Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: i3rM4TTu5SrAShObMIH/AQzajSoFrI7E/sJIVFMqz2Q=
Subject key identifier: 3F:A8:96:71:C4:A1:F7:F3:09:81:2F:9B:D1:01:55:39:9E:52:A6:69
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019A7301769F8267F9C0D5D265E78A3118D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1601
Signing time: Tue 11 Nov 2025 13:01:07 +0000
Manifest this update: Tue 11 Nov 2025 13:01:07 +0000
Manifest next update: Wed 12 Nov 2025 13:01:07 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: frmoAg1Hasd4SB1T7dp16UNuMcoiKUvzwyTV1Sym4yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:76:9f:82:67:f9:c0:d5:d2:65:e7:8a:31:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Nov 11 13:01:07 2025 GMT
Not After : Nov 12 13:01:07 2025 GMT
Subject: CN=3fa89671c4a1f7f309812f9bd10155399e52a669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:50:22:0e:b9:39:b7:f2:22:32:4c:2d:e4:
11:58:9a:6d:20:98:95:45:31:ae:00:99:07:2e:17:
e3:cc:62:13:ff:ac:bc:a7:e0:c7:2f:d1:d8:55:cf:
08:59:f6:76:0d:c0:3a:44:26:83:b4:c6:f6:f7:20:
7e:80:55:19:6c:26:de:c9:da:c3:c5:ab:d9:da:ab:
b6:dd:24:ae:a5:46:90:03:32:86:a1:59:37:ac:97:
18:b2:bd:e9:2b:5c:ae:a9:5a:ab:e1:64:7c:ef:2a:
31:da:84:9f:ae:c8:3f:ab:96:65:b9:e1:91:5e:fb:
06:db:b1:ca:53:62:c8:b4:f0:b1:e1:c6:8a:ce:d4:
11:13:04:49:9b:61:aa:eb:1b:9c:39:be:6a:70:2c:
3b:ee:38:fa:9f:1a:c0:73:6c:6e:bb:9c:ee:1e:56:
b9:dd:2e:c3:ac:b3:8d:a3:4f:84:98:72:b5:d0:2e:
63:ec:c0:0d:eb:1b:3c:05:eb:3d:de:f7:9b:cd:78:
4d:3b:63:98:75:59:dd:df:6e:dd:e5:5d:ce:b2:78:
e7:39:de:d6:f9:a3:f8:f8:37:b4:6c:ca:3c:c1:0f:
a4:54:67:d0:01:0f:f4:25:a7:77:2c:a5:9e:6d:65:
7a:9f:73:ab:37:c0:c5:21:ac:4f:09:11:f0:a5:25:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:96:71:C4:A1:F7:F3:09:81:2F:9B:D1:01:55:39:9E:52:A6:69
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:2a:b6:f3:6e:a2:d2:02:2c:07:44:76:96:4f:3d:bf:17:
76:b9:02:77:ad:9d:b7:4e:1e:71:34:aa:35:f4:70:a9:77:3f:
68:88:a4:f1:75:2e:07:24:50:7c:73:cb:37:b6:4d:03:df:c8:
5d:0d:77:7f:96:72:78:97:f0:6a:74:4b:51:38:9e:57:b7:5e:
c9:1e:41:7b:64:9f:c2:24:6f:e8:8a:ee:f7:86:4b:57:78:11:
2c:2d:73:4d:6a:8f:8f:73:04:ef:81:e6:f4:1f:46:97:13:17:
3a:f9:6c:77:11:a0:fc:27:c3:d4:2c:20:95:5c:da:06:aa:ab:
e4:07:8b:26:8e:41:ff:64:b5:a8:38:56:21:37:63:8d:4a:ef:
06:17:f3:e4:f1:8e:b9:dc:71:9b:64:eb:99:02:ed:73:dd:28:
c8:ae:de:00:31:93:09:cf:fe:84:d3:db:22:05:4d:a1:d2:7a:
9f:4c:c3:c6:58:55:92:c1:9b:0e:f9:c4:c1:be:59:7e:d6:1b:
df:66:c5:94:6a:7c:dc:fc:1a:d4:ca:61:48:79:09:cc:e0:dd:
c7:bb:3b:50:59:17:1b:0a:ea:14:15:85:dc:76:49:5c:89:04:
6d:06:d8:d5:0c:fb:ce:42:5a:b9:5a:cd:12:f7:67:7f:07:ac:
9a:32:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:33 2025 by rpki-client