Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File: ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier: KgBaHdlAgBNM2HgnPjWhE757aM5sfmZTBUQGuywC3ac=
Subject key identifier: F7:57:70:54:1F:C8:39:11:E4:A1:14:5F:AB:CF:D8:40:32:A4:B5:3A
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 019A4EF51BE8FF31D0DE472F9561FEA2C728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: HlvsXvfCMOTd0aJz216sRxK/gQ/Z8MpeeTG3eWHKo9E=)
2: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (hash: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1b:e8:ff:31:d0:de:47:2f:95:61:fe:a2:c7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=f75770541fc83911e4a1145fabcfd84032a4b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:2b:6d:a8:8c:bf:f0:69:14:b6:4a:16:4f:
80:9b:5b:27:8d:1c:d5:6c:69:6f:a2:b2:3d:6d:a9:
55:37:e5:4a:8d:93:24:61:20:72:ff:33:a6:e6:11:
70:18:80:22:89:66:ec:dc:d5:49:4e:53:5b:91:cd:
6b:4f:ae:0e:05:9d:a2:57:08:f2:42:23:24:fb:d9:
ea:89:fe:31:3f:9d:8f:e7:2e:47:33:1d:49:c3:c1:
82:dc:8c:a3:a5:3e:de:5e:cd:82:67:92:0f:52:9b:
47:0e:da:45:d3:66:ff:71:1f:74:52:3f:33:f7:51:
d7:09:a8:0d:47:cc:cc:89:fc:3d:1f:13:16:32:82:
a4:c1:3c:09:29:ae:b9:8e:93:b4:97:41:0f:86:54:
4d:bc:02:8c:68:3b:79:91:7a:52:9e:ac:4d:77:c4:
32:c3:d1:6a:00:ef:69:30:30:a5:99:10:e5:f8:67:
d1:a1:c0:aa:c7:f8:74:ee:09:0a:71:d2:11:1a:e0:
f0:86:c1:b4:2c:1e:15:52:cb:3c:cc:44:2d:4c:5c:
fd:68:5a:72:40:0e:f0:5d:a9:f7:fe:0e:8c:85:c1:
17:72:d0:1f:c6:e8:e6:0c:05:ba:8c:37:0c:b9:2c:
3f:92:d9:ea:b8:00:4e:74:78:ef:21:65:7a:6e:65:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:70:54:1F:C8:39:11:E4:A1:14:5F:AB:CF:D8:40:32:A4:B5:3A
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:04:e5:f8:b6:76:50:8d:4c:28:a3:3e:2f:29:6e:3f:a4:da:
f8:20:03:61:03:19:08:5a:28:18:96:c5:d0:20:c5:6d:59:bd:
ab:7f:a5:99:d5:12:f1:77:92:17:4a:a1:d8:a8:55:49:55:08:
0b:ef:19:d9:f4:ca:dc:6d:05:74:9b:2c:7f:06:a0:71:cb:b1:
a4:e5:25:50:b0:e1:4d:e6:76:4c:da:64:f6:1d:87:09:0b:22:
f0:ab:b3:cf:51:b8:ac:63:46:e8:7b:11:f3:d8:43:80:e5:47:
d8:81:75:b8:88:14:52:00:1d:de:59:7f:20:72:ff:eb:ba:15:
66:c4:68:5d:61:62:75:05:8c:f5:b6:c3:3f:11:bd:00:b5:fe:
09:93:5d:5c:a2:87:95:92:a7:73:8a:86:00:10:1c:96:32:6b:
3e:1e:32:15:a1:36:9a:8c:bc:af:b4:cf:80:b2:63:de:16:1f:
ed:e4:84:9a:a3:7a:3f:3b:69:95:08:86:a1:e4:48:b8:3c:e3:
90:ea:8b:9f:a3:53:b7:b1:ab:4b:45:d2:6b:48:24:bb:c4:2c:
4c:39:3b:3b:71:1d:54:07:4d:9d:04:04:4e:4a:00:cf:99:21:
14:3e:09:46:45:4e:af:36:dd:c1:5b:ec:40:8e:7f:f4:e0:a9:
84:ca:c8:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Rvo/zHQ3kcvlWH+oscoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTBhYjczOTE3NjliNWYyYzU0ZTMzYzhiNWE3ZGY5ZjM3
YTMzYTgwHhcNMjUxMTA0MTMwMTE3WhcNMjUxMTA1MTMwMTE3WjAzMTEwLwYDVQQD
EyhmNzU3NzA1NDFmYzgzOTExZTRhMTE0NWZhYmNmZDg0MDMyYTRiNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugArbaiMv/BpFLZKFk+Am1snjRzV
bGlvorI9balVN+VKjZMkYSBy/zOm5hFwGIAiiWbs3NVJTlNbkc1rT64OBZ2iVwjy
QiMk+9nqif4xP52P5y5HMx1Jw8GC3IyjpT7eXs2CZ5IPUptHDtpF02b/cR90Uj8z
91HXCagNR8zMifw9HxMWMoKkwTwJKa65jpO0l0EPhlRNvAKMaDt5kXpSnqxNd8Qy
w9FqAO9pMDClmRDl+GfRocCqx/h07gkKcdIRGuDwhsG0LB4VUss8zEQtTFz9aFpy
QA7wXan3/g6MhcEXctAfxujmDAW6jDcMuSw/ktnquABOdHjvIWV6bmUgiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdXcFQfyDkR5KEUX6vP2EAypLU6MB8GA1UdIwQY
MBaAFAAQq3ORdptfLFTjPItaffnzejOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jMjJmNjEtMTMzYy00ZDBjLTg4Y2Yt
YTE1NWUzZjlkNTI5LzEvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jMjJmNjEtMTMzYy00ZDBjLTg4Y2YtYTE1NWUzZjlkNTI5
LzEvQUJDcmM1RjJtMThzVk9NOGkxcDktZk42TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgTl+LZ2
UI1MKKM+LyluP6Ta+CADYQMZCFooGJbF0CDFbVm9q3+lmdUS8XeSF0qh2KhVSVUI
C+8Z2fTK3G0FdJssfwagccuxpOUlULDhTeZ2TNpk9h2HCQsi8Kuzz1G4rGNG6HsR
89hDgOVH2IF1uIgUUgAd3ll/IHL/67oVZsRoXWFidQWM9bbDPxG9ALX+CZNdXKKH
lZKnc4qGABAcljJrPh4yFaE2moy8r7TPgLJj3hYf7eSEmqN6PztplQiGoeRIuDzj
kOqLn6NTt7GrS0XSa0gku8QsTDk7O3EdVAdNnQQETkoAz5khFD4JRkVOrzbdwVvs
QI5/9OCphMrI5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:08 2025 by rpki-client