:f4:96:94:f3:58:
f8:41:58:bd:b0:08:58:da:ba:2e:fd:1f:2f:7f:ae:f3:b4:50:
c3:93:3f:46:3a:45:b0:84:47:de:64:8e:70:0b:01:76:16:e8:
d5:67:89:08:65:a2:74:40:94:bb:89:af:d7:5b:cc:02:3b:e5:
99:97:f5:ae:01:ff:e5:87:26:83:98:79:78:05:04:84:5f:e8:
4e:71:8a:57:3f:24:0e:0e:44:5b:32:80:1a:39:a1:a9:ce:ca:
39:f8:3f:ce:9f:e1:7b:97:29:95:62:1d:e1:4d:3a:81:49:17:
bc:ca:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:51 2025 by rpki-client