Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: TBJ8liXwKxEc+270PwcaQzePy9JQjrarsT5PirwZJqw=
Subject key identifier: D9:EA:35:CE:4A:35:E1:EF:6F:4B:96:DA:93:ED:5E:10:73:B0:4C:9C
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 0197B7457257A81276124DB925ADFC2FEFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: 0uKXvrXvb5xSw7g5RbPalMufNr6cMRQ3lGrHO4/2vd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:72:57:a8:12:76:12:4d:b9:25:ad:fc:2f:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=d9ea35ce4a35e1ef6f4b96da93ed5e1073b04c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:a4:01:36:33:06:0a:22:a6:9e:6c:19:1b:
f6:91:e8:4c:5a:4a:4d:5e:e5:ac:00:8b:ca:c5:13:
ef:a4:0f:00:12:3a:c0:0a:a6:07:5e:81:9d:03:c9:
de:13:15:10:d0:82:dd:7f:b9:b1:48:61:b2:b5:03:
88:8e:c1:09:aa:11:4c:b0:b8:62:05:41:63:61:1a:
53:bd:ea:33:b6:e8:e6:ff:9f:27:26:65:5d:9a:98:
d4:b7:10:f6:d9:b7:99:18:e8:97:c8:f5:d4:8c:c3:
f4:47:a2:38:69:4e:bb:15:bd:12:40:f3:5b:66:40:
ba:be:07:53:3d:c6:7e:53:dd:ca:db:a6:bc:9b:ae:
53:82:1d:49:cc:82:f5:71:b8:5c:bb:5b:ca:3f:b4:
fb:19:52:2e:91:e8:ce:aa:cb:5e:c1:5e:7c:0c:40:
e4:3f:23:8d:48:0b:cf:0a:75:fc:06:20:4b:b1:f0:
3a:22:94:b7:63:df:25:90:ac:3b:ff:a1:67:66:ba:
61:5d:1e:95:26:6b:d3:fb:d2:53:ee:9c:d8:d3:b1:
0c:16:4a:01:d3:da:58:72:9d:f3:63:af:79:fb:80:
59:0a:73:36:ff:5f:7d:d1:bc:2e:b3:f0:17:10:38:
18:fe:01:13:a9:86:1b:1f:af:e6:89:51:ed:7b:8a:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:35:CE:4A:35:E1:EF:6F:4B:96:DA:93:ED:5E:10:73:B0:4C:9C
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0b:95:16:7b:90:fd:31:a6:4b:af:e2:f5:7d:9d:fd:d1:97:
53:60:32:44:2e:37:4c:99:ca:78:81:22:43:44:ef:70:d3:e6:
85:78:22:cf:df:85:e5:50:34:e8:04:91:81:e2:18:44:7a:42:
e0:e3:d4:e7:23:55:08:e0:fa:db:57:fc:11:39:3f:3a:34:f3:
29:87:62:3d:40:4d:89:af:2e:83:8d:f7:33:73:cc:65:40:64:
50:d3:0c:ab:40:f9:84:f8:f8:9a:38:f8:06:f2:c9:77:60:6d:
9f:2c:96:f2:e4:2e:45:57:a9:04:a8:3e:1e:54:52:66:02:19:
52:5b:03:f5:ad:e5:ab:07:ad:ad:2d:99:9d:ef:dc:f3:28:7f:
2e:6d:32:c3:0c:1b:10:d4:8c:34:70:65:eb:97:30:26:a7:9f:
b9:31:0c:e8:03:9c:e1:23:06:10:af:ba:df:d5:18:92:0c:7b:
59:8f:d4:f0:83:f7:13:a4:b7:e9:3e:f4:7a:f2:ef:5e:d5:ab:
2b:d7:08:bd:78:1e:30:6c:bb:4e:b9:5e:a2:6c:15:4d:82:ac:
0f:36:e9:21:88:6c:f5:79:13:90:70:8b:36:78:97:78:60:ad:
df:c7:9d:76:46:d1:f0:86:d0:d1:af:b3:fb:09:52:60:86:8e:
b6:f7:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:57 2025 by rpki-client