Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: hjWtU2pzR7MWI4tFXqgbVjNTYQq5CSoOx/+EV0gLu3E=
Subject key identifier: 14:BC:4E:D9:D3:EC:00:52:31:B5:5A:63:E8:93:B1:71:92:AF:3D:40
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019A4E4FA3712F225765BBD3E8BF85EDE4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 15D3
Signing time: Tue 04 Nov 2025 10:00:33 +0000
Manifest this update: Tue 04 Nov 2025 10:00:33 +0000
Manifest next update: Wed 05 Nov 2025 10:00:33 +0000
Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: rJqlKdtZ6NeaGzDxODzZE764888gR+WZAgKRPFhGnVE=)
2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a3:71:2f:22:57:65:bb:d3:e8:bf:85:ed:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Nov 4 10:00:33 2025 GMT
Not After : Nov 5 10:00:33 2025 GMT
Subject: CN=14bc4ed9d3ec005231b55a63e893b17192af3d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:66:31:61:5b:b4:02:08:17:7a:64:d2:ed:
27:ce:97:20:44:e0:43:9c:fc:4d:7b:54:4a:3b:b0:
91:a7:49:a5:7d:37:70:1e:cf:1e:4c:f3:85:21:ad:
4a:1b:b6:a7:17:04:4a:87:f7:8d:17:16:38:89:bf:
ed:0a:02:d9:7c:92:e6:75:61:e0:f9:56:24:08:18:
b4:39:5f:6c:fd:2b:5e:a7:63:d0:d5:71:a3:97:55:
d4:f9:6a:96:a3:0b:a4:69:c6:62:d3:97:3f:96:15:
c9:dc:71:7d:d8:0c:95:0f:db:ea:ef:78:3b:e8:90:
15:4a:e0:76:94:7b:81:6f:9c:c4:fb:66:58:4b:59:
2d:e8:64:92:ed:3e:f4:0b:8d:e3:d7:88:8b:63:90:
1d:c9:82:3f:87:64:cb:f2:4c:92:e6:fa:55:1a:e8:
bd:2a:21:1b:e4:3f:7e:ea:d2:f6:c8:2b:71:70:27:
33:41:ad:33:10:b2:cc:68:43:78:e6:76:31:d6:2e:
f4:cb:b6:1c:60:57:96:bb:19:2d:0c:e0:eb:91:bb:
39:60:e6:fa:89:8a:ac:0e:6b:32:a9:04:22:6b:25:
71:e6:c3:ce:46:bc:44:b4:75:d5:7a:81:e4:67:3d:
57:00:73:7e:e6:8d:93:b2:78:8a:3c:70:33:2e:06:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:4E:D9:D3:EC:00:52:31:B5:5A:63:E8:93:B1:71:92:AF:3D:40
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ef:26:f8:39:c3:35:79:b4:92:be:31:58:22:00:32:92:45:
ef:40:58:1b:89:79:5e:d1:4e:24:4d:f7:32:51:9f:fa:84:ba:
62:8c:23:c7:e3:dd:7c:da:7c:80:91:82:78:77:55:bc:f3:91:
6f:34:ee:44:48:1f:47:f8:26:04:47:18:10:8b:52:4c:34:dc:
a3:5d:0f:b4:45:5c:15:28:a5:72:a1:6a:2e:d9:1b:26:5d:9a:
de:59:2d:31:e9:6e:05:d6:1c:93:da:fc:68:1a:ba:b9:ad:2a:
07:c1:1a:fd:05:54:ad:b8:12:26:1e:3c:6b:8b:c5:90:e4:de:
38:ff:a6:ce:ae:14:bd:de:29:6f:e7:e6:5e:70:da:be:25:62:
68:5d:69:a8:fb:47:e6:4d:3a:58:a9:83:84:63:88:a3:6a:60:
59:fe:11:b9:76:23:03:23:f2:c3:ec:de:3e:2c:2b:39:01:cd:
c6:bb:90:c5:5e:57:56:58:f4:5f:19:43:b1:73:36:e3:88:c7:
46:f0:aa:f0:b5:cf:a3:f0:75:81:74:e4:3d:0f:3d:f7:b4:92:
00:29:f0:1e:45:d8:d0:45:7e:99:6e:1c:be:f1:6c:de:0d:dc:
fe:47:f9:49:b1:67:ce:07:e4:f2:7a:2b:a4:67:c9:22:46:1c:
3d:6d:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:04 2025 by rpki-client