Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: UY6WKcn4lr0XCc5ZveErKgFsFvnve0zJqdiK8OuZ9i8=
Subject key identifier: B5:1E:A4:7D:94:4E:A2:AB:49:CA:AF:10:D2:6D:C9:78:DA:03:A3:A3
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019A21E459B43A0790E92F3AFFA6633D269C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 15BC
Signing time: Sun 26 Oct 2025 19:00:04 +0000
Manifest this update: Sun 26 Oct 2025 19:00:04 +0000
Manifest next update: Mon 27 Oct 2025 19:00:04 +0000
Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: uBvYlDCB2MT9zM9EjBnBi3S19HYwcc4kIQhsfSaCMQ4=)
2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:59:b4:3a:07:90:e9:2f:3a:ff:a6:63:3d:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Oct 26 19:00:04 2025 GMT
Not After : Oct 27 19:00:04 2025 GMT
Subject: CN=b51ea47d944ea2ab49caaf10d26dc978da03a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:bc:98:bc:c0:d0:8a:b9:ff:3d:e4:58:75:
7d:b5:9d:0c:da:bf:f8:e8:ec:fb:e4:f4:f7:55:ca:
db:a4:3a:01:57:25:4b:55:c1:60:43:c9:17:4d:cc:
78:a1:6f:3c:b7:67:cd:ac:1e:4b:ef:70:16:69:68:
6e:ca:75:cc:42:96:97:a5:57:5a:e3:c0:91:30:17:
2b:b9:7f:29:8a:66:83:63:d2:63:3d:fd:bc:4f:d2:
45:a3:95:f8:71:ad:bd:41:d6:b5:4a:0c:7c:7c:a4:
db:0d:dc:46:ad:6b:cf:14:78:fe:fc:8b:e8:94:5c:
bf:22:c7:f6:d8:5b:f6:60:e1:f3:2a:d6:b6:07:4c:
78:b7:25:f7:d9:10:4a:96:a7:6d:dd:57:27:46:50:
4e:e9:24:b8:03:f1:1f:91:d6:d3:4f:4c:a7:38:a6:
54:2e:6d:a1:7d:5f:2c:32:89:63:ec:4e:56:e0:f5:
66:ba:78:2f:e2:ed:b5:3d:fb:45:74:55:62:19:ae:
20:45:2b:8b:c3:c3:d9:1a:62:19:7c:7d:0c:76:4e:
b3:11:9e:45:9f:a3:1d:8b:68:99:12:6c:fa:97:9c:
5f:0b:ba:5a:de:32:fd:c1:33:05:14:80:d3:dd:09:
1c:d0:a2:69:0a:c0:50:fc:b2:ca:b6:bc:c6:a2:a4:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:A4:7D:94:4E:A2:AB:49:CA:AF:10:D2:6D:C9:78:DA:03:A3:A3
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a8:eb:07:47:b1:c0:b8:e2:11:a8:49:b9:6c:f3:d6:6d:f6:
6a:f1:32:50:43:d5:b0:c1:e4:6e:34:8c:fe:c5:19:ec:d1:36:
30:bd:3a:ca:ab:b4:01:3b:cf:da:3d:25:8f:b6:10:71:b8:f5:
13:9a:02:35:cd:90:9a:f5:34:17:ae:85:c0:86:7a:b3:97:46:
fc:e8:5c:80:09:a8:1c:e9:5f:0c:7e:25:01:c4:da:5f:87:1d:
df:4c:45:b2:f4:56:db:0f:fb:39:be:7f:74:b0:21:5d:8f:16:
18:b7:3d:a2:1d:44:35:e6:3a:e2:13:b7:7f:71:d8:cb:38:be:
6d:3f:30:9f:09:5a:21:17:93:6d:71:61:be:bb:8e:f5:95:78:
95:32:9b:c7:96:64:b5:d0:6b:1f:8f:06:73:8d:46:42:14:1f:
8b:d4:7f:04:0e:e8:71:e7:18:1e:3c:d2:b5:4b:13:35:3c:71:
06:a0:37:8a:60:c2:fd:f1:a1:47:1d:27:6c:f3:82:c8:a3:42:
f9:68:9e:ed:4f:8c:2d:71:02:3c:0c:5a:da:2a:8d:d8:3e:9b:
a7:51:3e:db:f7:e1:70:4b:0e:c9:b9:9f:be:b0:3c:c6:e8:2b:
54:8a:93:a7:ef:38:be:72:9a:a7:5d:67:3c:e5:d6:e1:07:65:
30:ab:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:40 2025 by rpki-client