Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: ZcYlkezmvFJfRkga28wuxpoY6W30bOLEQUlT9f2BH00=
Subject key identifier: 1A:32:8B:E2:EB:CE:9C:A8:E1:71:CD:0B:77:B2:DD:87:3B:6C:C6:90
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 0198D660A482744AE896EA5EEE47BC6E1A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0D1A
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: 7Qwl3G6/fraFIngQ6D9EvRMibU1A9UZief8vSMP2YCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a4:82:74:4a:e8:96:ea:5e:ee:47:bc:6e:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=1a328be2ebce9ca8e171cd0b77b2dd873b6cc690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:0f:c7:08:23:d8:04:42:fe:2c:65:aa:08:
31:6c:0a:f3:93:d8:80:3b:d9:f9:c3:93:b2:66:ec:
65:6f:a9:97:d2:4a:2f:da:ec:38:a4:23:26:f5:11:
2e:f2:9b:c0:80:35:f0:fb:ec:1c:d8:ca:45:a9:59:
db:24:39:0e:c3:7f:36:0a:3a:30:f5:ea:0e:b3:96:
ed:e9:df:0a:4d:f4:13:d6:f8:22:7e:78:13:30:c8:
8b:2b:8a:7a:c5:4e:8b:84:32:f3:da:74:07:ff:33:
55:a1:f7:f6:7c:b3:a0:e7:72:f8:00:61:d6:bb:37:
10:09:71:da:db:3a:46:9c:b5:07:0a:06:e5:e2:f0:
98:fd:12:13:7e:12:c4:79:bb:5d:a8:6b:8f:6f:31:
73:a5:e8:66:e1:93:2f:4b:2e:bc:7e:ff:43:e0:4c:
c3:9f:db:bd:58:77:bd:f0:6a:47:cf:5a:ac:1c:ba:
e5:1f:7a:65:29:06:81:46:dc:13:a1:d8:0c:5a:ad:
39:68:5b:08:14:0f:c5:54:be:dc:33:85:f9:77:57:
62:2c:2b:f4:4b:b0:82:cd:e3:e4:57:3f:30:43:ac:
ce:24:bd:e9:99:d5:3a:ac:a5:7b:77:80:2a:89:b4:
75:be:af:bd:01:c9:23:0a:b8:ad:76:47:16:ed:34:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:32:8B:E2:EB:CE:9C:A8:E1:71:CD:0B:77:B2:DD:87:3B:6C:C6:90
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:df:5c:b2:41:82:d7:41:c1:ea:22:2e:bd:dd:68:ee:99:
52:f5:f5:dd:3d:74:3e:4a:c6:25:32:07:1e:79:c4:ff:21:b4:
2a:b8:91:aa:b9:59:4f:1e:87:89:77:34:eb:f3:ae:22:1a:d4:
a0:cf:40:9f:96:63:26:45:06:c2:1b:4c:6a:b8:fb:e4:5b:e5:
f1:9b:b8:af:8d:cd:9e:5b:7a:7e:29:6c:62:5d:87:2d:c0:ad:
d4:57:7a:25:43:0a:58:4c:8f:40:3f:57:88:50:4b:f2:71:52:
ca:4f:e7:24:29:e5:f6:95:08:12:63:ea:de:a3:78:08:60:6c:
05:fe:72:44:5a:a8:bd:59:bf:0f:33:5a:a5:35:4b:98:ba:08:
9c:3b:15:49:92:2e:87:04:6b:e3:58:cd:76:8d:46:91:bf:0e:
98:0e:5f:4a:d2:37:10:45:56:2f:24:c0:4a:e1:2a:55:d0:8e:
f8:c5:85:fe:ba:73:7f:cd:b7:41:56:5c:f6:50:91:88:91:68:
5f:e5:dd:d4:88:43:0b:87:60:21:2c:74:6b:33:91:a4:27:fe:
d0:e2:6e:82:c6:6c:3a:6d:55:81:f8:15:02:06:54:32:eb:90:
3e:6b:7e:41:ef:ad:c2:0e:09:bf:dc:50:5e:92:38:70:12:27:
83:90:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:11 2025 by rpki-client