Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: 71DaQ+9JPeWW2cgJ+0RJcNF8YsX2xqZFaW8QY7q4HmA=
Subject key identifier: 1F:6A:0F:35:B8:9C:50:6E:A7:D5:3A:E8:22:0B:EE:F2:DB:2D:3A:4F
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 0198D6CD5AB1C2CBCA06379062DE752EE06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 12:00:38 +0000
Manifest this update: Sat 23 Aug 2025 12:00:38 +0000
Manifest next update: Sun 24 Aug 2025 12:00:38 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: eIqaINclB7ZeK9kGnCpZSnttwgKjbYOUJxa+wsNWm9s=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:5a:b1:c2:cb:ca:06:37:90:62:de:75:2e:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Aug 23 12:00:38 2025 GMT
Not After : Aug 24 12:00:38 2025 GMT
Subject: CN=1f6a0f35b89c506ea7d53ae8220beef2db2d3a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:84:fc:e9:04:87:d1:9f:1f:7a:35:ca:05:
bc:24:17:01:58:ec:f4:7f:f3:d4:26:da:f9:2f:df:
ce:d4:38:42:cd:08:c8:6d:c4:d6:10:dc:58:2d:20:
d3:37:53:cb:ac:50:23:15:0d:4d:a8:c2:b2:6b:5d:
1a:81:90:69:40:e2:d7:fe:8f:0c:46:17:77:3e:85:
08:80:f2:1e:cc:0c:e5:43:cb:e7:67:0d:9b:fc:b9:
cf:b7:9c:fe:02:4b:37:86:2d:cf:b5:08:48:64:3b:
76:47:67:df:c1:cc:14:5a:d4:68:ab:fd:a6:24:af:
d8:a9:97:33:45:98:b3:30:a9:82:97:b9:54:8b:98:
6f:bb:70:66:09:20:9c:b6:ac:a4:b3:f8:4e:a0:9f:
ae:f5:bd:30:20:a7:b0:b6:ae:98:07:c5:62:b0:62:
22:7a:a4:06:64:9a:3a:18:7b:98:ac:68:33:72:16:
4a:7b:98:c8:a2:e1:41:be:cf:68:d9:17:31:a9:15:
4d:37:33:f6:a7:84:75:97:e7:62:00:dd:ae:5d:b2:
1f:f4:0e:fa:13:bb:fd:85:2e:6e:01:57:e3:5d:3c:
71:c3:cd:31:18:b5:44:89:52:80:e6:7c:82:73:e9:
61:99:6a:ef:88:80:62:d3:06:82:1e:ad:c1:35:c5:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:0F:35:B8:9C:50:6E:A7:D5:3A:E8:22:0B:EE:F2:DB:2D:3A:4F
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:35:7e:1e:63:59:88:4b:1a:31:9a:d2:e8:50:4e:85:7b:
b2:3b:53:db:25:81:c2:cc:e6:09:2a:94:6a:e3:9a:ff:33:ca:
71:fd:ce:51:da:99:86:ac:3d:e7:9f:79:57:08:b6:7c:16:8f:
2a:69:b3:93:fe:92:59:71:57:56:5d:ce:7f:e9:b7:c9:c2:5b:
cb:f9:4a:9c:24:df:16:b9:de:eb:ee:b5:28:27:0b:92:f3:82:
cf:66:7f:bb:d2:c6:46:f0:6c:9d:bd:2c:5f:41:37:f6:31:b6:
f7:cf:26:58:d4:ab:91:1d:c1:0a:3e:15:c6:f0:b2:a4:17:f7:
e8:fc:b4:d9:b8:d8:d9:3c:46:df:87:09:5c:f9:c3:d0:49:1c:
bf:e1:c9:f2:8d:d8:db:13:db:48:31:13:fe:67:b1:5b:3c:fc:
73:f8:35:f7:47:ca:2f:d0:c0:b4:ea:ee:20:6d:ec:c5:1b:0d:
53:09:c2:db:a1:1c:70:0a:ee:35:c5:97:7c:59:72:27:43:43:
da:77:fc:ca:53:d9:f9:93:e7:5f:f3:f6:97:ec:c5:fa:47:b1:
68:cb:51:60:3a:5c:d9:bd:45:42:62:68:44:59:e8:67:e0:e2:
9d:d4:d7:98:81:90:ef:8d:a9:7f:61:56:99:79:26:78:f7:0f:
20:f2:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:48 2025 by rpki-client