Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: v3SwMISTzCkKdHhcm2J9ZR79+jUR6+dczFEQ6MTnTHo=
Subject key identifier: DE:C6:DF:76:70:FE:7C:A2:3F:0D:04:AF:08:E8:35:F3:9C:40:8C:5C
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 01984AE604231DD77AEA90A0A1A1D6714EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: TFUqAnRseeT0hK58FFJJrPs6tFb2k+kv/Vg9fPxj3Ug=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:04:23:1d:d7:7a:ea:90:a0:a1:a1:d6:71:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=dec6df7670fe7ca23f0d04af08e835f39c408c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:b3:9e:29:1d:d4:fa:f6:39:8e:b2:be:a3:
fe:e0:67:e5:44:01:b5:43:fd:6b:e1:15:4b:f8:45:
e4:bb:3a:22:ef:da:0e:51:a5:60:3f:97:69:35:77:
b1:5b:68:0c:e3:4f:bb:69:05:6d:ed:86:3f:4f:11:
bc:eb:40:e2:23:5e:d8:82:b9:12:c5:42:dc:1e:0c:
4e:5b:05:e5:df:02:6a:e8:f4:43:72:77:b2:6d:d1:
d7:e2:28:f7:f8:d0:e4:8b:c7:c0:b0:4d:67:9a:bc:
ca:b7:1d:c8:2e:ea:1c:03:b6:79:b2:c7:76:ef:1b:
84:00:8c:91:49:84:63:4a:9d:dd:7f:e1:e2:e6:ea:
c0:a0:cf:e8:18:de:49:56:27:f6:ca:64:2d:af:f0:
94:49:4b:4b:51:b5:fd:34:c0:97:43:12:cc:9b:24:
99:1f:c5:5d:60:fa:30:36:2b:74:88:f8:cc:65:d8:
5a:6b:c8:f6:33:9e:73:e0:ff:06:4e:80:4a:ce:06:
4d:e6:8a:8d:ae:5e:b8:ac:f0:7f:0d:af:3c:15:de:
b2:fc:9f:ff:1b:f2:d2:ee:3d:0f:ac:1f:5a:83:a0:
3a:a4:48:cd:52:83:f1:a4:70:bd:fc:57:31:fb:3c:
79:40:3b:79:e1:a5:1a:b4:3b:20:14:75:80:17:f1:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:DF:76:70:FE:7C:A2:3F:0D:04:AF:08:E8:35:F3:9C:40:8C:5C
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a8:4f:3a:6d:7e:f0:fa:f3:32:f6:f5:db:e6:50:c7:63:a0:
38:0b:28:e7:b7:59:a0:59:41:76:eb:e6:88:9c:62:42:60:76:
e9:f9:46:0b:ef:5d:f7:1b:ec:bf:1f:3e:d6:04:df:5c:59:a8:
b5:ba:4a:3a:26:30:a4:e2:ba:f5:2a:e8:60:60:1c:59:b9:76:
86:fb:78:16:c5:fa:0a:b6:ce:78:8e:0a:b0:e9:79:37:78:fe:
cd:4f:4d:9b:e4:84:1b:7d:1e:b7:af:46:97:af:32:6c:01:70:
f0:b2:76:a8:1d:82:ff:6d:f1:ed:82:28:e0:72:f7:a2:5c:03:
72:00:1a:df:70:65:33:3b:0e:ab:8d:60:7b:6b:73:93:7f:de:
41:69:25:5c:0c:b4:a8:76:f3:4e:30:4f:37:24:80:70:17:79:
83:99:61:aa:94:d7:8a:06:c7:fa:30:a3:b8:68:4a:5e:ee:86:
34:04:c0:ec:40:f4:18:46:b1:d6:08:ea:90:5f:f0:9a:81:23:
5f:a1:96:46:49:f7:3f:0c:fe:3a:c9:cd:80:de:69:2f:e5:00:
f7:fe:08:44:03:c3:f9:d6:9e:99:2f:7d:26:99:78:e3:0d:cf:
61:ae:a0:ae:d1:86:33:d9:b6:0a:f5:23:74:a0:ac:cb:9b:0f:
9b:63:ad:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5gQjHdd66pCgoaHWcU6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl
NTIxMjkwHhcNMjUwNzI3MDgwMDQ0WhcNMjUwNzI4MDgwMDQ0WjAzMTEwLwYDVQQD
EyhkZWM2ZGY3NjcwZmU3Y2EyM2YwZDA0YWYwOGU4MzVmMzljNDA4YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGznikd1Pr2OY6yvqP+4GflRAG1
Q/1r4RVL+EXkuzoi79oOUaVgP5dpNXexW2gM40+7aQVt7YY/TxG860DiI17YgrkS
xULcHgxOWwXl3wJq6PRDcneybdHX4ij3+NDki8fAsE1nmrzKtx3ILuocA7Z5ssd2
7xuEAIyRSYRjSp3df+Hi5urAoM/oGN5JVif2ymQtr/CUSUtLUbX9NMCXQxLMmySZ
H8VdYPowNit0iPjMZdhaa8j2M55z4P8GToBKzgZN5oqNrl64rPB/Da88Fd6y/J//
G/LS7j0PrB9ag6A6pEjNUoPxpHC9/Fcx+zx5QDt54aUatDsgFHWAF/GJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7G33Zw/nyiPw0ErwjoNfOcQIxcMB8GA1UdIwQY
MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt
OWQyZDlmNmVlZTkzLzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz
LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKhPOm1+
8PrzMvb12+ZQx2OgOAso57dZoFlBduvmiJxiQmB26flGC+9d9xvsvx8+1gTfXFmo
tbpKOiYwpOK69SroYGAcWbl2hvt4FsX6CrbOeI4KsOl5N3j+zU9Nm+SEG30et69G
l68ybAFw8LJ2qB2C/23x7YIo4HL3olwDcgAa33BlMzsOq41ge2tzk3/eQWklXAy0
qHbzTjBPNySAcBd5g5lhqpTXigbH+jCjuGhKXu6GNATA7ED0GEax1gjqkF/wmoEj
X6GWRkn3Pwz+OsnNgN5pL+UA9/4IRAPD+daemS99Jpl44w3PYa6grtGGM9m2CvUj
dKCsy5sPm2OtKA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:46:33 2025 by rpki-client