Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: EbXHeOqYEvRflicPs3OarT5bS9E1fGCdphH03EYvZRE=
Subject key identifier: BE:8E:47:80:7E:F8:B0:5E:06:DB:A4:2A:8C:46:22:08:84:7E:BC:37
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 0199FC2164F48F334F294DEBC615A4566DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: ljSWhX+1aBHX7iA/3T6IDiX9I8A7Wd4TY0Hx/VTDGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:64:f4:8f:33:4f:29:4d:eb:c6:15:a4:56:6d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=be8e47807ef8b05e06dba42a8c462208847ebc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:8e:16:31:79:9d:8e:0d:37:d4:25:d1:46:
bf:33:e7:bc:8f:3b:2e:16:ca:5e:68:70:f8:e3:9f:
4c:d5:73:87:fc:5d:bf:63:30:f2:86:bd:f8:5f:0b:
cc:fc:83:f4:e0:3f:b3:04:26:aa:e4:cf:2b:f3:8e:
c8:16:be:c7:1e:51:a6:33:f3:e8:5b:53:bc:86:01:
ed:85:1b:55:75:f9:eb:a0:67:ec:20:05:18:b4:0b:
c2:9e:06:95:6c:24:91:b0:e5:73:4b:e3:74:7d:47:
b7:ad:59:46:f6:7d:1b:97:54:28:71:61:9c:5b:76:
37:35:d0:5b:7e:09:b7:b4:6a:26:66:d4:8b:22:4a:
07:a8:e7:e7:fe:1a:4c:d8:71:f5:9d:59:d6:37:39:
50:20:3b:e6:16:75:ef:ae:5b:73:15:c7:a9:6f:13:
1d:67:9d:19:e8:f9:58:0d:98:5b:44:24:57:58:4e:
1f:7a:92:d5:b5:47:9f:b2:8b:6e:86:9e:7a:0f:f0:
d0:6b:af:eb:02:2a:5b:d6:6f:20:10:f7:39:f9:5f:
f3:f1:c7:7e:6b:32:62:f5:8e:26:b3:1e:ea:13:58:
7a:f2:4f:5c:cc:5d:75:dd:ff:c1:fa:f1:00:44:c5:
35:56:6c:e3:51:30:6e:88:6c:2e:1c:bc:3a:d5:6e:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:47:80:7E:F8:B0:5E:06:DB:A4:2A:8C:46:22:08:84:7E:BC:37
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:63:15:dd:1e:da:a0:21:15:19:68:57:76:5c:38:88:50:
18:70:10:b1:f4:cb:a6:ef:53:6b:53:96:d0:2f:5a:a3:6f:0c:
ce:66:16:e0:e5:d8:84:1c:f6:db:00:b8:91:b7:9d:78:06:2d:
ad:7f:1d:84:e4:1a:28:9b:58:aa:33:7e:c7:c5:50:84:1c:0b:
3a:ca:66:22:57:75:7f:ba:7b:56:62:a4:a1:da:fd:c8:c7:6f:
7b:00:03:67:b6:62:5f:c7:f2:c3:a5:ca:f9:ad:9b:d2:91:6f:
cd:65:08:93:04:f2:cb:c9:58:15:0d:9b:bd:09:0b:8f:78:36:
72:7a:dc:1a:45:92:05:72:a3:c0:96:a7:20:88:ec:04:14:66:
46:eb:d4:2b:fb:b4:f1:6b:44:26:ab:d5:94:e6:1d:18:c8:87:
d5:2e:84:94:41:05:d6:02:07:86:a8:b2:10:ff:b0:ab:1c:a2:
55:2b:29:da:84:72:d1:51:bd:72:88:d4:ff:dc:26:f1:e7:c2:
8d:22:3d:5c:68:e3:ed:2b:db:74:ba:e6:06:21:c4:84:c3:0c:
e4:7d:9b:fe:4d:d1:51:ee:4d:27:91:f0:ba:f9:29:2c:20:1f:
11:5d:65:da:3d:f2:20:84:34:62:a7:63:a1:35:62:80:1e:6c:
1e:4d:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:50 2025 by rpki-client