
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: FAvRnkBI6IsepKMqOtvGhZoaSbEmk47WM2Foj06lN7k=
Subject key identifier: 2A:1C:CB:A1:C3:F2:1E:9E:E6:BA:91:84:27:A8:DF:93:16:EC:8F:F9
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 01992255589AADF4378CF1B74084BBC41E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: 8OiWotXhGU1yVcG9o8GDF33SqoJp5cAJKIT7WeA6nHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:58:9a:ad:f4:37:8c:f1:b7:40:84:bb:c4:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=2a1ccba1c3f21e9ee6ba918427a8df9316ec8ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:c3:07:d3:79:a7:ba:26:ff:ce:c6:08:fe:
9e:24:a7:76:f7:e6:9b:21:9e:2a:af:fa:15:72:14:
79:c6:95:3d:10:b3:30:62:4c:69:35:f5:f9:d0:be:
46:73:e7:dd:23:5d:b2:9d:7e:dc:36:1c:c3:5c:3f:
b0:62:cf:5d:9a:34:ea:fb:3f:2e:60:42:0d:c6:db:
c9:44:61:f6:28:e6:17:61:9b:fc:cd:3a:9d:0f:81:
a7:94:be:54:02:66:36:c2:43:6f:70:33:18:53:21:
4c:27:67:c6:ef:3a:2f:3a:d6:2e:6e:ef:bf:62:48:
a5:db:3d:a0:3a:b5:2c:51:15:7c:35:64:65:83:d4:
17:4a:e2:bd:19:c1:a4:b0:b5:3b:db:1a:a9:f9:5c:
aa:bb:21:e5:a1:20:18:14:31:2e:96:32:09:72:76:
68:45:1b:4a:a9:ba:99:56:0b:4d:db:c9:2b:5b:e2:
ef:11:9b:96:94:c3:96:8a:21:fd:69:49:d5:f8:e9:
27:8c:5f:1c:42:ff:d6:4c:bb:8b:65:3f:2c:2d:c1:
5c:1d:83:8e:ad:dd:db:6d:16:f8:96:2d:85:b0:71:
12:f5:7d:73:ad:55:75:4b:0f:87:54:e1:a0:f1:90:
bc:48:19:e3:f7:b7:cf:f1:15:43:89:3e:65:e3:4c:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:CB:A1:C3:F2:1E:9E:E6:BA:91:84:27:A8:DF:93:16:EC:8F:F9
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:fb:ab:8f:25:bd:7e:b5:78:5d:5f:b2:fe:9e:f8:56:b5:
58:05:ce:a0:2e:5f:2d:e6:f2:50:cf:53:95:2c:fd:67:fd:ae:
cb:c6:61:dd:53:7e:85:23:e8:bb:a1:d9:03:5e:10:a6:b4:64:
71:f7:71:a9:8f:1a:a2:c0:d7:65:b4:b5:b2:ba:ed:16:5b:a1:
a3:79:4d:61:9a:d8:40:06:11:db:d1:a1:08:0f:e0:30:ed:2f:
4c:e3:a9:a9:41:05:52:84:9c:8d:b0:d7:81:7c:a5:87:5d:f5:
ff:6e:b2:54:25:e7:2c:41:10:b1:74:c2:07:cc:77:40:35:a3:
25:46:7b:44:e1:b7:df:e0:0b:8d:35:c8:6a:0e:51:8d:9d:40:
2c:72:b6:91:26:a9:74:20:ed:d2:b4:d4:26:d7:42:61:c7:a4:
21:c3:62:11:0a:7d:84:f8:5b:56:88:cd:a9:f0:c2:78:bf:a4:
ea:a4:bf:51:80:db:14:fe:fa:c4:c8:1c:d3:28:cd:33:02:a3:
6a:d0:78:ee:63:cd:0c:e8:db:4d:14:e8:f8:96:60:16:7e:25:
bf:ae:80:80:28:67:5b:3b:c4:b6:a9:a5:8d:66:ad:9a:ac:1c:
96:75:dd:81:74:ae:81:10:df:30:21:54:aa:9c:ba:8f:aa:e9:
8e:41:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:00 2025 by rpki-client