Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: DG4eAiSHAReItFeVOr/Uzo8pw7slD8lkOV27Nk6ktCQ=
Subject key identifier: 7F:C9:27:D3:DE:4F:C5:A6:55:D6:C5:AA:BE:36:F0:C0:2D:6B:AE:EE
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 019A522C55931FC3E435DB39745A364945BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:00:28 +0000
Manifest this update: Wed 05 Nov 2025 04:00:28 +0000
Manifest next update: Thu 06 Nov 2025 04:00:28 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: wVXSOq8JsUpXiIwhjbqy9m37F3U+mWqDpZsCgEmDzR8=)
2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:55:93:1f:c3:e4:35:db:39:74:5a:36:49:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Nov 5 04:00:28 2025 GMT
Not After : Nov 6 04:00:28 2025 GMT
Subject: CN=7fc927d3de4fc5a655d6c5aabe36f0c02d6baeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:61:1c:ad:96:d5:1f:b2:07:04:39:ff:b4:
69:f4:fa:db:7d:9a:b3:29:52:3d:fe:be:3c:7e:8a:
1b:9d:20:b9:e0:ee:e0:c4:6c:a1:38:66:11:6c:3f:
a0:a4:c9:c0:da:6c:02:cc:76:a8:c9:bf:a7:fd:45:
e1:d2:c6:cd:f0:09:e8:93:51:9b:3a:87:03:08:0b:
bc:61:8d:39:82:5c:cf:e3:1a:bb:06:55:a0:31:64:
cc:6e:04:93:6a:0d:73:71:98:01:96:6a:c7:5f:8c:
b6:41:37:80:bc:5d:2a:ab:1c:e5:1a:62:90:23:ac:
5f:0f:34:8f:8b:c6:d2:8a:2b:f7:69:67:12:8d:ab:
89:60:13:83:e8:5f:5f:2e:ce:f7:b0:31:97:cf:d9:
b7:34:7d:cb:8d:ce:c8:e4:74:48:e5:b0:4c:a6:4e:
5b:e0:5a:a6:fa:2b:15:3f:b1:0e:8d:b8:ea:f5:d7:
c3:60:c6:08:6f:15:e5:85:7a:b6:79:98:e0:1d:d0:
9e:b5:b3:23:5a:66:67:49:6f:34:8e:02:e2:19:06:
a8:e4:6f:fe:50:34:c7:9c:65:73:62:fd:a1:31:5e:
51:42:e9:4a:fa:16:44:1a:29:49:1a:d2:fd:70:db:
61:74:e9:74:97:9a:4b:bc:8e:11:03:00:64:69:ec:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:27:D3:DE:4F:C5:A6:55:D6:C5:AA:BE:36:F0:C0:2D:6B:AE:EE
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:3b:e5:07:d4:0d:6a:f3:89:cf:0a:fc:8d:38:8f:aa:79:
9b:b4:c4:73:73:fb:07:98:20:c3:d4:d7:eb:6c:cf:a3:e3:a2:
7f:ae:94:b3:39:f6:3d:f3:2e:50:a5:90:50:9d:61:70:2e:55:
d9:04:4a:40:b1:31:68:83:25:e0:09:71:d4:73:74:7c:d6:bd:
7b:af:46:7b:13:78:2d:4f:0a:07:b9:5e:36:61:fe:f8:5b:cb:
31:75:05:a2:7b:a0:1e:c2:c7:8e:49:22:7a:3c:77:e9:f6:e5:
6b:f6:d5:cf:6c:5e:05:85:1b:c6:af:22:8b:da:00:a5:a0:cc:
db:db:16:13:bf:02:a4:dc:b1:0a:3a:3c:b3:82:62:c4:90:85:
7d:d4:e4:44:8e:2a:53:11:29:fb:ce:fe:0d:02:37:8e:17:40:
43:99:f3:da:15:73:7b:f2:dd:c8:da:7f:66:71:66:f9:5b:fb:
0f:3f:17:90:f2:5c:55:eb:f3:d8:86:71:09:5a:d9:82:d2:82:
e2:bf:e9:77:13:77:13:2b:ec:dc:2a:ef:9c:c5:66:19:00:72:
3d:b7:1d:60:60:ca:6a:ca:4a:8a:c6:3e:be:c3:90:39:1d:72:
75:c5:9f:d9:39:2e:76:4a:92:7a:6e:72:be:23:ed:a5:71:e6:
3c:27:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:57 2025 by rpki-client