
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: fqPiyChOgxYAfgfno5Z3jCRn9bHMi/CXTqmYcfYJkgw=
Subject key identifier: 07:5B:19:B8:51:06:B1:65:D5:48:45:73:D6:65:1D:37:D0:DA:92:CD
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019922FA8483A65AFDB84A250B6069EF6BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1553
Signing time: Sun 07 Sep 2025 07:01:07 +0000
Manifest this update: Sun 07 Sep 2025 07:01:07 +0000
Manifest next update: Mon 08 Sep 2025 07:01:07 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: FHN/DkUhKipCPp1xWNbptuZ3WWcbYtPSEjGCqSENiVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:84:83:a6:5a:fd:b8:4a:25:0b:60:69:ef:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Sep 7 07:01:07 2025 GMT
Not After : Sep 8 07:01:07 2025 GMT
Subject: CN=075b19b85106b165d5484573d6651d37d0da92cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:27:51:2d:f3:b1:bf:d1:a7:56:17:ed:80:
81:7b:d4:3a:5c:48:68:1b:06:4a:db:21:6a:f0:88:
3c:6e:27:9c:6d:7a:34:83:35:84:1f:2a:aa:15:c2:
d1:9f:9f:5c:a0:8a:80:4a:3c:49:b5:19:4c:74:34:
44:4b:1b:e9:89:08:45:4c:98:42:d0:e2:cb:7e:b2:
bd:ce:c2:be:0e:b4:21:28:19:bc:d7:b3:58:f9:a8:
60:9b:93:43:6f:f8:c3:f2:1b:4b:7d:10:47:d3:99:
03:05:cd:9b:ba:14:15:a1:d9:4b:f7:94:67:83:3b:
df:b4:24:ae:bb:fa:63:a0:7e:9f:ce:40:b3:2d:9d:
39:04:43:cd:79:ff:ee:bc:a3:f4:ac:4b:8d:bb:6f:
5e:d4:66:5b:d8:95:ee:e0:d8:ec:d0:b7:6f:0c:81:
5e:fd:0d:36:06:c2:ba:ab:5d:30:02:a3:12:de:a8:
6c:c2:d9:fe:e3:16:a9:3c:70:9f:b9:b3:15:18:b4:
e0:52:82:83:e9:34:fb:95:d6:f3:57:3f:6e:a9:b9:
2f:d1:05:4a:25:1a:d1:fd:99:50:bb:6a:05:7a:00:
8a:ae:1e:f6:05:21:75:fe:46:fe:4e:47:6e:2f:83:
28:d4:3b:e9:02:bc:ee:ec:7f:4f:8d:c6:af:81:44:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:19:B8:51:06:B1:65:D5:48:45:73:D6:65:1D:37:D0:DA:92:CD
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:88:c7:61:f6:92:be:cf:5f:1c:aa:ca:9a:db:79:b5:37:
43:09:88:d8:c8:b3:d9:f1:61:8f:15:f2:f7:0e:bc:a6:47:39:
0a:8a:ba:35:19:19:e6:b6:75:7e:06:bb:b6:64:8b:ac:cb:d2:
c2:44:88:4c:99:ab:2c:36:a7:49:06:0d:d9:b9:09:02:02:cf:
ae:4c:80:e5:0b:30:53:be:0f:d0:85:5b:a3:54:88:67:49:68:
94:22:d0:3e:b1:6d:fa:f8:51:f5:e9:ae:8f:3e:b0:ca:14:25:
3f:35:6c:c4:a5:99:9a:8e:38:ae:59:f7:26:84:d3:7a:4d:b6:
cc:e3:aa:e7:fc:27:e0:18:77:76:ef:7c:89:13:1b:b2:82:05:
32:57:6d:28:5d:6d:eb:50:34:e2:84:58:7a:7f:fd:18:17:d1:
79:cf:47:19:ff:78:00:a4:43:d6:41:10:5e:36:8b:4d:1e:62:
08:cb:bf:94:75:e9:91:77:00:0d:bc:18:ac:40:aa:4d:b5:e7:
c9:ea:64:09:d8:45:31:6d:a1:6e:12:f8:66:e7:b3:d5:77:67:
9c:f2:33:32:b9:f9:b4:82:f3:48:ed:36:e6:d2:2b:81:7b:5d:
cf:65:0e:cc:2e:4b:0c:87:89:d8:f1:65:10:a7:87:69:b7:1f:
2f:2d:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client