Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: ASpY7X++TqJde+8zs84BL4dVdW4VLK6/1Tl0udotasE=
Subject key identifier: DC:B2:6D:4D:21:36:CB:9D:6D:59:32:1D:A3:76:3D:13:69:D2:2A:79
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 01974DE9FCD9F7A9D3C20FF3C3DCAF08831F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 05:01:09 +0000
Manifest this update: Sun 08 Jun 2025 05:01:09 +0000
Manifest next update: Mon 09 Jun 2025 05:01:09 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: /x/u67YNekrjaKAPSrV9G2Q6jP31ROgHxLU891fE9dI=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:fc:d9:f7:a9:d3:c2:0f:f3:c3:dc:af:08:83:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Jun 8 05:01:09 2025 GMT
Not After : Jun 9 05:01:09 2025 GMT
Subject: CN=dcb26d4d2136cb9d6d59321da3763d1369d22a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:b2:27:b4:56:ef:33:3b:d6:a0:92:83:32:
6c:bd:1a:54:c0:47:8e:fd:2f:5a:18:36:30:c3:19:
1b:1e:56:81:71:3d:20:b4:f6:c2:f3:18:d8:5a:22:
5d:d8:58:9c:18:16:44:39:e2:f8:0a:29:30:d2:3a:
8c:5e:9e:c1:4d:8d:a1:56:6b:25:89:f5:75:2d:69:
bd:13:5b:2c:32:ee:b4:88:0c:63:10:e1:75:44:c0:
fb:90:bd:a2:47:f9:53:09:76:c4:0d:c3:9a:e7:52:
9e:63:dc:18:e0:2e:38:56:ff:0e:d9:21:20:d0:b4:
4f:1b:7f:40:f0:4f:69:4b:50:be:14:b7:6c:f3:96:
b5:78:b5:0f:66:49:ff:52:db:cd:62:a9:ad:df:a7:
b6:e3:15:5b:23:b3:4d:f2:18:bf:fe:6b:67:d0:0f:
10:97:3e:3b:f9:ad:82:ee:6d:5f:80:8a:0f:ed:bb:
10:7c:24:94:24:92:ea:22:4e:bc:e7:5d:d6:ab:f1:
4d:a6:fa:17:4c:22:dd:25:b6:0b:d6:f7:a9:89:bc:
13:7b:81:3e:ad:a9:67:99:82:11:c3:77:1e:76:29:
2c:69:fa:cd:8b:67:4f:45:7e:62:88:99:c1:d5:bf:
e0:06:76:db:7f:08:b1:f1:4b:25:46:3a:bf:21:36:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:6D:4D:21:36:CB:9D:6D:59:32:1D:A3:76:3D:13:69:D2:2A:79
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:09:27:fb:86:14:af:98:57:fd:f4:dc:4e:17:59:06:08:
ae:21:c2:2c:0d:e0:f9:e6:27:fd:f3:16:4e:67:f9:ff:c8:85:
2c:27:cf:f8:73:c3:5d:31:53:c3:40:f3:06:99:5c:e1:ef:40:
08:9f:9f:f9:07:6c:32:d0:eb:03:54:c6:90:24:33:68:c6:4d:
18:24:96:50:0d:02:ef:e1:e3:89:a2:ef:31:5e:a3:59:a3:37:
21:54:29:e7:32:60:d1:86:11:6f:b6:63:e9:83:9a:a0:a0:92:
df:59:f7:64:82:e1:63:c7:ea:b4:0b:2b:93:b0:40:d9:9f:d9:
a4:73:14:7e:e7:de:01:74:96:3e:9a:24:f9:9c:84:95:24:71:
5b:92:66:7b:b7:6e:28:2d:41:2c:95:20:e5:23:e1:fc:7b:11:
87:40:d4:85:34:26:a8:29:53:78:4c:b3:29:2a:fa:22:e7:0b:
23:54:ca:54:14:8d:4a:a3:35:eb:46:f5:8f:61:45:c7:34:11:
ad:e4:14:00:67:ef:99:95:56:e4:57:81:4a:32:51:80:ca:c0:
36:bd:a9:c6:92:f6:4a:61:85:5f:41:47:7d:94:3e:19:4b:f5:
9d:5f:a4:fa:d7:ed:bf:70:c6:ec:2c:1a:5e:45:d7:35:70:c3:
66:0a:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:53:10 2025 by rpki-client