Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: GZdlf6pNQ2Z/bMjmsbaaWyE/jT9y5riex+rVqrVP0CU=
Subject key identifier: 7A:2C:BC:42:7C:A4:9A:D1:E7:72:DB:61:50:8B:01:19:43:E4:AB:60
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 01988DA1A75FDE15D56C8D43A8211D647DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 07:00:38 +0000
Manifest this update: Sat 09 Aug 2025 07:00:38 +0000
Manifest next update: Sun 10 Aug 2025 07:00:38 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: eDb9woi30vRYByl2mE63qQUJwT1KZ9l+QyGZSJqSG3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:a7:5f:de:15:d5:6c:8d:43:a8:21:1d:64:7d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Aug 9 07:00:38 2025 GMT
Not After : Aug 10 07:00:38 2025 GMT
Subject: CN=7a2cbc427ca49ad1e772db61508b011943e4ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:12:81:e2:58:ae:32:6b:cd:eb:7a:e3:be:
f0:5f:25:0f:61:e8:05:37:07:78:0b:56:f5:be:55:
2b:e5:04:51:b8:a2:69:5b:bb:c0:84:05:db:6a:7e:
e2:eb:23:4f:ae:f5:ad:8b:aa:9f:4f:c8:ad:eb:14:
97:57:7c:ea:95:b9:97:f8:64:1c:18:97:7c:a0:51:
fe:f5:ff:4a:8a:71:44:9f:0e:e4:8d:d6:c0:e8:66:
78:af:0c:7c:19:11:a3:44:3c:bf:25:21:65:6d:c2:
e1:d4:86:3d:84:17:76:cb:ae:de:9a:22:ee:0e:86:
22:ab:ff:fd:49:88:32:67:c7:a2:60:b0:0b:b0:8d:
81:6c:8f:d0:c0:17:ab:3d:f7:e8:12:bc:10:cb:04:
a9:12:4e:75:72:d9:2b:ef:8e:d3:70:48:a2:93:60:
54:92:61:70:3d:3d:d5:74:77:92:fd:93:40:23:33:
44:42:ba:b7:eb:55:f6:98:68:25:4d:79:54:a1:91:
6d:a4:7c:7f:59:88:ae:06:29:d4:f2:75:47:5b:36:
64:71:8b:c8:be:0f:b2:db:cc:9e:91:6a:57:e1:0c:
aa:1b:f7:b6:85:5f:72:0a:af:1d:80:80:e6:50:6a:
67:d0:de:6c:8f:da:fa:cd:7c:cd:66:70:fb:30:1d:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:BC:42:7C:A4:9A:D1:E7:72:DB:61:50:8B:01:19:43:E4:AB:60
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:32:81:16:08:8b:98:46:c0:64:56:ca:77:bd:b4:3e:8d:f4:
4d:69:bb:25:e5:87:37:79:82:b0:ee:a7:60:5c:b0:13:85:4f:
7e:10:d6:04:3d:f8:f8:5b:be:91:b1:21:c9:f1:d4:9f:d4:58:
f6:1c:97:0f:c2:fa:5d:e8:3a:0a:bc:87:f4:2d:69:7f:88:3a:
d0:80:ad:b1:a9:25:0a:5a:cc:4c:be:12:3e:a0:31:c0:22:78:
61:4c:72:e1:16:4f:c9:ce:8e:8c:35:c1:33:e4:25:ee:97:07:
90:98:89:51:49:b1:cb:36:62:4f:ba:ea:77:df:e2:ed:d6:98:
97:43:94:28:62:04:f7:cd:59:27:e9:ce:07:61:69:ca:78:9c:
05:e1:6d:25:9e:5d:5e:e3:02:41:da:f9:f6:8e:89:57:89:1d:
14:bc:ae:7a:bc:73:75:0f:39:ea:80:77:06:16:c6:7b:d5:0d:
90:e2:c8:fb:1e:93:ba:82:28:14:65:fb:da:cb:6a:b8:e9:cb:
48:64:a3:70:bd:fa:33:af:62:b0:65:fa:0b:91:1d:fb:bf:4d:
b6:a5:e5:30:94:da:85:33:98:95:69:b6:d0:f6:59:df:0f:ae:
21:5d:27:63:f0:67:92:d3:fe:e7:b2:9b:4b:6d:2f:95:69:1d:
66:73:04:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNoadf3hXVbI1DqCEdZH3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGY3YjdkNTFlNTA4MTgwZWU3M2NlZGRiZGQ5NTVjMzk3
NzQ4MjIwHhcNMjUwODA5MDcwMDM4WhcNMjUwODEwMDcwMDM4WjAzMTEwLwYDVQQD
Eyg3YTJjYmM0MjdjYTQ5YWQxZTc3MmRiNjE1MDhiMDExOTQzZTRhYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucMSgeJYrjJrzet6477wXyUPYegF
Nwd4C1b1vlUr5QRRuKJpW7vAhAXban7i6yNPrvWti6qfT8it6xSXV3zqlbmX+GQc
GJd8oFH+9f9KinFEnw7kjdbA6GZ4rwx8GRGjRDy/JSFlbcLh1IY9hBd2y67emiLu
DoYiq//9SYgyZ8eiYLALsI2BbI/QwBerPffoErwQywSpEk51ctkr747TcEiik2BU
kmFwPT3VdHeS/ZNAIzNEQrq361X2mGglTXlUoZFtpHx/WYiuBinU8nVHWzZkcYvI
vg+y28yekWpX4QyqG/e2hV9yCq8dgIDmUGpn0N5sj9r6zXzNZnD7MB1/+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHosvEJ8pJrR53LbYVCLARlD5KtgMB8GA1UdIwQY
MBaAFAFPe31R5QgYDuc87dvdlVw5d0giMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQt
YzRjNTFmY2ZmNDk3LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQtYzRjNTFmY2ZmNDk3
LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzKBFgiL
mEbAZFbKd720Po30TWm7JeWHN3mCsO6nYFywE4VPfhDWBD34+Fu+kbEhyfHUn9RY
9hyXD8L6Xeg6CryH9C1pf4g60ICtsaklClrMTL4SPqAxwCJ4YUxy4RZPyc6OjDXB
M+Ql7pcHkJiJUUmxyzZiT7rqd9/i7daYl0OUKGIE981ZJ+nOB2FpynicBeFtJZ5d
XuMCQdr59o6JV4kdFLyuerxzdQ856oB3BhbGe9UNkOLI+x6TuoIoFGX72stquOnL
SGSjcL36M69isGX6C5Ed+79NtqXlMJTahTOYlWm20PZZ3w+uIV0nY/BnktP+57Kb
S20vlWkdZnMESQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:21 2025 by rpki-client