Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: Kj8d+dLXMrG6Sw6TgDKH0r3knSv79teWEDbYIUu7kkU=
Subject key identifier: DF:96:59:44:C9:63:97:17:FC:81:11:2D:99:E5:82:97:44:D6:5B:36
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 01989F3AB54ED015C7862D284B6B83AE5340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 03F9
Signing time: Tue 12 Aug 2025 17:01:21 +0000
Manifest this update: Tue 12 Aug 2025 17:01:21 +0000
Manifest next update: Wed 13 Aug 2025 17:01:21 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: 6QJOs4BHzsgMaO8DaBrbOzjXSMd5Op3ZDak+r3TIbBw=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:b5:4e:d0:15:c7:86:2d:28:4b:6b:83:ae:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Aug 12 17:01:21 2025 GMT
Not After : Aug 13 17:01:21 2025 GMT
Subject: CN=df965944c9639717fc81112d99e5829744d65b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:08:b5:3f:f7:17:71:86:b9:f9:6c:85:98:
eb:d9:61:44:8e:1f:ab:0c:56:61:18:fe:dd:fd:85:
fd:e0:f8:ff:7e:d8:d5:2e:5e:a3:69:4c:ea:18:0a:
90:5e:be:99:d5:55:d9:5a:99:53:b8:bb:08:45:b2:
51:51:b2:64:bf:d7:bd:83:48:5f:b3:40:2d:9f:1a:
b0:8d:4f:ed:5e:82:77:0b:cf:c7:e4:bd:10:b1:a8:
8a:f4:95:58:f2:52:b5:32:b7:94:e9:6e:93:af:33:
e2:0f:c6:cd:16:65:99:48:7b:91:f3:32:d6:04:e3:
4c:f6:aa:34:31:2c:27:47:28:5c:e4:af:c2:97:61:
c0:19:31:81:64:07:8d:0e:d6:cb:d6:8d:58:21:6a:
9f:b6:df:55:ba:03:d0:b3:89:98:95:2b:ca:29:1f:
63:ab:61:a1:04:ed:fc:05:f1:7d:50:84:06:cc:ce:
40:7c:f0:99:4d:84:c2:a0:df:fd:0a:0e:71:a1:d9:
22:5b:55:cb:7f:74:b5:41:64:f4:fe:af:38:12:15:
98:42:76:49:7a:7c:38:9e:37:cf:6f:81:56:f4:89:
92:2d:0e:a6:04:d7:68:1d:41:70:87:7a:ba:cd:4b:
84:44:1b:7e:18:53:d2:29:0e:20:be:12:21:b4:81:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:96:59:44:C9:63:97:17:FC:81:11:2D:99:E5:82:97:44:D6:5B:36
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d5:07:cd:32:9d:68:9d:92:b6:88:15:fc:1b:ce:be:3a:01:
68:06:4e:af:46:be:7f:23:e2:2a:43:2c:cb:8a:20:da:18:d6:
e5:ce:40:1d:44:5e:6e:e2:27:ef:9d:a0:0f:09:41:24:cb:76:
e2:f2:b6:75:da:40:b5:95:54:25:7d:b1:5b:cc:91:65:7d:78:
cf:3d:6c:ac:6a:2c:01:01:28:75:67:11:72:76:95:0f:39:35:
66:f0:21:c0:c6:c2:07:4f:3f:39:95:18:49:22:30:ec:91:e1:
01:d5:00:27:6d:04:37:8d:0e:3f:f0:38:e2:1d:79:15:e1:d8:
7a:54:0a:75:8c:08:92:f2:3d:47:be:33:6c:36:b5:65:26:43:
3c:e8:7a:ad:96:40:ec:5c:dd:1d:06:5e:61:84:a2:b8:0d:61:
57:30:ab:17:59:55:30:a2:b1:a1:f3:38:dd:29:d9:5f:4d:4c:
eb:6d:c6:67:1c:f6:13:f2:7c:8c:55:23:00:f9:41:94:18:f8:
18:85:d1:96:24:9a:23:62:06:bc:a1:fc:16:1d:54:4b:9f:ff:
5c:d3:a0:6f:ea:af:56:8b:d8:df:f6:3f:8a:33:6c:4d:03:eb:
7f:5b:98:95:a8:46:2f:c8:77:b9:22:4c:73:b1:54:1e:ff:f5:
83:f7:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:54 2025 by rpki-client