
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: c10o6txUqjNiQqvawUBPFc6rPQGkvyIfL8ebuXmmofY=
Subject key identifier: B7:A6:04:BE:5B:60:E6:F6:9D:8C:C4:94:DA:56:20:76:F4:C7:6C:E3
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 0197B8212A9E9C34F373C4B1A379C57E21E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:01:10 +0000
Manifest this update: Sat 28 Jun 2025 20:01:10 +0000
Manifest next update: Sun 29 Jun 2025 20:01:10 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: MLMWzhOdl5a/eXBUVdt6nEH0i87HRpJN58RCPuRgDSo=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2a:9e:9c:34:f3:73:c4:b1:a3:79:c5:7e:21:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Jun 28 20:01:10 2025 GMT
Not After : Jun 29 20:01:10 2025 GMT
Subject: CN=b7a604be5b60e6f69d8cc494da562076f4c76ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:15:72:b4:fb:53:7e:c7:d2:19:79:4f:9a:
37:e3:54:59:bc:31:89:8a:75:ac:53:86:ab:b0:b5:
19:73:60:bd:7e:2f:62:bf:a8:9f:38:96:65:65:68:
3f:51:9b:f1:5b:b4:90:68:33:ee:98:84:ea:12:41:
8b:47:97:14:56:0b:1c:9a:55:b2:26:7e:60:4c:ac:
e2:6f:4a:20:2b:3a:f4:16:ee:bb:14:c0:72:42:2c:
16:91:39:e1:2e:ea:d0:29:96:b2:21:e4:03:44:f0:
ae:69:ed:77:47:e7:c1:82:cf:d6:ba:87:f3:b1:2c:
5b:4f:cf:97:ab:bd:cb:81:da:bd:af:05:ab:0c:f1:
2f:39:1b:d5:c2:61:66:b1:09:34:dc:9c:fb:6a:1f:
12:af:4a:ec:f6:c5:ff:2c:f6:f0:8e:3e:74:91:0d:
ca:f3:f8:d0:19:1c:92:06:f7:b7:92:c5:30:ed:b6:
f3:73:0a:13:03:ad:71:44:f2:be:cd:92:8b:42:bc:
26:8d:ee:6a:9d:15:b8:b0:d3:c7:06:07:be:56:b0:
fe:43:65:21:49:08:45:21:5f:9a:5c:5f:c2:57:d0:
93:41:1f:6c:03:2f:e9:5e:db:03:13:fa:af:88:d6:
e8:d3:2e:94:5d:da:ec:08:6c:62:14:b9:69:ed:ff:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:04:BE:5B:60:E6:F6:9D:8C:C4:94:DA:56:20:76:F4:C7:6C:E3
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:5e:b1:b5:4c:c1:ae:4e:10:5d:5f:9b:49:9d:85:94:71:
50:c1:c4:0e:a9:c7:de:68:66:c7:c6:fc:03:d3:8a:c2:c6:68:
08:62:53:5f:dd:61:fd:06:c6:53:09:df:84:e0:b1:88:ca:60:
c8:2b:a9:f1:10:aa:65:2c:35:bc:e2:1f:92:8c:a6:1b:ad:ce:
1d:2d:6d:4b:74:c8:fc:4e:d3:4f:8c:c9:e7:0e:87:a0:d2:d5:
30:70:d7:08:51:49:e9:a1:eb:1c:41:7f:82:37:3f:e6:8b:f9:
9a:f1:c9:b9:ac:87:73:a2:67:06:fb:e0:fd:8c:13:d6:c5:b7:
f9:7a:d3:e5:66:44:4b:40:71:2c:58:e9:15:d4:31:ea:93:a6:
97:68:5a:8c:c0:5b:dd:65:99:b4:70:e2:6f:4a:94:02:eb:14:
12:b7:33:16:fb:91:a1:80:f7:e4:a3:9c:df:6e:bf:c4:85:ca:
10:da:ff:62:33:fd:06:57:9d:d2:b7:12:ef:85:6e:34:fb:93:
50:88:97:9f:54:94:5a:6b:a2:ad:18:6b:26:e4:3f:eb:4c:61:
bb:d0:7d:70:24:33:8a:4b:b1:c3:4f:61:23:9f:7f:b2:5a:65:
9e:b3:06:ab:2f:1c:23:4a:fb:56:1f:9e:14:9b:1f:4e:2d:71:
ad:79:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:52 2025 by rpki-client