Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier: OYKcMzxyWSboJBCLyg8ksUpt53qeS3OMZri6I961ocA=
Subject key identifier: 0E:A5:1B:4B:7A:78:42:BB:37:FF:F8:0D:A6:3B:0E:A4:44:66:4E:AB
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial: 0198D65F63DA04EAD91E77E78279BF840B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: hFiu2sfPWQmVqdX6wAipLCAQrAicRvb/1FQF6NvwyZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:63:da:04:ea:d9:1e:77:e7:82:79:bf:84:0b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=0ea51b4b7a7842bb37fff80da63b0ea444664eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:d6:85:16:5e:2c:71:39:a2:f9:eb:59:8d:
07:90:e1:1b:93:b9:25:28:84:62:d5:f8:5a:85:b4:
d5:83:66:75:6b:b4:b3:ed:38:23:4d:bf:33:6d:10:
62:01:db:ce:6a:5f:1b:96:01:53:97:6d:7f:4a:c7:
63:3b:f6:fa:f5:d8:9d:b8:bb:35:40:1b:c1:71:c8:
39:37:ac:d3:f0:fd:08:2c:09:b6:f4:b4:17:38:e4:
9a:58:46:f3:02:51:c6:81:42:9b:8c:fb:a6:3e:f0:
ab:88:e3:52:bd:d3:fc:61:cd:a7:86:d1:5a:eb:23:
7f:33:da:27:d3:30:4e:a5:5a:ef:ef:5b:97:9f:30:
2e:ee:8f:1d:24:1d:c7:84:eb:ee:30:57:39:76:7a:
e4:d3:56:a6:e8:79:e9:21:8b:90:44:d4:fe:64:08:
4c:5e:df:3d:a1:fe:f4:2e:19:20:f5:09:29:db:b4:
ca:4e:74:14:41:e0:15:97:b8:e7:35:b7:5c:d2:01:
72:80:b5:5b:9b:c6:b1:03:c9:e7:31:e0:7a:33:75:
23:80:ff:6f:70:90:77:e7:35:45:e8:90:8f:a7:60:
bf:80:54:6c:13:75:5e:91:ff:41:e0:ee:97:ca:1c:
f0:c4:8b:80:ad:c3:46:79:f4:eb:d8:97:35:e6:9d:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:1B:4B:7A:78:42:BB:37:FF:F8:0D:A6:3B:0E:A4:44:66:4E:AB
X509v3 Authority Key Identifier:
keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:95:1d:5e:ac:e1:4f:b0:5e:81:54:25:df:a1:f8:67:b8:66:
c7:a6:0f:08:dd:86:b7:78:8a:da:24:58:8f:c1:40:d9:e3:59:
15:97:c2:94:a6:bd:58:b0:2c:97:2e:e8:fc:6d:39:b7:bc:42:
ee:83:c9:3e:19:cc:9a:cd:28:50:d4:93:30:9f:53:ac:2a:96:
b1:41:2c:ca:e3:dd:fa:4e:4c:d9:e7:95:38:15:23:0c:92:59:
70:f6:86:9c:46:c3:43:6e:03:4d:4c:57:de:2b:8c:6f:22:42:
a1:8d:2b:a5:62:e1:82:b6:d3:79:66:89:85:c7:ef:78:1b:6b:
42:0f:b3:e4:7e:58:f9:88:53:dc:12:38:40:4c:ba:26:1f:1c:
c6:20:89:4b:37:24:fe:e8:08:92:08:82:da:70:1f:a2:6f:4b:
d8:31:fb:80:0a:d5:dd:74:6e:e4:31:c2:91:ef:89:26:13:8f:
93:ad:5e:02:6a:e8:84:01:87:0e:aa:bc:81:7d:b5:0b:48:8b:
76:45:d9:c7:a8:71:5a:65:a1:5c:58:1e:73:7b:3f:49:1e:3b:
54:9e:37:8e:fa:44:1d:ae:ed:f1:58:b3:4a:4b:02:3c:67:3f:
b3:34:0a:c5:ee:c3:ed:97:69:57:97:07:79:9f:ac:81:97:52:
75:65:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:17 2025 by rpki-client