Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: RGnTFbVAxpGWsvZWWFVzNMs98a63MB9LlZewjgxj+mg=
Subject key identifier: 52:5E:5A:08:A9:50:A1:01:72:E4:E4:D7:34:23:90:3D:CF:56:C8:72
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 019768F2EEEB5EC71CE2CE2A64C7CF1B05DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:40 +0000
Manifest this update: Fri 13 Jun 2025 11:00:40 +0000
Manifest next update: Sat 14 Jun 2025 11:00:40 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: 28Z8qwEAQInLh+/IMMb3+5epIg78w+FAUFhTCBomgrw=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ee:eb:5e:c7:1c:e2:ce:2a:64:c7:cf:1b:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Jun 13 11:00:40 2025 GMT
Not After : Jun 14 11:00:40 2025 GMT
Subject: CN=525e5a08a950a10172e4e4d73423903dcf56c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:08:cc:19:35:42:f3:1a:31:ca:76:d8:e6:
35:5b:27:c8:bb:15:13:48:66:02:4e:24:2c:4d:cc:
ae:82:6f:07:d0:33:0d:f8:8f:8a:9c:0e:d6:4b:b0:
6d:49:eb:8a:70:c9:ca:53:5e:3f:b9:98:9e:6f:14:
de:03:da:f7:0b:9b:ce:01:d9:30:13:72:cf:f2:50:
3b:c6:7a:72:4b:59:6d:9c:2f:1d:12:3e:d4:ba:44:
cb:9f:97:74:a3:07:0a:56:05:73:ad:90:9e:ea:93:
d3:6a:c7:85:49:91:14:f4:07:ce:d4:de:df:2f:25:
fb:12:2c:07:96:2b:1f:ba:9e:d5:09:b0:95:e6:e0:
05:b5:1e:d9:1a:9f:23:4b:11:39:fa:d7:6d:b5:56:
dc:9e:10:b3:40:87:36:57:8b:db:97:f9:fb:d7:1b:
46:df:6c:4d:0d:7f:49:51:38:8b:25:de:e4:45:fb:
91:75:db:f9:fd:8a:51:6b:25:78:ce:46:81:e4:dc:
92:5b:3a:8b:aa:44:18:8b:43:29:76:54:f9:ae:c7:
01:ee:c8:03:dd:30:2c:9a:c1:3e:3f:8d:af:c3:ac:
16:02:34:2f:09:2b:b5:55:3b:43:9f:e4:41:88:14:
fa:44:ac:e9:31:ed:36:3d:95:df:b5:6d:1f:31:99:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:5A:08:A9:50:A1:01:72:E4:E4:D7:34:23:90:3D:CF:56:C8:72
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:00:7f:04:04:e4:df:8e:bc:bc:42:d9:e3:f7:0e:c7:5c:
ff:20:11:55:14:ea:26:3f:eb:98:6c:50:25:10:8a:2f:70:9b:
7f:37:17:6d:e4:f7:4b:1f:7b:2f:af:db:3c:62:16:80:65:75:
ba:eb:6a:14:17:04:93:92:f6:54:94:a7:d5:1b:ad:70:5f:da:
08:a2:c9:fc:e2:91:00:32:5c:03:38:01:0b:11:2d:07:12:e7:
20:4c:45:47:a4:ac:da:5d:28:08:84:85:b0:ed:71:98:74:28:
5f:0a:98:36:cf:54:63:90:ad:bf:12:58:b0:d3:f0:71:3b:91:
a1:ac:12:e1:ab:f5:d9:0b:21:6e:86:16:0f:c5:05:1e:2f:9e:
5d:b9:bd:33:64:f4:d5:e2:79:2b:49:8e:59:62:f5:fc:21:c7:
ba:a0:8e:6b:3c:fc:0f:da:4a:25:75:67:de:07:9c:1b:0d:d8:
c3:c3:6e:d7:07:85:6b:08:8a:16:a4:31:e9:48:9b:7c:58:a6:
9b:46:dd:12:e1:cc:24:6f:4b:7f:b1:ff:4e:64:83:e4:36:ec:
17:f8:5c:82:0f:9e:81:0b:5a:05:3a:0b:d1:46:7d:44:08:3d:
73:67:c9:3a:4e:e8:ce:5d:e0:ca:f1:63:73:23:df:a3:ff:a0:
00:45:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:52 2025 by rpki-client