Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: 5YYQULxaASgb5USVOQTNYeVzkOetsGpATp/7tm0FjdM=
Subject key identifier: 5A:AE:D1:5F:B8:7F:EC:4A:4B:D7:DC:F5:8F:87:31:32:94:98:72:8A
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 0198D884756476620361D03832074D17A208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0A86
Signing time: Sat 23 Aug 2025 20:00:15 +0000
Manifest this update: Sat 23 Aug 2025 20:00:15 +0000
Manifest next update: Sun 24 Aug 2025 20:00:15 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: GGHEmYFTPZ2JwUGagOcevACtKF40Lf5UwiISky9WHi0=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:75:64:76:62:03:61:d0:38:32:07:4d:17:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Aug 23 20:00:15 2025 GMT
Not After : Aug 24 20:00:15 2025 GMT
Subject: CN=5aaed15fb87fec4a4bd7dcf58f8731329498728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:fd:e9:e1:97:04:34:a4:f2:fc:ae:1e:a1:
3b:8e:4a:c9:b9:27:99:9e:90:73:d6:9c:df:4c:87:
ea:9a:e6:87:10:43:99:bf:f4:e8:2b:56:de:9b:ff:
03:1c:39:83:d6:4d:22:65:00:42:e7:f0:ff:c6:27:
d6:d3:90:a2:97:b2:4f:3a:b9:e7:d0:21:84:64:18:
6d:44:08:26:be:3a:7a:17:a0:d3:f7:a5:9a:93:22:
d8:7e:11:bc:a0:8d:7e:88:cf:c1:ed:58:7c:2e:b8:
24:91:29:be:11:62:ba:e7:f6:9b:5f:40:dd:e9:31:
ac:f3:ff:e6:8a:90:a9:20:3a:22:95:9d:d2:02:c9:
18:5a:b3:09:d6:ff:e4:16:30:44:7e:ba:e2:09:64:
3d:8f:e0:32:5c:eb:d2:9a:d0:09:0b:62:66:08:94:
60:90:0d:c6:25:44:27:ce:a8:18:3e:fa:01:66:15:
96:49:81:18:0e:8c:3c:92:63:da:c4:cd:c0:49:9c:
db:af:b0:ac:3f:50:e2:58:2d:d0:e4:47:14:78:47:
b3:fc:ae:4f:fa:da:ec:09:48:fc:ef:44:ff:3d:26:
6c:23:0f:f1:38:a4:92:9b:2d:b4:84:0d:f9:c5:2f:
8c:fe:fd:12:d4:b5:b4:95:85:3d:95:a0:d2:92:29:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:D1:5F:B8:7F:EC:4A:4B:D7:DC:F5:8F:87:31:32:94:98:72:8A
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:8d:9b:e8:43:4b:96:a6:19:a4:d0:10:9b:2d:bc:ae:8a:
eb:35:16:19:6f:4f:e4:2d:38:0d:65:48:c0:c3:c4:3d:14:1f:
bf:3d:b6:b3:88:7a:90:ba:9d:04:64:76:1d:72:09:e2:00:1d:
e1:dd:17:8c:f9:79:4e:40:31:48:0a:f1:b3:81:14:f0:54:05:
f7:f1:d8:70:de:7e:82:f2:0b:3b:5f:07:d5:c7:a6:94:0f:3a:
12:33:ae:29:ce:62:ad:d7:4c:91:25:ba:e6:ac:05:49:1e:e8:
64:52:67:3c:d3:df:a6:97:00:2c:b0:de:13:42:df:a9:73:3c:
7d:99:e5:88:62:83:e1:ab:1f:e3:de:cd:13:0e:1f:b5:fb:ae:
ec:41:1f:5a:1d:75:60:b3:e2:a1:79:ef:9d:f3:9e:52:cc:24:
75:59:4c:76:05:b0:f3:56:1f:e3:68:90:ca:ff:38:6b:40:65:
37:ed:61:f6:7d:d2:c6:b8:84:f4:8b:66:09:43:46:72:54:e7:
0e:b1:6e:a5:90:41:2e:d6:00:c9:6f:7e:b0:01:cf:eb:ec:6c:
73:07:f5:31:49:be:c4:4f:d7:05:85:25:cd:92:3a:57:60:e5:
8c:b2:6c:9a:fe:cd:ba:5f:27:dd:ed:eb:68:3f:84:b1:e2:2a:
72:ef:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:16 2025 by rpki-client