Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: 4Z3AYLIIawC7u3ezediPlrNgcEh/XzXmGE2M4tPGxKk=
Subject key identifier: 3C:FA:2D:A3:BA:35:09:22:D6:11:DF:28:C3:0E:89:D2:54:47:F5:5A
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 0198D4A8377D57B9C0527EB142FF1096FC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:50 +0000
Manifest this update: Sat 23 Aug 2025 02:00:50 +0000
Manifest next update: Sun 24 Aug 2025 02:00:50 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: O8Nm6wtSTZuMa7kO+QgKIb5nyF2PwP/pK1iMxPiiKoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:37:7d:57:b9:c0:52:7e:b1:42:ff:10:96:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Aug 23 02:00:50 2025 GMT
Not After : Aug 24 02:00:50 2025 GMT
Subject: CN=3cfa2da3ba350922d611df28c30e89d25447f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:cf:0d:e2:ab:d2:c4:29:dd:8e:cb:7b:d0:
90:ff:be:76:78:2b:57:b3:9a:18:e8:57:23:c9:92:
bd:e9:b5:b8:57:bf:76:7c:18:ec:f9:f3:dd:d8:34:
7f:2b:61:4e:6a:83:73:69:4a:24:0e:b6:8e:17:0e:
00:46:ff:e4:9e:01:18:0a:8b:b5:f0:3e:b7:d9:67:
17:ee:1c:9e:6b:fa:ba:dc:fb:e5:62:a4:f0:8c:cb:
eb:ed:19:3f:69:9a:78:9c:27:3f:ce:df:66:5f:78:
13:ed:2d:37:b0:34:25:05:a3:34:13:90:31:e4:1e:
1a:ba:a7:86:d8:36:dc:be:1f:04:27:57:91:01:21:
c1:a0:90:dc:5e:48:ff:fe:35:bd:64:0b:11:31:0c:
11:d5:12:7e:83:86:45:b4:37:b4:7b:b3:20:71:34:
b2:89:b5:d6:07:1e:f7:c9:94:62:50:50:56:72:16:
6a:ea:b0:7c:76:25:4e:72:0e:22:0b:39:73:63:e6:
ce:4e:10:32:4e:32:2f:c4:ba:7e:2f:11:c0:61:ec:
01:25:01:13:1a:ea:8d:c5:6c:45:80:aa:ac:6c:7a:
4e:c3:95:51:ed:76:e3:aa:81:91:a9:42:74:9c:07:
ba:cb:f2:6b:66:95:47:ae:fd:06:66:aa:5c:aa:3d:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FA:2D:A3:BA:35:09:22:D6:11:DF:28:C3:0E:89:D2:54:47:F5:5A
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:60:c3:8c:77:f2:80:91:c7:5f:c9:c8:fb:86:84:63:7a:
99:65:b9:f5:d6:25:d9:5b:de:a4:ad:34:4d:f2:05:47:bb:0e:
4a:d5:90:d0:df:aa:75:9f:ec:9b:81:bd:04:45:1b:44:7e:3d:
52:11:28:95:73:c6:f8:49:39:68:df:ea:fa:d1:ff:5a:cd:36:
1d:89:f5:66:d7:28:f5:61:1a:87:e2:7a:ad:80:2e:0f:6c:bf:
d5:f5:a6:34:82:21:76:2a:de:f1:62:f4:56:b9:d2:18:ad:6f:
da:f2:a6:e9:8c:3d:5d:2e:3b:f1:08:85:33:5c:67:7c:3d:f5:
56:63:13:f5:74:7b:8f:43:66:f9:38:6c:21:48:fa:7b:1a:5c:
77:4c:53:0d:84:f2:bc:b9:01:f1:55:0b:92:4d:9e:1c:d4:29:
ef:ef:18:92:f8:e4:05:c9:3a:c4:2c:26:78:de:76:c1:be:44:
00:6f:c6:b7:51:05:5e:76:fd:34:3c:99:22:f6:6d:2f:56:65:
0c:5d:9c:22:65:c6:b3:28:93:df:9c:1a:ad:d6:db:1c:03:13:
67:75:aa:b5:8c:c4:11:7a:15:ab:51:c7:dc:c5:9f:ac:6d:c1:
39:ac:ce:3e:aa:ef:86:9f:5c:c8:10:bb:95:cd:d6:8a:5b:d9:
36:ef:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:45 2025 by rpki-client