Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: SzltOisj2eArYzYo1ao79qjbvXQTZ5kCaYkYd/WBe9w=
Subject key identifier: 15:E6:F3:6A:AC:4F:EB:B7:24:D3:24:BF:DC:2E:C0:55:96:7E:8E:0E
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 019A4E86B8969C191FB33B3782B34ABF970A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: ohZKOlnGlV1pM8flyZvATmiqh0BltumPaTjH7+j9mTY=)
2: Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (hash: 7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b8:96:9c:19:1f:b3:3b:37:82:b3:4a:bf:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=15e6f36aac4febb724d324bfdc2ec055967e8e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:b7:a8:ca:5b:61:8b:23:e2:8f:eb:8f:d5:
09:6e:8f:e3:5c:ca:46:86:be:8e:52:01:1b:06:85:
e7:8b:84:64:0f:3e:d6:d6:9d:1d:9d:ef:29:03:6e:
9f:4d:ad:91:06:e7:27:b0:2a:bc:dc:04:89:f9:93:
8d:3b:e0:e4:cb:16:e1:ab:31:7e:d3:14:9c:13:8d:
ed:33:95:1b:99:23:7b:1c:69:14:59:db:65:ed:b5:
a7:9f:b0:ec:3a:7c:dc:f5:23:09:24:8b:97:b5:27:
cb:f8:b3:81:ab:8f:2a:ca:05:bb:0c:e6:a3:e0:f1:
04:0a:67:c1:b8:8b:13:d1:fa:87:1a:88:9f:c2:57:
45:74:bf:b0:f2:8a:52:b3:6f:7d:48:ca:c2:a4:9a:
aa:4a:bb:4f:ac:91:d0:24:37:fc:de:e0:7a:46:18:
bf:c8:5a:a4:68:7e:6a:8f:34:70:b5:21:32:6c:65:
96:17:df:d3:a3:ea:58:f8:36:75:d8:70:7e:c1:db:
dd:27:32:8a:c3:8e:ab:20:dd:96:76:2a:02:87:0a:
7e:47:35:55:14:fd:82:cc:59:6c:ad:99:88:af:97:
19:ce:c9:63:fd:c6:66:d8:f9:ad:cb:25:b5:dc:c5:
c0:b8:20:36:6a:2e:16:73:f5:3b:b2:c4:28:de:84:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E6:F3:6A:AC:4F:EB:B7:24:D3:24:BF:DC:2E:C0:55:96:7E:8E:0E
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1d:0c:5c:50:fe:32:dd:26:d4:5e:46:bc:7d:46:78:27:86:
94:5a:4b:99:a8:23:5b:97:0e:21:23:eb:1c:a5:f6:d4:5a:bd:
58:90:7e:04:c1:d9:d1:4b:76:61:56:35:6e:6b:65:02:4a:60:
41:39:82:99:b9:23:d2:aa:f6:83:7e:55:b1:4f:54:0d:e9:c2:
b0:76:e0:27:04:1a:aa:18:b7:f1:66:98:43:b8:d1:64:26:99:
47:fe:04:6b:f0:47:d3:40:b5:32:53:4f:fe:b9:32:cb:1c:ae:
f8:cf:4e:eb:87:c0:5f:8b:d2:c0:38:b2:c3:f6:ca:0a:62:3f:
e7:77:cc:95:a0:07:37:0c:3d:b1:65:04:3a:bd:c8:36:38:90:
13:c9:4e:bc:b8:bc:ef:de:c6:d7:35:46:a9:80:0f:d3:16:5b:
95:66:04:8e:8a:15:6f:b6:e7:1e:13:3a:12:57:c9:39:87:75:
d5:a1:37:58:52:bc:46:3f:e8:63:32:65:0f:c7:a0:a3:a2:b4:
c4:5a:c4:99:76:f5:72:cd:75:83:d4:a8:eb:87:1a:91:ea:f3:
f7:cf:51:f9:b6:66:6b:2b:c3:6a:91:0b:f8:2d:23:e3:33:cd:
6d:e8:8a:32:d0:c0:d1:2c:e8:64:03:8d:ad:60:70:44:34:46:
f6:34:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:17 2025 by rpki-client