Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: SaAq+iN4LtjgyGhwEP8Se86EVVTn5ymvUM2a02w8/iQ=
Subject key identifier: E6:11:B1:1A:6C:66:98:F7:02:6D:27:E3:43:7E:E6:D9:39:7B:11:E9
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019A73A639A015C39C547046B2535210EFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0AC1
Signing time: Tue 11 Nov 2025 16:01:04 +0000
Manifest this update: Tue 11 Nov 2025 16:01:04 +0000
Manifest next update: Wed 12 Nov 2025 16:01:04 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: mfhZqkBfka61/9oz/BDQH91krwAZ2k3fYYFrPlM8QOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:39:a0:15:c3:9c:54:70:46:b2:53:52:10:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Nov 11 16:01:04 2025 GMT
Not After : Nov 12 16:01:04 2025 GMT
Subject: CN=e611b11a6c6698f7026d27e3437ee6d9397b11e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:ca:84:20:22:9e:94:2f:8c:f4:30:63:c0:
bb:3a:c3:6d:7d:7b:45:ae:72:fc:06:79:fe:b2:ed:
bf:8e:bd:70:02:b0:c8:a1:2c:06:61:2b:77:6e:23:
4c:05:e2:dc:90:8d:d8:06:34:77:d1:81:09:0f:e1:
4c:e0:b8:34:da:f9:78:ec:25:4e:f2:ad:6b:10:dd:
b7:f5:18:47:b1:4d:70:b3:4d:59:e7:cf:e8:f4:2e:
4f:ba:1b:87:64:94:60:18:24:a0:22:0b:66:d5:1a:
91:cb:aa:5a:f7:39:e2:7c:11:e3:a1:8f:05:e0:1a:
30:f5:b6:9b:c7:34:5d:25:90:6e:ad:28:16:4c:bd:
51:ae:bd:89:52:8d:6f:51:1d:e5:aa:48:51:31:c2:
6c:46:0f:62:12:ef:bf:9d:2e:b1:63:e4:12:98:ad:
ea:b0:5a:9c:8b:3d:20:ea:8b:5a:0a:1b:53:32:49:
10:97:c1:c3:50:e0:d5:7a:fa:65:54:b0:be:c4:6b:
f8:b1:ee:67:9d:3d:62:74:eb:9a:6a:fd:43:c4:a8:
72:f7:fa:65:8f:a9:18:9a:16:c0:0b:4a:fc:a8:c5:
27:98:50:fb:d1:95:f0:14:5b:93:cd:00:4b:32:53:
47:82:59:be:b5:b4:6a:8d:07:6e:83:ac:1f:d7:b4:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:B1:1A:6C:66:98:F7:02:6D:27:E3:43:7E:E6:D9:39:7B:11:E9
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9f:31:67:ba:ed:de:99:37:13:da:1b:f9:aa:43:56:d3:67:
d9:c6:d8:2c:69:c3:25:48:a7:8d:06:50:01:56:cc:df:81:5d:
64:ef:0f:b4:99:e0:c9:50:ba:6e:7a:a9:93:c5:7d:3c:0d:78:
cf:4c:06:d5:3f:01:2f:11:ac:8d:1c:d4:89:0e:59:b3:14:fd:
d3:7d:1b:97:ec:fa:04:18:c0:ae:b8:c1:00:9a:f7:05:f5:7c:
d1:c7:33:72:9d:c3:77:a1:7e:68:c1:66:1f:d1:65:a6:cd:bb:
bd:39:a6:04:34:f9:4d:7d:c9:cd:1b:ef:a6:ba:c6:93:21:78:
6c:3e:31:e7:c8:a6:7a:bb:81:72:c2:6c:6c:37:02:a1:23:83:
eb:34:9f:13:10:39:21:f2:e8:43:5e:84:e8:dd:8d:02:c8:8f:
4b:e5:bc:3e:e1:9d:a4:89:52:2d:d5:b7:c3:78:90:25:73:e6:
96:b1:20:5f:32:a8:37:ef:98:8f:3d:77:b2:3b:6e:d3:06:1d:
67:e8:21:1e:ca:d3:01:8d:cd:f4:23:e3:3b:3d:ea:76:0e:e5:
6c:ed:25:76:c7:6f:dc:42:61:4e:16:45:a6:1e:c4:0e:f8:70:
bb:a8:5b:67:b7:4c:94:84:38:a7:cf:f6:2e:e6:55:73:b8:19:
23:95:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:46 2025 by rpki-client