Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: TRiLSMBbKiPP81wGbcdem0C+bMu2Ipad7vtOvxDvXSk=
Subject key identifier: 5B:FD:B0:84:16:6E:2F:B2:CC:F4:88:54:C8:33:3A:6B:43:EF:37:D6
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 0199FC584C97E1F11E8E8F941896E781FC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: rw1haa8z+IILgcELYNJtoR1tvQVESylon9Nvj7lrxB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4c:97:e1:f1:1e:8e:8f:94:18:96:e7:81:fc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=5bfdb084166e2fb2ccf48854c8333a6b43ef37d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:98:ae:9d:a2:77:8d:a8:2c:55:da:ab:61:
59:88:ca:8f:1c:87:88:d2:c4:7e:d2:9c:a5:15:31:
88:c9:a1:d2:46:e6:9a:ea:6c:a0:d8:b1:08:9e:ce:
e9:bd:0e:a0:58:9d:d9:c1:c3:e6:15:92:1f:1f:26:
07:9c:5d:26:7b:3e:e8:94:94:17:73:e7:b8:3b:00:
f3:db:f6:ff:41:f5:35:dd:00:92:f4:d8:e9:da:92:
73:0c:f8:7d:7f:09:77:bd:a8:2c:95:4d:bf:d7:66:
e3:ad:e9:ea:b1:4b:98:24:2b:fa:ed:34:27:62:c4:
53:01:de:b0:07:62:95:f2:57:2d:dc:92:32:a3:3e:
c7:d6:f8:bd:ee:fe:0d:a7:46:56:6d:2a:ee:49:39:
20:41:0b:4c:a4:1f:e2:97:17:da:5a:98:96:15:0b:
20:72:41:74:a1:14:3d:dd:57:79:e0:1c:d3:a6:a0:
a6:f8:3e:e4:07:4d:bd:02:ae:1b:6e:3b:28:47:c5:
b7:41:ef:a4:85:29:44:bf:53:dc:1b:fe:63:1d:4d:
59:51:1d:60:6c:a0:3d:ec:68:41:cc:86:26:c6:a0:
74:e0:6b:41:8a:dd:7c:df:f7:3d:dc:64:fe:86:a2:
d9:d8:a3:a6:97:3a:d5:1e:e8:00:04:dd:5f:2a:c6:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:B0:84:16:6E:2F:B2:CC:F4:88:54:C8:33:3A:6B:43:EF:37:D6
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fc:8f:44:c6:8a:0a:77:4e:b2:39:bf:a9:aa:0f:e2:2f:0e:
c3:ef:5c:7d:da:bc:d7:5b:dc:ae:e0:dc:31:da:7a:60:0a:7d:
d1:0e:32:93:56:76:41:e5:0a:4f:35:77:ab:b2:f5:40:4e:20:
1e:20:1b:85:97:cc:ba:7c:2f:75:34:d4:42:22:be:fe:04:48:
1a:8e:d4:65:a4:08:ef:dd:ab:cc:c0:18:7a:24:92:f3:11:4b:
05:ca:37:cc:72:53:62:93:24:81:15:1f:59:e7:0f:38:54:53:
cc:61:f1:2e:64:0a:7f:8e:27:56:44:16:8f:78:e7:f4:57:02:
27:ed:bf:30:0a:eb:ce:98:f3:4b:84:c5:61:d3:82:5a:f5:b4:
78:8a:12:84:09:cd:92:28:8e:cc:f9:c3:2c:34:5c:aa:07:42:
d2:73:64:65:16:7b:0d:ce:bd:17:50:c0:59:c4:52:cd:95:d3:
1d:72:0c:52:27:8d:83:cb:83:e6:35:45:ee:7f:85:4c:65:56:
ad:2d:90:68:31:87:fd:4c:1b:f0:f5:f8:3f:31:c4:bc:55:85:
14:e1:e5:47:6c:38:8b:3e:67:b7:7f:c5:55:53:de:f5:1c:c9:
7c:34:65:79:40:42:db:a6:aa:a1:92:ff:fc:e0:7d:ab:7b:7c:
39:3a:5f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:28 2025 by rpki-client