Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: LdELvuJQ6Or6H4g5meLNn81TAEQKLRvc7lgLRiftkFg=
Subject key identifier: F1:45:2F:50:AC:3A:E2:14:65:6F:2F:21:16:4E:6D:1F:1D:3C:F6:6A
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019A4D7402BE42DC6C9416CA884A464D1FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: M1ubyCqquAS7sKarKQuJeo087zrHX37QyGEoeh2n8AA=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:02:be:42:dc:6c:94:16:ca:88:4a:46:4d:1f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=f1452f50ac3ae214656f2f21164e6d1f1d3cf66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a5:73:c3:ee:b6:66:b7:d9:17:31:ef:d1:3f:
53:b3:5b:6c:c6:bb:36:48:45:f9:24:ce:72:58:a7:
33:e9:b0:bb:ad:7b:f8:6c:08:11:36:37:cc:77:94:
b0:6c:2e:ce:73:08:79:88:c7:dc:48:06:9e:04:e9:
a9:bd:13:d8:06:e8:1c:4a:1c:76:86:db:db:7c:01:
c5:48:a0:89:1e:84:2a:79:4c:99:a9:11:bf:1f:c2:
78:bf:6d:de:9e:70:4e:c9:4d:30:e7:06:eb:a2:00:
06:05:68:94:64:0a:51:57:a6:f2:3f:90:3c:7c:13:
62:15:6d:08:e8:bd:5b:e5:ac:bd:40:56:48:f5:4b:
21:2b:51:29:2e:15:38:d7:4b:72:c5:14:8d:a5:73:
d9:41:62:13:fc:b7:46:a7:df:5d:7b:be:5c:45:98:
a1:21:b6:a2:29:6f:e3:d4:e9:73:c4:b1:22:c5:80:
03:4c:c3:aa:31:c6:eb:79:50:3e:42:10:4f:91:0c:
93:c1:7f:7c:8f:08:6e:42:d6:ac:3d:50:a1:67:ee:
6c:f6:12:90:64:a3:82:59:de:89:63:6f:11:57:1f:
c0:a5:42:3a:e8:5c:24:b9:15:dd:cd:66:48:1a:d7:
19:db:d9:52:02:c4:fe:03:8f:ae:8e:71:cf:1a:b5:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:2F:50:AC:3A:E2:14:65:6F:2F:21:16:4E:6D:1F:1D:3C:F6:6A
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:2f:b9:c1:bd:2e:90:4b:e2:40:26:af:df:75:ea:cf:a7:
a2:31:60:90:c9:f8:a3:a9:15:68:e8:ea:70:12:5d:65:c7:3f:
cb:45:81:a4:c0:b7:0c:49:9d:47:fe:18:cf:9e:6e:9f:a9:0c:
59:43:6b:73:67:28:b8:1c:d5:f1:32:98:00:5c:7f:69:3f:e4:
42:60:a0:12:be:c9:65:1f:37:99:45:b7:be:c2:fa:6d:e2:80:
d3:90:20:b2:57:79:20:15:63:f4:5c:30:dc:0b:5b:46:bc:5d:
9f:ae:bc:31:e8:15:51:2a:67:0a:a0:a6:7d:20:73:63:66:16:
e1:3e:67:28:f6:1f:7f:84:1d:ee:ad:ec:03:45:d8:2f:d2:2c:
24:92:a4:5d:0d:11:20:3f:e9:45:9f:3f:91:d3:19:97:9d:4d:
2f:3f:79:d0:67:86:74:50:db:00:b2:b6:2a:b1:02:ec:5c:6e:
e4:b1:90:68:c0:a7:fc:e5:55:57:c3:6a:d5:12:09:bc:f1:26:
f5:28:1a:0d:f3:6f:1e:58:2f:76:50:fc:fd:fa:30:f3:c7:f6:
90:c2:60:38:00:f6:91:57:82:36:52:8e:b1:f7:b1:fe:1d:6e:
4f:0b:82:2f:4e:f6:25:06:17:b2:6b:59:ed:93:e0:69:2e:57:
d6:b8:cc:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdAK+QtxslBbKiEpGTR/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy
ZWI1ZTkwHhcNMjUxMTA0MDYwMDM5WhcNMjUxMTA1MDYwMDM5WjAzMTEwLwYDVQQD
EyhmMTQ1MmY1MGFjM2FlMjE0NjU2ZjJmMjExNjRlNmQxZjFkM2NmNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6Vzw+62ZrfZFzHv0T9Ts1tsxrs2
SEX5JM5yWKcz6bC7rXv4bAgRNjfMd5SwbC7Ocwh5iMfcSAaeBOmpvRPYBugcShx2
htvbfAHFSKCJHoQqeUyZqRG/H8J4v23ennBOyU0w5wbrogAGBWiUZApRV6byP5A8
fBNiFW0I6L1b5ay9QFZI9UshK1EpLhU410tyxRSNpXPZQWIT/LdGp99de75cRZih
IbaiKW/j1OlzxLEixYADTMOqMcbreVA+QhBPkQyTwX98jwhuQtasPVChZ+5s9hKQ
ZKOCWd6JY28RVx/ApUI66FwkuRXdzWZIGtcZ29lSAsT+A4+ujnHPGrXR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFFL1CsOuIUZW8vIRZObR8dPPZqMB8GA1UdIwQY
MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut
MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj
LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK70vucG9
LpBL4kAmr9916s+nojFgkMn4o6kVaOjqcBJdZcc/y0WBpMC3DEmdR/4Yz55un6kM
WUNrc2couBzV8TKYAFx/aT/kQmCgEr7JZR83mUW3vsL6beKA05Agsld5IBVj9Fww
3AtbRrxdn668MegVUSpnCqCmfSBzY2YW4T5nKPYff4Qd7q3sA0XYL9IsJJKkXQ0R
ID/pRZ8/kdMZl51NLz950GeGdFDbALK2KrEC7Fxu5LGQaMCn/OVVV8Nq1RIJvPEm
9SgaDfNvHlgvdlD8/fow88f2kMJgOAD2kVeCNlKOsfex/h1uTwuCL072JQYXsmtZ
7ZPgaS5X1rjMWA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:40 2025 by rpki-client