Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: AXlEvFnWEuuVUPTVsUKKCzbn1pA5WdKjui1jiaxvmhs=
Subject key identifier: 2E:FA:06:3F:84:DB:A7:3A:74:F2:AD:B5:8D:D2:45:DE:3C:E3:93:D6
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019A5307F83679B47F82DB3D37C0E63F1867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:22 +0000
Manifest this update: Wed 05 Nov 2025 08:00:22 +0000
Manifest next update: Thu 06 Nov 2025 08:00:22 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: c7v0sI2MsA4GJqWWe2gXjQ2HsaMmT/RCGmkRJmk83wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:f8:36:79:b4:7f:82:db:3d:37:c0:e6:3f:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Nov 5 08:00:22 2025 GMT
Not After : Nov 6 08:00:22 2025 GMT
Subject: CN=2efa063f84dba73a74f2adb58dd245de3ce393d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:c0:3c:b0:8d:cd:53:81:bc:ba:8e:b4:91:
b5:15:a2:19:c0:33:04:b8:e6:62:97:06:2e:46:09:
fb:dc:36:6f:a9:d7:ae:36:b6:f8:7e:2c:76:45:d0:
b3:b8:5a:e2:15:c9:58:c5:19:cb:77:ad:41:6d:22:
fa:b6:0f:ef:22:97:0b:e1:58:66:41:a7:16:ca:ac:
86:b4:a3:ae:ce:71:04:70:14:b8:54:85:d4:84:35:
fe:c7:90:4d:07:78:06:6c:74:6c:01:ab:71:0e:8c:
3c:b6:87:39:4f:5c:54:85:c1:7a:4a:89:75:27:79:
67:a4:78:85:75:9b:b2:c2:de:a3:45:5f:99:2c:1f:
4b:7b:88:5c:94:e3:f9:82:c7:cc:33:7a:97:5b:c3:
20:9d:cb:6a:61:d1:75:62:a9:5e:e4:53:fc:52:8d:
ba:8d:50:3e:b5:39:8c:c0:8f:17:75:38:d8:db:8d:
3e:39:8b:e2:72:f8:0d:fe:91:8b:de:d9:2d:00:bb:
4c:f2:fd:6b:72:d0:4e:71:48:bc:e5:88:dc:d5:69:
c3:23:dc:56:96:3c:f0:3e:fb:75:93:d6:3b:12:18:
e9:ae:dd:67:b3:f0:06:4c:9d:94:5f:65:b2:ae:c2:
aa:bb:16:60:1a:85:f6:3b:41:d6:a1:38:da:dc:c1:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:06:3F:84:DB:A7:3A:74:F2:AD:B5:8D:D2:45:DE:3C:E3:93:D6
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:d9:b6:03:35:18:b8:37:03:35:c6:5d:57:fe:17:c7:f4:
64:93:b3:b9:3f:19:84:b5:64:42:ab:72:0f:b0:c5:d2:5b:54:
dc:19:c8:fe:82:dc:09:08:40:42:7c:b2:17:f3:61:3a:84:21:
8b:79:b5:f6:e1:20:d1:99:25:8f:da:8a:30:2b:87:97:50:14:
72:f4:49:a6:93:34:c8:ba:f9:62:bd:d1:48:40:32:16:b4:f5:
62:ea:8e:f1:43:ee:c1:13:1c:0c:f7:fd:a3:03:65:36:fc:74:
6c:ee:18:15:62:85:e0:60:99:d5:b4:58:58:1f:43:c6:e8:28:
83:25:f5:9a:29:59:55:82:f7:be:26:fd:54:99:ed:c7:a4:dc:
6a:df:10:75:c4:27:a4:d7:fb:2f:3c:23:89:af:92:57:1d:b8:
0e:04:bd:3a:37:76:ff:f2:9b:d7:b7:77:31:0e:7d:a2:a4:e4:
83:74:31:ea:e1:cd:2b:a1:3b:53:63:38:df:b1:78:1b:9d:74:
fd:1f:d0:6e:81:22:e6:88:dd:9d:6c:79:5a:b5:2b:47:4d:2d:
51:50:6e:65:5c:21:03:20:88:b8:09:e7:52:1a:81:40:e9:41:
5a:22:81:68:e2:55:c0:0c:94:78:66:11:d8:79:7e:52:83:ab:
45:31:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:57 2025 by rpki-client