Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: t14b0/jhaB6IIiVV8cW7yNsgJAK41pzaEUZP/N5TF/I=
Subject key identifier: 73:2C:68:AE:D0:72:97:4E:33:EE:35:48:8F:1B:C3:48:0F:03:BE:5B
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 019A4D7476A108E44ABB6F0E54E7E76E0AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: MTunnrAGD4HP8wwoYjXmQBHfZqyxcL6oVzkTKCYWl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:76:a1:08:e4:4a:bb:6f:0e:54:e7:e7:6e:0a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=732c68aed072974e33ee35488f1bc3480f03be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:b2:21:1c:bc:51:f2:e8:55:5c:bb:ec:ee:
5f:4e:66:7a:aa:cb:1a:d8:46:b6:41:99:ec:d5:8e:
a7:3d:45:4a:92:e0:f8:40:7f:77:98:f1:d5:5e:9e:
6d:c7:87:af:23:be:90:a3:6a:96:0b:c0:e8:89:eb:
a2:2a:6f:79:82:ab:b8:8f:c3:80:e4:be:c6:ee:8d:
b2:05:ba:40:88:c1:bb:6a:0d:f2:ae:be:5f:87:d0:
91:25:6b:53:fd:ea:32:9b:a6:b4:2b:ad:e0:49:e5:
40:9f:1d:4d:5e:71:d9:e6:59:63:4b:bc:c4:1a:b8:
aa:cb:b2:2d:ff:f8:b3:7c:90:0e:f4:db:c9:f2:5a:
1e:c0:88:31:89:4a:d7:ce:7c:13:1b:02:1c:57:47:
cb:83:87:1e:f4:71:f1:77:71:5b:85:ca:32:91:c1:
d0:60:a6:54:97:24:f9:1a:6c:c9:2b:2c:e8:a9:fe:
08:ca:bc:f8:7c:c5:78:a6:fe:e8:90:e9:84:79:04:
7b:05:1e:25:97:f0:33:ee:5b:85:0a:8b:d7:06:5e:
fb:1a:20:71:80:22:0d:86:b3:ca:b8:51:cc:12:34:
89:c4:37:21:6f:c3:1d:d2:f8:69:17:ea:8b:5d:7b:
b3:5e:ca:ae:39:37:74:8b:15:b1:02:b5:af:06:2f:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2C:68:AE:D0:72:97:4E:33:EE:35:48:8F:1B:C3:48:0F:03:BE:5B
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:48:79:ba:30:bc:43:c7:a1:d0:8a:b8:f2:e5:02:7e:fb:02:
aa:28:ac:54:28:b4:b5:93:fa:22:29:4e:2b:1a:8a:23:a3:b7:
4f:b7:36:74:9f:28:be:bf:62:da:8e:dc:ee:3c:f5:90:de:0f:
60:06:b5:14:65:6d:d8:19:13:6a:16:db:93:57:11:b5:93:28:
28:f7:48:5f:69:85:9c:70:5a:24:63:bc:ec:cc:c6:0f:c3:4d:
0e:77:cf:e1:69:7a:da:43:b1:4d:cb:09:62:11:c2:9a:34:10:
af:03:e6:88:96:5d:62:8b:c9:30:11:46:bc:30:d2:5d:44:41:
39:ed:76:0e:74:62:79:dc:4d:bf:db:08:33:51:b6:c8:cb:1d:
f6:da:c3:d8:c4:a9:c4:67:de:1d:6b:91:bd:81:a8:2d:4d:47:
3a:01:93:33:ad:81:98:2e:ac:e2:2f:fe:6e:03:72:07:a1:72:
40:ac:9d:60:6c:ef:66:f0:d2:c9:05:44:e7:cd:ca:2f:3b:86:
a6:90:7e:ec:44:95:c1:80:74:58:81:d2:67:57:81:47:cb:c5:
c2:47:03:8d:f4:81:91:c1:de:0c:d5:df:f9:f6:80:74:a9:98:
99:74:8a:73:88:b4:95:c1:3b:95:a2:63:44:43:6f:20:56:b5:
66:45:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:34 2025 by rpki-client