Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: We2QN6+Q3G6R9dgwm2J+Cd5g2H59UqYTLL5hLBZenXA=
Subject key identifier: CF:43:26:9C:89:5E:15:4E:9C:FC:AA:11:85:9D:70:3F:98:37:EB:6E
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 0199345C342919B5AFC5161CCBB3E8CD7FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 1541
Signing time: Wed 10 Sep 2025 16:01:21 +0000
Manifest this update: Wed 10 Sep 2025 16:01:21 +0000
Manifest next update: Thu 11 Sep 2025 16:01:21 +0000
Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: E+gqLAWE/jO2yqxx7MPf5ACh4nUJtRTfox02HJdzuSM=)
2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:34:29:19:b5:af:c5:16:1c:cb:b3:e8:cd:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Sep 10 16:01:21 2025 GMT
Not After : Sep 11 16:01:21 2025 GMT
Subject: CN=cf43269c895e154e9cfcaa11859d703f9837eb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:27:6c:88:4b:fa:4c:d0:fb:5d:21:dd:be:
81:61:68:8f:b6:68:1a:d8:50:72:c3:36:40:d9:df:
7f:9f:f3:4a:d8:95:81:d7:56:0a:bc:b4:e9:69:09:
36:3d:be:9e:95:01:4e:f3:ec:ef:37:1b:f2:72:04:
96:c0:aa:c6:5a:7e:cb:0b:13:dc:77:1d:50:18:f6:
da:c0:69:36:3b:7a:04:4b:2a:6d:b1:ed:4d:93:0c:
7d:ba:21:c4:21:4d:ef:da:5d:09:1a:ab:c6:de:53:
c1:25:c4:1b:29:14:a5:a9:52:ca:15:2a:73:3f:2a:
74:18:12:e7:3b:45:99:7e:62:ef:32:54:d0:36:20:
43:83:be:d6:70:f7:3a:6a:ab:c2:2e:79:f0:eb:b5:
2b:01:52:09:e9:f6:7c:fb:44:51:a6:94:48:54:e4:
65:a2:95:83:8a:e2:48:d4:44:00:aa:c9:03:97:b8:
8d:2b:e9:4a:1d:d0:44:5f:a2:6b:75:60:06:70:22:
e2:8f:3c:80:63:9a:0d:f9:16:95:b7:81:5a:09:22:
83:e3:d8:7d:11:b2:25:c1:ff:a2:a3:7f:5d:c0:b0:
53:11:bd:2f:f6:04:12:43:ae:ca:08:df:95:28:f7:
31:ef:59:2d:a3:d3:59:8c:ce:a8:a3:f8:29:5d:26:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:26:9C:89:5E:15:4E:9C:FC:AA:11:85:9D:70:3F:98:37:EB:6E
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6c:53:8c:d9:45:65:e6:23:46:81:cd:d9:42:a4:d8:a6:eb:
cc:cf:ee:ed:57:e9:72:d9:6f:30:c4:d9:a5:a4:b7:42:7e:ec:
ca:c2:a7:d5:79:e4:03:9d:8c:8e:7c:44:fa:99:15:dc:fb:3c:
83:81:35:22:ea:8b:d1:33:17:02:3b:32:7c:b2:97:a2:a1:f1:
c0:db:1c:db:67:b9:dd:78:26:a6:aa:c4:0a:c3:c2:c4:d6:be:
4a:c5:7e:26:0b:82:d3:a4:fc:43:15:c5:e9:fe:13:70:d0:73:
10:15:78:52:74:14:11:66:85:89:99:20:00:69:58:37:c5:18:
94:88:1c:52:f8:62:7a:4c:c5:b0:bb:b5:22:fd:dc:07:0d:73:
0f:85:d8:42:d2:b2:3a:d6:17:3a:89:e3:7d:ed:57:b4:02:07:
10:75:3d:01:2a:92:60:a4:9a:79:36:2a:08:ee:c9:57:83:9d:
4f:8c:54:a9:3c:2e:16:56:d7:76:e2:bc:1d:4e:a6:9d:32:fd:
ab:33:06:d1:94:67:11:7d:bd:6c:4d:8e:91:fb:74:95:04:3d:
e1:48:a5:50:84:86:79:18:43:5d:72:73:8f:5a:be:e5:60:01:
9e:04:9d:73:0f:71:67:a0:5c:0b:93:51:e6:ee:d3:f2:e6:74:
94:d4:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:21:23 2025 by rpki-client