Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: 05WbC2BJ7d1EltSEfqff/DS6vOP1Je8nvpNHVB7JrQ0=
Subject key identifier: EA:8E:C4:55:53:CE:0C:49:27:93:6D:FB:FE:1A:06:64:2D:07:4A:AE
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 0198D5F157AD61D96994CEFB2616939D2028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: fY3de8LoJBmVKeN9jhhC9UM8V4HDZSdQPPDvW1T/1NQ=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:57:ad:61:d9:69:94:ce:fb:26:16:93:9d:20:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=ea8ec45553ce0c4927936dfbfe1a06642d074aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:8f:8b:f9:dd:1c:7f:a2:be:9a:9d:7c:69:
82:50:e9:34:a4:39:45:9c:41:fc:7e:08:23:c2:55:
16:2d:61:62:f8:1e:1a:8d:f1:18:c8:ba:1d:dc:51:
d2:2a:2d:98:a0:a0:cf:68:74:5f:a6:cd:39:55:cd:
1d:c6:42:7c:15:7e:05:5c:14:68:e8:80:61:67:d4:
da:d1:9f:1e:36:36:d0:35:48:0a:30:3c:73:60:16:
e0:06:1f:1f:01:83:e4:37:48:cb:b9:ed:a2:f5:6b:
7d:0e:fd:8c:ff:80:e7:cb:c9:f1:81:7f:95:af:0c:
9a:c7:72:55:f2:04:b2:c9:53:be:ba:fe:32:c7:2e:
a2:04:02:ef:f4:c9:0e:d3:d3:e1:21:df:90:a6:6d:
71:04:1d:70:e7:a4:09:ae:0a:ad:4b:77:68:60:e8:
40:ea:95:12:9e:4e:c1:d6:31:00:77:f3:a9:35:32:
de:39:9f:f3:ac:ec:3c:5f:8e:a4:ed:26:7e:c2:6c:
2d:6b:34:b1:55:44:a7:7a:62:35:9e:a3:8a:f1:99:
b8:52:0b:dd:a2:e1:b0:fd:d4:91:3d:20:51:2a:f3:
74:4c:55:b8:f8:e1:09:d3:5f:2a:06:c5:8c:a7:5d:
ef:4e:0a:37:c4:79:ff:26:24:71:11:5a:8b:85:5c:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:C4:55:53:CE:0C:49:27:93:6D:FB:FE:1A:06:64:2D:07:4A:AE
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:17:14:7d:8f:05:4b:8f:1c:f3:e3:16:59:89:1c:fe:77:0d:
53:7b:65:2d:b7:a4:2f:cc:9a:fb:b3:14:c1:aa:07:f9:8b:2f:
c9:77:81:7a:1c:a0:8a:12:ba:22:83:64:86:f6:c1:ea:f3:e2:
b5:c2:71:c4:c3:f5:09:51:c2:60:b7:26:21:55:51:88:09:d5:
4f:46:cc:9d:45:73:1b:25:0b:0b:3d:36:03:e8:a2:d2:58:8a:
9c:71:33:8c:18:8c:93:9b:6f:9b:ef:b9:cb:d5:01:7f:b2:97:
c2:35:8b:ec:64:3b:41:77:8d:d7:e3:44:8e:1e:04:49:17:5b:
43:9c:86:41:f7:9d:e0:69:6d:3f:7c:4b:81:3e:6e:4c:4d:02:
a5:6f:18:f7:71:66:eb:53:61:15:b8:28:0c:4d:a3:b2:68:ed:
cd:35:32:b6:a8:7e:7a:86:44:5c:b5:a6:87:ca:b6:28:5d:c9:
4d:4d:a9:22:0d:d9:74:9d:3c:d9:c6:03:da:76:45:ee:cb:dc:
3c:ab:8b:eb:f4:69:5a:12:94:9f:62:6f:2c:77:2d:06:28:83:
8c:26:ea:91:92:53:1c:51:12:d0:5d:eb:5d:53:63:ce:5a:31:
57:45:79:d8:a3:26:8b:4a:1f:ef:d2:a8:c1:05:8b:cf:77:70:
83:4f:9e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VetYdlplM77JhaTnSAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl
NTIxMjkwHhcNMjUwODIzMDgwMDIwWhcNMjUwODI0MDgwMDIwWjAzMTEwLwYDVQQD
EyhlYThlYzQ1NTUzY2UwYzQ5Mjc5MzZkZmJmZTFhMDY2NDJkMDc0YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9yPi/ndHH+ivpqdfGmCUOk0pDlF
nEH8fggjwlUWLWFi+B4ajfEYyLod3FHSKi2YoKDPaHRfps05Vc0dxkJ8FX4FXBRo
6IBhZ9Ta0Z8eNjbQNUgKMDxzYBbgBh8fAYPkN0jLue2i9Wt9Dv2M/4Dny8nxgX+V
rwyax3JV8gSyyVO+uv4yxy6iBALv9MkO09PhId+Qpm1xBB1w56QJrgqtS3doYOhA
6pUSnk7B1jEAd/OpNTLeOZ/zrOw8X46k7SZ+wmwtazSxVUSnemI1nqOK8Zm4Ugvd
ouGw/dSRPSBRKvN0TFW4+OEJ018qBsWMp13vTgo3xHn/JiRxEVqLhVzmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqOxFVTzgxJJ5Nt+/4aBmQtB0quMB8GA1UdIwQY
MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt
OWQyZDlmNmVlZTkzLzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz
LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxcUfY8F
S48c8+MWWYkc/ncNU3tlLbekL8ya+7MUwaoH+YsvyXeBehygihK6IoNkhvbB6vPi
tcJxxMP1CVHCYLcmIVVRiAnVT0bMnUVzGyULCz02A+ii0liKnHEzjBiMk5tvm++5
y9UBf7KXwjWL7GQ7QXeN1+NEjh4ESRdbQ5yGQfed4GltP3xLgT5uTE0CpW8Y93Fm
61NhFbgoDE2jsmjtzTUytqh+eoZEXLWmh8q2KF3JTU2pIg3ZdJ082cYD2nZF7svc
PKuL6/RpWhKUn2JvLHctBiiDjCbqkZJTHFES0F3rXVNjzloxV0V52KMmi0of79Ko
wQWLz3dwg0+edw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:23 2025 by rpki-client