Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: EplG9blkdi4bsYNlQVBECfsX97qNO3zDN5L0c+XanQQ=
Subject key identifier: D2:28:D7:2B:3B:65:5D:9B:AE:52:4A:51:FC:55:A6:7D:F0:5E:33:2B
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 0199FC2184458AFACF9BBB2EBF5E04D074B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 1155
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: BZyMyHYbP4VfTGbE1HBlBjKRE9C9YWSQFM1EWuNdYnM=)
2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:84:45:8a:fa:cf:9b:bb:2e:bf:5e:04:d0:74:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=d228d72b3b655d9bae524a51fc55a67df05e332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:a4:0d:63:b3:e9:6d:66:86:5a:17:60:0a:
8e:52:a5:34:32:97:d2:02:63:17:98:6a:4e:66:2d:
9a:f9:1a:9a:c7:9e:fb:78:e5:77:a6:5f:78:05:a5:
62:64:3c:c5:ef:d6:f6:6d:67:28:6b:f9:5f:33:30:
91:7a:74:63:02:52:95:a5:db:92:06:7a:b5:92:d8:
e8:10:80:fb:a5:4b:fe:f9:4c:fe:d5:b8:cb:17:03:
1d:e6:33:a0:80:7b:8a:37:a1:99:b8:ea:b2:64:30:
6d:93:30:66:95:da:84:c5:a9:8e:10:dd:44:31:9b:
da:68:e8:f2:df:db:15:04:e2:57:e2:6f:f6:f6:0b:
aa:36:23:7b:f4:74:ab:ed:54:3e:28:88:37:ba:48:
02:ed:24:11:3b:7c:df:cc:e9:af:94:62:f9:3c:95:
e7:b1:bd:77:92:75:10:ef:20:a9:e7:8f:61:91:4f:
37:7b:5f:09:b8:52:c7:d9:66:3d:89:4e:89:a0:0c:
e4:81:1a:0b:fe:5b:d3:41:fc:29:26:0c:6a:f5:13:
29:d2:d5:cc:6e:b0:97:fb:19:ba:d1:6d:08:d8:e9:
30:70:49:d9:12:80:d9:9f:a1:ab:ed:fe:d0:e7:85:
8b:ef:57:1d:ff:8a:33:42:71:ee:df:01:c6:f3:48:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:D7:2B:3B:65:5D:9B:AE:52:4A:51:FC:55:A6:7D:F0:5E:33:2B
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:10:4f:fd:d3:14:7b:1c:99:6f:b4:95:54:7a:2f:7b:40:
9b:ea:b9:e5:4b:c1:41:75:6c:ac:43:aa:91:01:5c:55:8e:43:
e9:da:40:52:00:04:57:d9:27:22:ed:c2:b6:4b:83:57:6f:77:
e7:91:b8:26:5f:82:0e:4e:fd:47:35:86:03:ef:f9:32:40:b7:
63:5b:a4:76:91:22:be:48:6c:c7:ca:45:7f:71:8f:b9:7e:10:
e4:76:77:8b:d4:ca:2a:91:78:8f:3c:68:6d:dd:b4:ce:d7:78:
9e:24:27:b8:23:36:74:f3:14:85:7a:ec:ae:14:5c:3f:26:34:
cb:e4:0c:1f:69:3d:ed:46:c2:90:01:1e:ab:be:b0:61:0d:0e:
f4:a4:1f:5c:b3:89:98:1d:5a:49:b8:c0:60:d8:a5:f0:c5:6d:
4b:3c:6b:6d:05:fd:59:eb:ce:46:93:ed:49:32:4b:0f:95:02:
a9:8a:fa:00:89:ed:2e:a6:97:a1:22:69:5c:66:d0:01:51:89:
57:8a:3a:44:f6:49:13:59:94:44:c5:88:dd:9d:a0:5d:2b:f6:
fc:af:15:55:99:9e:a8:16:ce:54:99:11:fd:7b:f7:76:98:de:
d2:46:bc:08:7c:e3:91:8a:fb:d9:7b:02:6c:79:ed:c5:e6:73:
72:86:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:56 2025 by rpki-client