Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: CrNmOI2pUHzJJTp8eDn6xGB7Kayh39J/xMY6HLVdBGM=
Subject key identifier: 1D:FD:72:3F:CE:71:7D:61:22:1D:AA:98:DC:D2:55:AF:57:09:A3:0B
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 019A714A01E78C37A2D0628BD6F7D7481E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: umU6D7Z0VYmBrjScOtqy+kG8ljK/3In4gb9RLVZx8Ao=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:01:e7:8c:37:a2:d0:62:8b:d6:f7:d7:48:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=1dfd723fce717d61221daa98dcd255af5709a30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:36:4b:cd:d4:ae:b7:2c:4b:a3:e5:7d:af:
3b:b9:fa:31:bd:8c:29:ce:59:70:87:26:9d:56:0d:
00:eb:9d:3b:91:e7:7c:f8:c6:2f:d3:8d:15:28:7c:
a0:09:23:de:70:49:09:45:ed:3f:b5:1d:28:05:2d:
50:d1:1f:c9:52:f4:8a:4a:17:38:64:0e:14:63:bf:
e5:44:d2:8d:81:6f:b7:0b:72:97:11:f1:49:fb:3a:
02:ea:d5:55:7f:1d:0f:2f:c4:d7:6f:ca:e0:e5:89:
a7:a1:95:56:b9:78:d7:9b:a1:0d:ac:e6:59:cb:38:
5d:ff:f2:f1:c7:cb:68:a0:60:e5:32:95:bc:98:8a:
f7:c9:6a:56:fd:ee:69:d8:98:89:06:d3:3c:09:17:
35:f7:84:64:b8:0f:11:02:dc:86:14:0a:44:1a:c1:
d7:ff:74:87:52:90:51:06:b6:ef:ee:09:50:45:4f:
5a:22:99:83:ec:9b:c7:43:4f:51:74:62:bf:77:55:
af:ae:16:bf:14:43:94:8f:f9:b3:3a:8e:c6:82:87:
68:cb:2c:12:b3:d2:dd:d1:52:80:7a:00:44:d0:34:
99:32:0c:70:3a:0d:78:d4:98:a5:12:ff:b6:63:31:
31:e4:de:af:32:90:f7:a6:d5:f3:6a:14:c9:2e:1a:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FD:72:3F:CE:71:7D:61:22:1D:AA:98:DC:D2:55:AF:57:09:A3:0B
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d2:ed:f5:e7:01:07:b8:5a:86:ad:30:0f:6b:f3:c8:b8:42:
a0:f4:af:fa:8d:69:29:f0:f4:99:3f:ca:ab:e3:4f:d5:6d:dd:
55:09:5e:b7:52:2e:18:4c:71:57:b9:85:6e:58:a0:6f:12:6a:
5e:08:47:8c:fc:19:e2:ba:94:f5:4d:b4:42:fb:48:85:79:80:
5c:db:cf:92:b5:56:c6:03:8c:85:83:cf:33:f0:39:87:03:7a:
e8:2a:9f:a3:b5:f0:f0:54:56:59:1c:f8:e5:db:cf:c5:85:96:
92:c7:71:7a:3f:4e:e1:48:29:96:b7:a1:da:9d:8f:2d:8e:a0:
95:64:11:28:18:03:41:05:91:0f:d7:74:60:d0:86:18:56:79:
41:40:04:d9:1b:b1:02:56:89:6e:99:de:9b:20:8a:18:61:05:
9e:5f:45:e3:7a:4e:85:d6:c4:15:11:d8:3c:63:40:86:b7:8c:
a2:01:da:94:63:45:da:0d:9d:bc:2b:fc:6e:14:b2:7c:30:f7:
c2:1e:35:e6:94:aa:f0:dc:b0:45:02:7d:90:19:b4:2c:48:5c:
a9:94:91:7b:bc:15:7c:9b:07:3c:74:80:9d:4f:8c:af:c9:87:
af:8a:73:8f:82:bf:1d:41:a6:5c:57:b0:12:cc:a4:5d:a5:66:
ae:9e:aa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:29 2025 by rpki-client