Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier: 6E4ys2kB5cSSRuJ8jHJz6fbpLmZOsAkyx6erAE3T4Qw=
Subject key identifier: C5:95:B7:2C:D3:E6:31:F7:F0:D0:39:65:F2:FC:A8:01:6D:8C:D0:46
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial: 0199FD3435566E9FF574F076DF454239FB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: e28F/x0yGrDH+bELQCrCGyK82XJvwSQ0F9DsF0Y5l90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:56:6e:9f:f5:74:f0:76:df:45:42:39:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=c595b72cd3e631f7f0d03965f2fca8016d8cd046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:f5:74:3f:bd:aa:be:ea:e8:13:62:9f:08:
6a:44:14:eb:f9:65:c8:87:77:b6:3d:ad:c8:7a:64:
cb:36:a6:15:cb:a6:7f:29:af:38:92:84:c0:1e:af:
a2:4e:bd:e0:ac:e6:1e:db:a6:45:e7:0e:5d:c3:05:
cd:d9:b7:f6:34:f1:27:24:dc:27:fe:2b:a3:42:8a:
ee:35:d7:3e:61:89:c3:a4:3d:89:6e:6c:cb:a8:d5:
2c:20:7b:9b:9b:28:c6:cc:5a:a8:86:c3:c8:c9:15:
97:b6:ef:11:80:fe:df:db:f8:4e:69:bc:70:70:04:
8a:34:89:bf:c5:fb:31:23:5b:56:74:91:7d:bd:c7:
18:a4:f4:3e:50:9d:0b:b5:f2:af:37:79:10:87:7b:
74:01:a6:6e:37:8e:f5:8c:d5:b0:41:47:3f:16:68:
fb:d1:e8:bb:96:29:70:1e:b6:d4:5a:96:f2:0d:e5:
2a:f0:cc:39:e2:77:e4:1f:bf:fe:52:94:e7:93:0e:
5b:7e:a0:15:89:54:85:eb:c4:01:f8:6f:b5:69:db:
7b:87:bc:aa:7c:05:a6:b4:3d:5f:f2:97:33:78:9f:
bc:3e:0a:2a:30:26:e0:5f:48:d7:6b:36:b0:ae:22:
de:d7:72:5c:d5:cb:69:df:e6:47:c9:9d:a3:53:3a:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:B7:2C:D3:E6:31:F7:F0:D0:39:65:F2:FC:A8:01:6D:8C:D0:46
X509v3 Authority Key Identifier:
keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fe:fe:54:84:90:dd:25:5d:55:06:eb:4f:ff:ca:49:a5:d8:
3e:0a:a1:be:99:6f:a5:98:d2:fe:7e:8e:52:88:ab:98:1e:88:
5d:45:4e:7e:61:05:29:03:c7:27:d9:ee:9b:39:f0:ea:69:17:
72:a6:45:d2:23:b6:4c:42:f2:b0:63:0c:90:c5:a8:3b:c1:09:
df:dd:22:7f:69:e6:b3:d4:f4:b0:2d:4d:56:75:12:e1:89:df:
90:ac:ed:7b:d0:80:5c:84:49:8c:17:e6:1b:9f:d5:8a:f5:f2:
a9:c1:d3:bc:c1:93:cc:d1:d8:d1:f8:c9:ca:41:e7:e4:c9:ef:
6a:38:25:6b:05:95:6b:42:05:52:04:03:1a:5b:4f:4b:21:0c:
e6:8c:fd:54:fa:fe:34:e8:e9:e0:a0:88:53:48:01:8f:ef:98:
a3:46:74:e9:20:90:19:47:d2:e0:fd:f4:70:f2:58:7f:38:20:
d1:27:0b:df:7f:4e:e0:67:30:b5:6f:77:12:d3:35:48:65:98:
73:32:c3:7c:32:a7:8b:c7:f5:7f:81:28:fd:ac:7b:ad:56:4c:
fb:1a:7d:d7:11:f4:25:9b:95:0e:b2:7c:11:37:7b:48:7c:5f:
6c:04:f6:47:39:68:c7:91:97:6b:2f:0e:d8:ea:b3:d0:16:15:
a2:cd:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:45 2025 by rpki-client