Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: VrEiMh6/y9olSvk5c3srKGvAG6mwrJdW9m4a04MX4kg=
Subject key identifier: BD:F5:FB:DD:24:07:12:D2:A2:4B:B0:A6:C5:68:4C:21:01:48:28:B0
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 0198733DAABA3CB665813FB38F67AAA0487D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 04:01:17 +0000
Manifest this update: Mon 04 Aug 2025 04:01:17 +0000
Manifest next update: Tue 05 Aug 2025 04:01:17 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: mCXr0Kum7QuMGDdTi5aCQ3qeKNVOHZQJmO0Lq5FfJTg=)
2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:aa:ba:3c:b6:65:81:3f:b3:8f:67:aa:a0:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Aug 4 04:01:17 2025 GMT
Not After : Aug 5 04:01:17 2025 GMT
Subject: CN=bdf5fbdd240712d2a24bb0a6c5684c21014828b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:28:98:39:76:13:04:5e:8b:b8:c6:1e:8b:
ac:9e:ea:c9:9c:8a:3b:12:54:7a:88:9f:39:fa:85:
59:e8:15:ae:fb:c0:83:1c:1f:b1:7c:ce:be:d3:0c:
d3:a7:f1:7c:54:f6:36:16:56:5a:4e:95:1c:c6:cd:
e5:61:6e:8d:86:da:16:4f:b5:70:68:77:34:4c:3a:
36:5f:1c:5e:64:78:a3:8c:2f:19:5a:c3:83:6d:fc:
a7:08:c0:e5:07:72:d7:88:4d:06:8b:e8:af:c3:25:
16:e7:03:5f:12:3f:b2:4f:34:88:8d:64:c2:4f:6b:
10:3f:57:7a:01:91:6e:26:8c:f9:70:a3:5a:e5:ce:
ba:69:ff:0f:ad:8d:72:00:05:a2:00:1c:a6:cf:5c:
f4:7a:f0:be:ef:08:64:18:38:9f:f4:d7:82:c7:9d:
17:eb:5b:47:35:4f:2d:2c:74:ae:09:cb:08:77:00:
92:a7:ac:b4:a9:eb:8a:32:e0:40:49:60:4a:ca:3f:
65:8e:5e:ef:fc:34:26:b8:1e:7d:b0:e7:33:8a:ce:
80:f5:16:38:aa:9c:b7:71:19:fe:d8:48:4f:c0:e0:
18:7e:c1:c9:6f:dd:db:03:da:0a:24:34:95:64:f1:
97:ec:53:cd:3c:aa:e5:e6:c4:59:ba:ea:b2:01:6c:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:FB:DD:24:07:12:D2:A2:4B:B0:A6:C5:68:4C:21:01:48:28:B0
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:89:68:c6:1d:c4:7b:75:46:a6:da:9e:8f:ff:c0:cc:13:4c:
98:78:0e:b1:40:d4:a8:24:7b:e3:bf:3f:a1:84:0a:55:39:ab:
83:37:81:0e:88:6f:09:be:cd:05:15:c9:f2:cc:8a:1d:7b:e8:
1f:67:31:5e:ad:7f:03:0b:a7:df:95:ff:3b:4d:a8:c3:21:df:
1b:bb:64:9d:bc:8f:c7:0c:f8:7d:47:94:62:2a:d5:e1:26:4e:
d9:52:6f:09:4d:62:5c:cc:41:8e:12:b5:54:c5:15:c5:5c:e3:
d9:4f:c8:11:b5:0e:c6:ac:6d:59:5c:4f:2d:20:dc:6a:0b:84:
54:06:82:86:10:49:ca:9b:ed:b4:d9:29:b4:10:c5:6b:e8:85:
29:54:ca:a9:35:67:10:c3:1b:cc:7c:8b:2d:f4:92:54:26:38:
60:8e:68:0c:3c:39:92:e4:15:be:47:04:19:dc:02:85:e8:e0:
ac:c9:ca:7f:06:e3:57:47:16:8f:19:62:3f:c9:0c:04:3a:7b:
6e:4b:87:8a:da:ac:a6:1d:11:03:12:10:23:be:4b:ba:0a:13:
f1:30:44:7e:a1:38:26:24:33:d8:a5:ab:c3:46:20:31:e7:01:
66:f1:67:84:f2:05:df:34:dc:70:c8:ff:ab:07:62:7b:46:c0:
1b:1d:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:17 2025 by rpki-client