Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: iaE2FzdyUFekvmJ73C67LLc5rmP8tTdASyutW8cgK38=
Subject key identifier: C3:E3:4F:28:6B:D0:46:71:BC:23:7C:E7:93:2C:A9:A6:1A:25:4F:2A
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 0199FD6B5F0B5BF45C1524B2D3E26C06E2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:36 +0000
Manifest this update: Sun 19 Oct 2025 17:01:36 +0000
Manifest next update: Mon 20 Oct 2025 17:01:36 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: b6Lq2RmI/jqN308R7aL5x2/iSKpKXn3tjdLH+vGFlpk=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5f:0b:5b:f4:5c:15:24:b2:d3:e2:6c:06:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Oct 19 17:01:36 2025 GMT
Not After : Oct 20 17:01:36 2025 GMT
Subject: CN=c3e34f286bd04671bc237ce7932ca9a61a254f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:81:e2:9a:4d:26:1e:fe:31:a1:6b:1c:33:
b7:25:f0:0a:16:ce:e5:b1:37:fb:ff:b9:e9:03:f3:
63:89:e0:e4:86:d4:48:20:f6:90:63:a3:85:f3:0b:
92:8c:aa:77:3c:23:a3:05:65:15:e5:3f:18:52:fe:
ee:5c:55:a6:1c:69:6b:7d:7f:50:08:f4:01:5a:3f:
e5:9a:f8:14:d5:a0:c7:09:a9:5f:43:27:75:ba:7f:
14:47:db:8d:57:63:4c:54:b1:60:ee:b1:0e:a6:27:
fd:0f:d9:c6:49:6a:79:ee:d4:cd:b8:27:cd:1d:9f:
52:72:3b:8a:84:d9:f0:56:7e:9e:57:bd:b8:28:6a:
6c:1d:f2:e4:db:56:22:e9:5c:24:d7:bb:d5:f6:28:
85:42:54:e5:dc:83:44:84:97:6f:12:f4:c4:8e:0e:
3a:c7:f8:e8:21:1e:68:f0:00:e1:8a:e8:f0:e2:87:
6d:8d:ec:d8:dc:b1:f5:03:42:99:44:61:16:24:0e:
9a:10:ed:21:71:52:73:25:ec:c4:0c:74:01:d0:20:
d7:11:c2:3f:e6:99:1c:50:b1:5a:2e:f8:61:ec:68:
fd:5f:9c:d0:c2:62:9c:d5:21:08:3e:32:7e:57:84:
e5:3e:04:8d:0b:17:46:a2:72:c0:54:c1:7f:43:d8:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:4F:28:6B:D0:46:71:BC:23:7C:E7:93:2C:A9:A6:1A:25:4F:2A
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:f8:df:94:cd:59:a4:6b:f5:64:f7:73:96:6f:e5:ff:c3:
02:d3:66:e6:1f:3a:c3:9b:4a:5e:9a:15:fa:48:12:fa:2c:b6:
49:03:95:46:23:d9:a7:5b:a3:ed:c2:da:d2:63:fd:c7:44:25:
24:60:0e:c6:9b:c8:90:c3:25:c8:de:23:fa:ef:87:76:88:08:
24:7c:38:4e:da:0f:a6:77:c5:c6:9e:f2:fe:4d:aa:18:40:23:
9c:22:f0:19:c8:15:80:9c:bf:8b:72:bd:34:02:5e:c5:84:9b:
c9:21:cf:88:8c:8b:9a:25:0d:a8:5f:5b:97:03:85:b0:c8:a1:
78:48:90:68:6b:22:33:34:a1:56:b2:96:b7:40:66:d6:d5:2e:
35:73:f7:ac:fc:71:c1:04:a5:3f:b0:97:ba:fe:b9:97:34:68:
8f:d5:65:88:bf:c7:c0:71:4d:cc:06:81:46:4b:12:76:d9:9c:
d4:db:bd:69:d6:bf:c4:ba:53:09:9c:60:24:02:33:5b:41:5e:
db:d2:b1:97:12:e9:a9:e5:b1:a7:86:db:f4:cf:2c:db:b9:bd:
64:06:d0:5e:e0:45:40:33:77:71:18:88:c5:57:80:02:8a:fb:
da:99:a8:48:b1:fb:b7:2c:64:e8:26:86:16:7f:b9:f3:28:b8:
ae:ba:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:46 2025 by rpki-client