Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
File: ABPKmgrnGxDSnboMs-yrXxDfUXk.mft (raw, json)
Hash identifier: XP7jjKWeOSZelz/He4KMPUPVtj17h876hhCjWYx7LcE=
Subject key identifier: 8F:8A:E5:C5:A7:A9:00:A4:1C:97:50:04:6D:92:3F:93:AE:24:6F:D9
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 019A54BF9249882A6C3151AFD7A591341A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
Manifest number: 0DEB
Signing time: Wed 05 Nov 2025 16:00:32 +0000
Manifest this update: Wed 05 Nov 2025 16:00:32 +0000
Manifest next update: Thu 06 Nov 2025 16:00:32 +0000
Files and hashes: 1: ABPKmgrnGxDSnboMs-yrXxDfUXk.crl (hash: 9wgDxXpxgFUC3p1Izib/0vlzGgMx+deuCyuZYXvfwE8=)
2: KOmHsYTT8dHL3QRmpI2yEaWq1H0.roa (hash: lw5VEiyghZjGPBV+Cuu9js4RXnD7F0lqD5TiyyWbpk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:92:49:88:2a:6c:31:51:af:d7:a5:91:34:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: Nov 5 16:00:32 2025 GMT
Not After : Nov 6 16:00:32 2025 GMT
Subject: CN=8f8ae5c5a7a900a41c9750046d923f93ae246fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:8c:af:9e:27:6e:ec:f0:ac:be:11:4a:67:
14:5e:04:9a:e9:82:43:98:51:1a:c5:25:1f:e1:9c:
57:72:4c:81:ac:01:92:40:d3:cf:49:e3:31:1f:94:
75:18:68:b3:b3:39:4b:a8:61:a7:64:be:e1:c3:c1:
f8:6f:0b:5b:8b:d1:2c:14:b9:4b:d5:e0:a3:5c:ca:
bc:3a:f8:74:1f:db:1a:6e:63:bd:8c:98:dd:84:f0:
3b:aa:b5:d4:b3:4a:c7:d9:f3:97:97:8a:ae:86:9c:
36:c6:3c:de:df:7d:9b:75:5b:b1:d7:9f:25:a8:da:
9b:7c:34:55:4b:0f:61:ff:20:48:e5:29:07:b0:35:
cf:75:f9:64:f0:dc:a8:12:78:f6:6b:08:85:45:c8:
d8:d4:d1:cf:a8:29:16:de:5f:5e:4d:c7:41:20:54:
af:73:35:49:94:c4:5b:f5:e2:2f:1e:9f:43:85:88:
f8:50:31:f3:b2:53:13:a5:f5:6b:a1:dd:04:5c:04:
3b:6e:ad:7e:4a:53:01:f4:b7:79:ff:17:19:f3:c9:
7d:53:d0:64:d2:69:b6:7a:04:75:6b:1d:e5:e9:da:
5b:df:7f:ff:22:a1:36:ea:c9:30:4c:db:dc:64:65:
9b:fc:ad:01:ef:75:52:59:43:5b:76:98:eb:8c:8a:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:E5:C5:A7:A9:00:A4:1C:97:50:04:6D:92:3F:93:AE:24:6F:D9
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cd:e9:95:59:6f:04:b6:d6:6c:a6:a1:05:8a:83:70:3b:01:
b7:e4:83:d5:8a:2c:19:f3:1f:e4:9b:d8:1d:0b:96:bd:1f:ff:
f8:14:79:48:34:4a:c5:37:ba:21:fe:c0:00:ea:c2:ae:46:6e:
6a:28:47:21:e2:3c:6e:20:af:1a:9c:95:76:bb:ee:85:6d:26:
af:ac:aa:30:40:ae:7d:c5:5a:d8:7f:fe:8d:8f:78:ea:42:97:
3d:94:82:15:0a:ea:fe:47:dc:37:7f:1b:50:60:98:2a:28:a1:
2a:40:11:f5:fa:bd:34:8b:c3:cc:c1:87:01:c7:f8:8b:af:f9:
eb:5e:78:71:83:18:95:e4:4a:13:4d:d5:09:e9:f4:a8:bf:02:
9a:2e:d7:0a:d6:da:5e:92:75:3d:60:7c:1d:0c:33:45:1a:9d:
12:12:14:0e:86:c7:fb:73:6e:25:7f:0e:86:22:51:6b:82:dd:
f0:e4:cb:56:60:e0:be:f9:72:5c:e8:f9:44:04:32:0b:4e:53:
bc:ac:ca:0b:b6:95:c2:7e:6b:9e:f3:81:7e:5a:ee:0b:a4:cb:
7f:02:8c:f3:40:95:c1:cf:6c:b0:5e:43:60:5c:46:8e:93:fd:
6e:b7:02:1d:cf:7b:50:a2:9a:c6:0a:4b:95:92:02:bc:10:0f:
f2:1a:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:46:13 2025 by rpki-client