Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: yq9ZMmK53Bce6MnKDHQVqscvOyDEPFgIpdMoqPpGMmM=
Subject key identifier: C7:E8:31:56:A8:48:C7:2C:50:A6:3A:6B:21:3B:98:65:6D:0D:F9:3F
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 019A559B33B2E93C6F46C5D9EF5326B90F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 04DC
Signing time: Wed 05 Nov 2025 20:00:25 +0000
Manifest this update: Wed 05 Nov 2025 20:00:25 +0000
Manifest next update: Thu 06 Nov 2025 20:00:25 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: tMbrdH7bTR+r5oySfMt6/SKwA9DYVsRTb7XKfxOvZEg=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:33:b2:e9:3c:6f:46:c5:d9:ef:53:26:b9:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Nov 5 20:00:25 2025 GMT
Not After : Nov 6 20:00:25 2025 GMT
Subject: CN=c7e83156a848c72c50a63a6b213b98656d0df93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:23:8b:62:0f:9f:3b:62:67:5a:db:43:25:
e4:55:61:02:e6:f1:db:2e:2b:7c:cb:c5:8b:e1:4e:
33:59:e8:29:4e:51:98:4e:57:50:72:fc:6f:de:f5:
4a:81:c0:99:21:ed:25:63:6c:5b:06:f1:f5:06:25:
d8:19:9a:20:2f:a6:90:c2:fe:81:73:78:5f:24:c3:
51:c7:f6:5c:88:35:fe:31:37:90:c6:fd:17:68:93:
f1:a5:5f:2e:07:0f:14:28:40:26:05:62:8c:f9:7c:
28:4d:fe:f8:fa:53:cd:6d:50:d9:b0:69:cb:5b:97:
ba:c7:d8:32:e5:f7:eb:3f:f0:0e:f7:ce:d8:ed:86:
1a:78:b7:17:0a:d0:4f:73:e9:b4:f5:5c:a4:fd:5a:
a3:41:12:96:81:99:8b:97:27:dd:d5:31:d2:26:79:
d3:d2:e8:5e:a9:8f:cb:8b:af:81:ac:b6:df:59:23:
f6:1f:85:fc:03:db:42:05:81:e7:24:20:75:30:5a:
51:2d:59:47:4f:b6:55:ed:a7:a7:d3:3e:d0:d5:02:
f5:3d:bf:74:6b:b6:2f:2d:c2:56:c1:d2:b0:f8:4a:
66:6f:e6:35:09:e3:1f:9f:77:a6:b6:35:61:ec:3a:
66:10:63:7c:29:e4:2a:33:01:35:78:f1:11:2c:f0:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E8:31:56:A8:48:C7:2C:50:A6:3A:6B:21:3B:98:65:6D:0D:F9:3F
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d2:f0:c1:79:a7:01:bb:04:c5:2e:91:1c:34:37:70:a3:4e:
39:b1:dd:13:f1:91:30:7c:05:f8:53:c0:9d:5c:ad:72:8a:1a:
e9:d9:18:60:69:6e:98:fd:a8:2b:6c:d3:e6:f2:46:11:c9:34:
8a:e0:50:97:38:ff:42:b7:68:35:55:0b:11:51:14:97:9c:c8:
a6:c0:10:e7:6b:5f:1a:fc:4c:cd:f6:16:48:72:c9:7a:02:66:
56:e6:04:17:d5:94:ae:69:60:4b:af:e3:61:4a:6d:8b:54:3c:
d1:bf:91:ef:2d:84:c7:8f:8b:53:db:bc:83:53:7c:68:16:88:
e7:b3:85:ad:e4:f3:16:cf:4c:cb:d9:b9:22:c1:75:a6:0f:b4:
74:c1:1f:45:41:51:cb:ba:d2:0e:5d:1e:aa:6e:4b:b6:4a:5a:
96:b8:75:a4:a8:f7:25:99:04:26:70:1e:a1:ec:e7:08:8e:56:
bd:a0:17:5a:1e:98:5b:e9:45:91:ed:7e:42:c6:49:2e:ab:bf:
77:e7:e1:0d:c2:f7:f7:91:6e:aa:4b:42:f2:90:41:0e:59:f9:
5e:3d:5c:8c:fe:74:20:f8:55:40:45:81:0f:98:b2:b6:c5:15:
65:73:07:12:fe:60:7e:d9:e4:fe:ab:8d:59:fe:8a:de:2f:8a:
eb:b7:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:12 2025 by rpki-client