Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File: AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier: VQZxN5wcxInYcKRm5pqM2m1e+Svcm7sUSUkYrenpG3g=
Subject key identifier: C2:E1:5E:5D:64:08:2B:8F:FD:59:AA:1E:55:69:CA:46:A0:08:24:A6
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial: 019A70DC378093DF629D285352B7952A9859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number: 1353
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: ITM0lUvKhXBHvCFBLvXKzyMF5H0yDgfxufZM7WSM9s4=)
2: ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa (hash: ul6C7Hw2mOMrIR7JJ3pVvWUBrEsSVBHfGtaoivQYtXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:37:80:93:df:62:9d:28:53:52:b7:95:2a:98:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=c2e15e5d64082b8ffd59aa1e5569ca46a00824a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:ee:08:3f:70:51:6f:35:53:79:4d:a8:e7:
4f:ef:d3:93:b8:56:10:fa:23:ba:3b:c7:3e:f7:b5:
c1:90:5c:40:d0:01:69:da:c7:9f:34:7f:9c:62:d9:
9b:76:b3:da:65:47:03:bf:c1:4c:74:fc:01:28:8a:
58:52:34:97:e4:72:f6:a0:b5:8d:d0:f0:6f:5b:62:
1e:7d:2e:d4:d7:35:1b:a7:eb:fe:a8:e7:83:18:c2:
0a:ad:b2:69:9c:72:4b:04:1e:06:be:ca:5b:e8:cd:
21:48:d5:d3:61:3f:f6:d5:29:3a:5d:3e:ca:a1:37:
fa:89:dd:b6:b9:57:89:98:41:c7:8e:0b:ea:7b:0f:
42:be:b5:d4:ea:56:d1:a6:f8:b9:b1:a0:f3:1f:7a:
2e:7f:51:58:39:90:61:39:67:b6:2b:55:ea:4f:52:
79:6f:6e:03:b5:45:f0:35:eb:20:2f:a9:3d:4b:a8:
da:f8:ea:33:5e:e0:85:6f:7d:0f:b9:b2:b9:61:24:
39:2a:8e:ea:cc:63:e8:b9:fc:e7:05:fe:47:74:ee:
48:4c:c8:98:25:5b:19:c7:f2:24:5f:a6:31:ef:0d:
94:e9:9c:a3:01:6b:a0:2e:1d:8c:ff:25:fc:a3:21:
eb:1f:a7:44:43:71:a8:c8:39:8a:0f:73:01:e8:37:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:5E:5D:64:08:2B:8F:FD:59:AA:1E:55:69:CA:46:A0:08:24:A6
X509v3 Authority Key Identifier:
keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4c:20:eb:d6:b2:d3:e6:31:68:68:11:3d:6d:43:df:5a:9a:
61:a6:22:75:d5:da:6c:45:ff:4e:6b:06:6c:e2:de:48:65:e6:
af:99:12:4c:ae:76:db:dc:42:6c:3c:c6:01:7f:e5:06:d2:e2:
c2:b1:3f:30:d1:e5:c1:04:bb:b5:ae:05:d0:d8:b6:42:b5:36:
27:20:6c:64:a9:e6:81:ea:98:6c:03:26:9f:2a:0b:41:b0:07:
1a:08:23:de:a9:1f:a7:b9:63:c7:7e:1c:e0:74:a2:02:9d:92:
0c:3e:cc:68:25:f6:a1:b8:15:ce:15:8d:51:da:6e:23:1e:06:
ab:2e:14:c8:71:5b:b5:f8:a3:6b:31:72:e2:15:b9:88:76:72:
97:45:32:56:7d:7a:59:9c:14:4c:7c:05:96:33:40:6f:dc:bc:
9e:d9:4a:b3:ed:72:2f:98:43:66:55:85:de:eb:91:f8:f0:5a:
95:53:d4:b2:7a:2b:d0:86:0e:ac:d9:8e:d8:02:8b:1c:7a:01:
1d:c5:29:79:84:bb:b4:46:59:7f:c3:2e:07:5f:6f:59:13:03:
fb:55:88:7f:44:3d:96:f1:07:5e:a3:91:03:27:ea:00:cd:01:
d2:a2:1e:71:cf:70:79:cc:1b:90:d3:fd:d0:d1:be:62:f6:e9:
8a:b5:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:25 2025 by rpki-client