
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: nauoAXdNgdSKUNQ3kA7eTUyIfbihwCHqimnsoYGJKYA=
Subject key identifier: 95:CA:4C:ED:F7:4B:E5:AE:F7:8C:8A:D9:56:F9:7D:D8:CA:19:46:B6
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 0199FF22D2425BB33A3FE2BD2E2F96C2B3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 01:01:36 +0000
Manifest this update: Mon 20 Oct 2025 01:01:36 +0000
Manifest next update: Tue 21 Oct 2025 01:01:36 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: Cs++sK6gI3xocuBx8ie1+U7aMI5srYB+kT+Sf/yc4Vk=)
2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d2:42:5b:b3:3a:3f:e2:bd:2e:2f:96:c2:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Oct 20 01:01:36 2025 GMT
Not After : Oct 21 01:01:36 2025 GMT
Subject: CN=95ca4cedf74be5aef78c8ad956f97dd8ca1946b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:04:2b:1e:4e:42:5b:50:6a:44:11:e8:8c:
02:eb:c4:94:a8:0e:8c:19:4e:aa:23:a9:e6:d6:54:
c5:19:3a:64:a6:32:54:36:3d:68:b0:1f:20:91:15:
71:05:55:1e:b9:5f:4f:74:04:02:03:81:75:c4:1c:
57:ad:0c:a4:19:a1:66:5d:3a:0f:2b:16:2c:04:29:
1e:62:fd:fa:dc:3f:05:75:b1:3b:99:7b:24:94:42:
57:e1:74:4b:11:f5:64:b7:47:49:eb:70:b4:f0:66:
fa:36:cf:cf:64:14:38:8d:2d:2d:2f:5e:29:7a:40:
53:09:6f:ef:2a:5a:dd:a1:20:93:ab:fb:39:34:48:
0a:52:b4:6f:d7:3a:c3:8d:3f:05:1c:b6:6f:f2:1a:
f9:82:63:e8:d4:27:70:c7:91:d5:a7:2e:e3:cc:7e:
44:57:be:d9:27:42:2b:f9:a4:5f:64:1d:ea:bb:72:
3c:45:47:19:c5:82:78:ab:3e:16:1e:2b:46:08:36:
cf:98:f3:fc:1c:5f:80:85:32:e9:6e:0a:8b:86:72:
a8:ad:53:ba:af:41:97:a1:b1:6c:08:2a:fb:d2:e1:
4c:48:e6:af:9a:29:da:38:91:f1:31:62:49:a2:36:
84:d4:01:a9:57:c6:73:68:b5:43:78:44:ea:e8:a0:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:4C:ED:F7:4B:E5:AE:F7:8C:8A:D9:56:F9:7D:D8:CA:19:46:B6
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:51:38:42:de:95:9e:31:de:91:60:ef:24:57:60:f1:a5:
4a:6d:16:de:41:b6:3f:77:4e:ba:14:ee:61:37:6c:e1:3e:4a:
2f:63:a3:b7:ca:47:a8:05:3b:c6:8c:2d:87:2a:12:c9:54:7f:
82:7e:c7:fd:00:9a:e5:0c:67:e1:d8:d7:92:e9:ed:4a:a2:08:
01:ce:22:f5:2a:54:84:3a:3b:06:00:b0:69:12:f3:77:e6:0b:
d9:a4:52:23:cb:6f:58:f7:4b:9a:2f:2b:66:88:1c:4a:06:06:
9a:7f:d0:35:8b:de:dd:e4:67:94:6a:fb:92:75:80:11:a9:d7:
6e:44:21:af:48:89:d6:6f:2a:e9:c3:71:a9:fe:fd:31:c7:54:
8c:05:49:48:d2:8c:73:e3:bd:20:cf:1b:66:50:11:0e:8d:c9:
54:76:6f:24:6e:61:2d:81:25:34:70:df:a2:25:9f:b0:a4:fa:
1b:db:33:67:16:b2:cd:55:05:8b:80:8e:ab:10:58:92:10:56:
d6:65:01:45:46:9c:7f:cd:88:b5:62:1f:fb:d0:5c:c2:3d:27:
80:c3:af:a4:ff:06:2f:c2:98:36:54:ba:1e:95:a2:b6:1b:ef:
5c:03:af:fe:7d:ea:28:2e:2d:87:5e:c3:91:5c:62:73:96:16:
a4:de:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:40 2025 by rpki-client