Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: lerpYK/+DfDaafBIsH8mTZkgDb4czpRdkShQT/g1CiY=
Subject key identifier: DA:20:67:03:24:0D:CE:BE:5C:DF:21:4A:FB:17:D6:71:28:6B:3C:05
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 0197B5FC3D66D277CD5C490ECD743E8490C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:36 +0000
Manifest this update: Sat 28 Jun 2025 10:01:36 +0000
Manifest next update: Sun 29 Jun 2025 10:01:36 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: 5bqtKuRfgvEEmPtFqKGXO0xqswvkpSP5tnvuPfBqT3o=)
2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:3d:66:d2:77:cd:5c:49:0e:cd:74:3e:84:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Jun 28 10:01:36 2025 GMT
Not After : Jun 29 10:01:36 2025 GMT
Subject: CN=da206703240dcebe5cdf214afb17d671286b3c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:b0:c1:4c:86:e2:05:c5:e5:a6:b8:b4:2d:
86:5c:ed:13:23:3c:15:e5:5f:25:75:b2:23:0d:06:
8c:3e:ed:56:55:0b:a7:d0:3b:34:ce:0d:30:83:d1:
d2:69:bb:05:5c:03:6f:d0:aa:6b:ff:e8:05:cf:aa:
31:be:dc:d4:7a:16:e7:f8:b5:4b:94:b5:5a:ce:41:
0b:c8:cd:87:cf:59:59:0b:89:54:44:f5:c0:ab:20:
11:e2:16:5f:98:fd:5f:fb:2e:59:92:01:bb:4e:dd:
7a:ef:7e:b5:63:6c:2e:0f:cc:e2:87:71:45:31:97:
e6:fd:65:1e:31:70:88:9c:1d:19:45:c0:46:77:61:
de:be:2b:46:5a:29:13:61:0f:70:e3:31:bd:fd:78:
5c:94:22:ce:87:98:06:60:99:dc:01:31:e0:64:a8:
cb:c7:dc:d3:b6:fe:75:d4:b3:de:c2:a7:61:1e:18:
3b:86:be:c6:01:45:f7:93:7e:87:f8:fc:ef:fd:56:
d6:61:1d:2d:1d:90:90:b2:a1:ff:d3:98:6f:e2:69:
8a:77:3c:60:9c:d2:a7:78:73:13:23:dd:c0:d9:10:
7e:d3:d9:55:a8:11:41:c8:00:a6:82:0c:6a:65:e3:
3b:69:4e:21:38:e6:df:c9:38:2d:35:9c:66:1f:90:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:67:03:24:0D:CE:BE:5C:DF:21:4A:FB:17:D6:71:28:6B:3C:05
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:77:47:99:0e:3f:da:30:49:0a:52:ed:1f:2e:ac:fd:38:2c:
25:d8:32:3b:ab:fe:28:98:43:dc:22:50:0c:e6:22:cf:55:84:
1f:3f:04:75:6d:20:13:73:6e:c0:b3:c1:9f:75:ea:89:a2:af:
47:fb:bb:82:55:0b:b3:04:ef:7a:53:2c:63:c3:7d:8a:0b:50:
45:54:f0:2f:b8:3c:a4:f0:8a:bd:31:25:d6:95:8d:a9:22:55:
ee:4e:d0:d3:28:6d:2b:7e:b8:4a:92:a1:32:08:2c:4e:37:34:
91:fb:20:57:76:46:a8:92:fa:84:cb:f5:a2:e6:fd:3b:d0:fe:
c3:4f:fc:6c:99:4b:c5:2e:2a:36:df:0c:bd:db:b0:fd:93:45:
ca:99:b3:50:a0:eb:bd:7d:f3:26:47:5f:e4:71:5b:31:78:01:
40:24:a4:78:c4:98:1f:83:ca:1a:92:8d:c6:93:5b:bd:23:aa:
72:0d:07:f5:db:f5:a3:7d:8f:9f:3b:ee:9b:44:13:54:f8:db:
e7:0e:8e:e1:32:72:3e:37:da:e9:12:fe:3b:a7:88:9e:ec:a3:
42:9f:9d:36:2f:de:a8:c3:8f:5e:12:5a:e8:07:e2:3b:3a:4e:
8d:58:df:5c:75:1c:66:1c:3a:d4:25:3a:5e:4a:ad:54:ae:4f:
35:7d:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:07 2025 by rpki-client