Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: GBDiSqzCuqjUBbDJlgzp4Pfp51IAXSGsQkXK5w655ns=
Subject key identifier: 3F:11:F8:3C:A9:23:43:68:15:23:C4:62:53:F0:C7:28:E9:1E:9A:EC
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019769CF2A9A2F94580381FEC2CBA41A5922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 1521
Signing time: Fri 13 Jun 2025 15:01:13 +0000
Manifest this update: Fri 13 Jun 2025 15:01:13 +0000
Manifest next update: Sat 14 Jun 2025 15:01:13 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: gC+KrqH3byMySYVVM0RNJE3cIW9jyzWZQGNhkVPFshk=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:2a:9a:2f:94:58:03:81:fe:c2:cb:a4:1a:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jun 13 15:01:13 2025 GMT
Not After : Jun 14 15:01:13 2025 GMT
Subject: CN=3f11f83ca92343681523c46253f0c728e91e9aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:c6:62:50:fc:ba:16:0d:d3:27:85:0f:14:
8c:a4:16:b2:c6:23:fd:80:7b:7e:dd:8c:6b:5b:71:
f7:04:eb:c7:c6:77:06:16:a3:db:40:ce:11:87:f2:
6b:7a:df:9b:ac:a4:2c:3d:37:6f:94:a7:8e:aa:c4:
de:9b:b4:0f:6e:2c:f5:2b:56:2b:7f:38:90:a9:3b:
e0:07:c9:8a:ce:b0:97:6d:3b:59:93:71:29:ee:60:
a6:5e:25:aa:a5:a2:25:47:59:65:a1:62:ff:e0:14:
2b:e6:85:69:80:cc:27:d9:a0:58:6e:60:21:6c:4b:
0c:d5:89:72:34:82:d8:14:93:90:14:7f:fa:e5:04:
ff:f4:27:ab:51:f6:fa:1c:e3:a6:37:6c:00:77:20:
bb:50:82:24:4c:3a:f2:2f:92:61:6e:b1:ab:4e:b2:
07:cf:ae:f3:51:96:35:5f:01:1d:b7:72:94:51:e7:
69:d1:0b:1c:73:d4:b4:38:6a:cb:3d:ad:02:94:19:
fe:b2:ec:ea:3c:c4:70:5d:2d:9a:e1:b8:02:07:bf:
12:f7:26:d1:4e:1d:96:de:db:60:0f:1b:27:9a:a7:
88:ff:27:28:78:9e:80:52:e9:35:36:d7:6c:2c:6d:
5b:a1:a3:f9:95:93:f6:35:b2:71:b6:94:70:50:0d:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:F8:3C:A9:23:43:68:15:23:C4:62:53:F0:C7:28:E9:1E:9A:EC
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:71:df:eb:a6:f9:ba:11:85:67:6c:bd:b0:e6:a6:4c:13:
0d:ff:b3:e1:c8:16:f0:bb:48:95:a3:d3:30:62:d7:be:fd:67:
09:85:83:24:22:54:80:c2:c7:93:24:cd:89:ad:c7:6c:c6:9a:
91:61:48:44:d2:cc:e3:87:db:84:6b:fb:5f:9b:f7:bf:20:3b:
c9:b7:c4:b7:2c:f2:43:43:a6:4b:06:f0:da:a0:11:27:bf:a8:
44:78:ec:eb:5f:b6:d8:f4:4e:4f:29:8a:93:03:cd:c5:0b:ba:
36:da:48:80:46:0e:b6:c3:87:07:c4:d9:42:07:27:ac:b1:25:
62:a4:b1:c4:1c:62:10:cb:a0:2a:fa:d8:8d:6d:c9:17:42:0c:
01:d2:36:fc:42:4f:3f:5e:83:88:26:c8:ab:79:78:0c:76:a3:
39:bf:a1:f3:63:80:7a:5a:7b:89:03:f6:39:1f:b8:9d:f2:f8:
49:be:f8:4b:22:98:a9:ba:86:ce:12:ca:ff:91:1f:13:a2:82:
1c:a7:9a:81:f7:59:92:a8:07:66:c5:17:ca:c7:f8:6d:4e:ff:
a3:43:97:6a:17:4e:51:6b:91:bc:ed:62:45:cb:dd:02:a5:66:
ca:51:39:ef:70:66:b3:c7:e4:0a:d8:f9:5e:ca:ed:e4:61:5f:
ab:f7:92:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzyqaL5RYA4H+wsukGlkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTE0MDBkNTQ4ZmEyMWFmODE5YTBjNmUyM2U3N2E2MDEy
ZWI1ZTkwHhcNMjUwNjEzMTUwMTEzWhcNMjUwNjE0MTUwMTEzWjAzMTEwLwYDVQQD
EygzZjExZjgzY2E5MjM0MzY4MTUyM2M0NjI1M2YwYzcyOGU5MWU5YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kDGYlD8uhYN0yeFDxSMpBayxiP9
gHt+3YxrW3H3BOvHxncGFqPbQM4Rh/Jret+brKQsPTdvlKeOqsTem7QPbiz1K1Yr
fziQqTvgB8mKzrCXbTtZk3Ep7mCmXiWqpaIlR1lloWL/4BQr5oVpgMwn2aBYbmAh
bEsM1YlyNILYFJOQFH/65QT/9CerUfb6HOOmN2wAdyC7UIIkTDryL5JhbrGrTrIH
z67zUZY1XwEdt3KUUedp0Qscc9S0OGrLPa0ClBn+suzqPMRwXS2a4bgCB78S9ybR
Th2W3ttgDxsnmqeI/ycoeJ6AUuk1NtdsLG1boaP5lZP2NbJxtpRwUA1YIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8R+DypI0NoFSPEYlPwxyjpHprsMB8GA1UdIwQY
MBaAFAARQA1Uj6Ia+BmgxuI+d6YBLrXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2Ut
MDFmNDYwNmM2NWVjLzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmRhYWItNjgyOS00NWZhLTk2N2UtMDFmNDYwNmM2NWVj
LzEvQUJGQURWU1BvaHI0R2FERzRqNTNwZ0V1dGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbK5x3+um
+boRhWdsvbDmpkwTDf+z4cgW8LtIlaPTMGLXvv1nCYWDJCJUgMLHkyTNia3HbMaa
kWFIRNLM44fbhGv7X5v3vyA7ybfEtyzyQ0OmSwbw2qARJ7+oRHjs61+22PROTymK
kwPNxQu6NtpIgEYOtsOHB8TZQgcnrLElYqSxxBxiEMugKvrYjW3JF0IMAdI2/EJP
P16DiCbIq3l4DHajOb+h82OAelp7iQP2OR+4nfL4Sb74SyKYqbqGzhLK/5EfE6KC
HKeagfdZkqgHZsUXysf4bU7/o0OXahdOUWuRvO1iRcvdAqVmylE573Bms8fkCtj5
Xsrt5GFfq/eSgA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:56 2025 by rpki-client