Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File: ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier: cVOq2cmYkiZ7Kv4w1jLSAHMYl8CPzppwIodnLdaHCn0=
Subject key identifier: 55:97:1D:3D:D7:1B:3B:E4:93:CA:CD:67:C2:80:D1:85:78:2D:54:91
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 0197B6A1A1B084E8D51272C2B1B08D378B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: 7IIwMS0z94edC4ZDKKyhwXZufn8G2vUdajDRe2Ailbs=)
2: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (hash: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a1:b0:84:e8:d5:12:72:c2:b1:b0:8d:37:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=55971d3dd71b3be493cacd67c280d185782d5491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:54:75:0f:67:c2:68:ac:1a:c7:82:12:3e:
5d:43:70:5d:8d:8d:5f:39:f5:2f:cc:3f:3c:61:28:
23:2c:69:00:90:88:0d:88:76:08:fb:1b:c1:c3:56:
2f:aa:04:84:19:47:2b:67:1f:c3:09:7a:3e:9d:13:
86:8b:cc:28:25:b7:5a:ca:b9:14:e9:83:80:86:af:
cf:d2:62:be:eb:0e:e0:76:d5:53:8f:85:dc:a9:8c:
de:c7:70:ca:17:6c:c8:54:84:b8:d2:e8:f3:8b:40:
c9:9c:38:0e:66:28:67:71:b1:b7:0b:0b:c3:3b:1a:
a6:f8:2e:b5:b6:36:b3:17:84:24:59:59:78:b2:01:
50:42:94:3b:94:af:e6:86:93:07:ee:37:f4:e1:5a:
b6:35:d2:29:a9:f8:38:0a:a0:b0:0b:07:e8:4d:a9:
2f:d0:86:d8:8f:71:b3:26:99:ce:4c:70:fc:fa:1d:
d9:58:f0:a5:b6:86:e1:a4:ac:c3:b6:64:1c:c8:4b:
bf:4b:6f:1b:6b:a6:b9:98:d6:ff:7c:99:db:d2:5c:
aa:03:ba:c0:e6:0e:20:07:40:99:77:c4:e0:e8:f0:
a0:9f:63:b6:5a:9a:91:a8:37:08:06:ce:a8:0d:b8:
c7:33:e4:36:a4:dc:16:da:f9:c2:1d:12:4e:ca:c4:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:1D:3D:D7:1B:3B:E4:93:CA:CD:67:C2:80:D1:85:78:2D:54:91
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:47:aa:9e:31:28:a9:d1:39:b4:c8:5a:23:12:7f:cc:e7:81:
e6:b6:ca:de:00:f3:f3:4d:a5:94:2b:9c:36:d8:97:7b:7d:2a:
9e:c4:c9:aa:92:05:e0:35:91:d6:48:55:ad:5a:19:ba:30:bf:
62:52:6a:c3:92:7d:8f:44:51:78:6c:6b:59:8b:80:8c:70:f8:
7c:54:a4:fb:38:6d:53:96:c0:9d:44:61:7e:f9:d4:c1:db:4a:
69:cc:a0:e2:39:43:b8:68:9e:d3:92:67:13:87:e4:3e:f4:53:
29:54:c2:76:95:70:97:ee:40:f3:88:60:7d:3e:76:48:18:5c:
3a:df:0a:08:e9:02:c6:d1:bb:48:c1:58:0e:92:45:17:bf:c6:
76:db:53:3f:5a:52:a9:57:73:9b:17:a2:12:79:b7:ec:0d:27:
89:fb:e0:a9:70:83:40:01:52:7c:1a:40:33:e8:ed:17:90:de:
58:fe:95:15:66:0a:af:ff:0e:82:7c:3d:fb:6a:98:94:08:8f:
e3:b2:19:a3:11:3e:0f:c5:b4:67:1d:8e:e6:dd:3e:d8:63:0f:
f6:1c:c6:fd:ba:4d:65:24:af:a7:ad:2a:5e:99:af:26:ee:7b:
6f:48:74:e3:5c:2b:42:60:85:f8:47:86:b3:85:3c:f8:3c:d2:
62:15:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:35 2025 by rpki-client