Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: j8YTiMKg8uomrd27hDjbfNruWUTf0VK9FQvEhjoJ46M=
Subject key identifier: F5:DC:E9:92:30:31:F4:3B:DC:8A:C2:8E:B1:83:32:8A:35:5C:19:91
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 0199FC219C4A0BF7EBCEDC0D2B19335737EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0B1D
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: IHMGrp6e9o6gViaSm50Gj4Hm4JPiaolaqba8v07RCY8=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9c:4a:0b:f7:eb:ce:dc:0d:2b:19:33:57:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=f5dce9923031f43bdc8ac28eb183328a355c1991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:13:17:69:e5:43:5c:e0:28:4e:5c:d2:17:05:
4e:6e:34:01:ec:a2:62:87:62:97:69:94:5c:6f:e2:
50:8e:7c:eb:b8:c6:fc:7c:e6:42:16:1d:b5:e1:d5:
2e:b3:98:b6:0e:3b:e3:98:de:10:6f:9d:b4:af:d6:
43:68:50:44:b7:ea:4b:dc:25:67:e5:ec:29:5f:5a:
91:4f:c2:d5:0e:20:19:9f:ff:bc:8b:d4:78:f3:6f:
b1:54:1c:3b:b3:92:09:cc:f6:33:73:5a:be:79:f2:
b8:07:ee:6c:22:9e:44:60:a7:db:68:bc:f0:b0:8f:
7f:6a:82:76:f5:19:ed:e0:c3:40:db:8f:06:bd:3f:
a4:96:30:86:cc:ab:b6:5c:fb:c3:b7:e2:70:54:b5:
b1:42:b2:3c:7f:5b:20:2e:a1:88:be:f9:ef:f9:05:
25:8e:04:93:0a:a3:af:a9:8c:1c:40:77:c9:f3:9a:
0f:7f:54:d9:e9:0f:61:17:8d:7d:f2:99:b8:10:87:
2a:c3:af:70:e3:eb:57:f4:05:18:01:74:8f:64:c6:
13:02:f6:e5:fe:ed:31:d0:36:70:60:70:90:fb:d7:
b8:41:b5:9f:e4:b0:74:cf:c0:77:83:26:19:32:0f:
c6:b8:38:32:74:31:89:eb:36:6b:32:1a:ec:68:5f:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:E9:92:30:31:F4:3B:DC:8A:C2:8E:B1:83:32:8A:35:5C:19:91
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:99:88:cf:33:31:ed:d2:17:9d:20:4d:02:82:89:ea:cd:bc:
02:4d:2b:59:bb:3f:7f:fc:9c:0b:c6:49:ed:2c:d3:2b:83:5f:
72:1c:0e:d1:7c:90:c4:cb:1e:62:37:9b:02:44:5c:0f:42:ec:
c3:8c:4e:21:fc:00:2d:4a:51:be:a3:d4:51:23:09:bb:01:77:
66:24:61:67:4b:ed:08:04:9c:0f:8b:8e:4b:22:c9:36:f0:c9:
fb:f7:f5:45:48:6d:64:2d:4b:d1:46:00:a5:b9:9d:42:3a:d1:
d8:89:c5:cb:31:dc:3e:09:5e:25:fa:af:15:36:bc:00:02:11:
04:34:ad:44:90:a8:0f:6d:82:19:96:3c:5c:8e:85:fe:4e:ae:
3f:07:34:de:99:bb:92:60:ea:c1:a4:00:10:f9:7f:94:f8:8d:
5b:01:05:3c:0c:4a:cd:70:2a:66:4c:f2:5c:d3:bf:d2:80:c5:
de:16:2e:5c:d7:74:46:18:b9:aa:49:00:3c:fe:4c:a2:5f:ca:
22:ff:e4:7f:96:26:f6:89:c5:cd:71:b7:bc:17:62:5d:6f:f1:
fa:a7:56:d8:3b:dd:de:5c:6f:da:c5:49:ed:65:aa:f6:c0:ab:
b7:62:ba:e4:87:6c:83:71:a0:55:9f:14:8f:62:ad:13:1c:05:
ba:0e:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:50 2025 by rpki-client