Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: OBF8RpB9hmbFBiPPpkHHFuD7FuIe6/uetR5uRHV/QMY=
Subject key identifier: E0:32:AA:F1:E9:69:32:92:90:6C:1B:F2:CE:5F:4B:09:C1:BB:77:6F
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019A4D3CDE90CEBFCB015E62C38E438E2174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0B47
Signing time: Tue 04 Nov 2025 05:00:26 +0000
Manifest this update: Tue 04 Nov 2025 05:00:26 +0000
Manifest next update: Wed 05 Nov 2025 05:00:26 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: YrwDg/cKjOW9O9BkPi3/U2SHxQK3CG2ulih4uTdQt2E=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:de:90:ce:bf:cb:01:5e:62:c3:8e:43:8e:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Nov 5 05:00:26 2025 GMT
Subject: CN=e032aaf1e9693292906c1bf2ce5f4b09c1bb776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:53:78:16:db:43:48:1f:6f:b8:6e:32:c3:
62:9d:eb:54:97:d4:79:2d:d6:54:65:49:f5:51:71:
a2:f9:34:79:cf:db:f2:61:bc:4b:60:7c:f8:be:6b:
b2:8e:7a:b1:d7:ca:a1:c2:2f:e4:a3:2e:61:f8:74:
f7:7d:69:ae:a1:89:6e:87:8d:50:77:c7:a9:54:ea:
c4:91:56:c9:56:91:e4:40:d8:97:b6:86:ae:a0:e6:
c6:7e:7e:32:c1:dc:ac:85:ef:36:ae:05:9b:46:67:
7d:8c:e0:25:de:d2:69:55:de:96:71:22:fa:8f:e9:
08:97:68:4b:39:2d:74:c8:41:28:89:cb:9c:3b:7c:
da:03:46:94:12:7c:60:20:9f:83:4d:51:5a:07:fe:
f3:87:41:d7:01:20:c5:eb:28:f8:67:9a:01:b4:b0:
5d:f1:db:52:e9:af:60:98:df:b1:d5:ac:b0:3c:8d:
97:79:5b:73:fe:1d:a6:e5:bd:eb:76:6d:e2:d0:82:
63:b5:ac:b8:32:cd:5a:b2:6e:68:21:40:19:15:5a:
c5:f0:67:91:61:33:33:5d:a9:c6:fd:3a:84:37:61:
d2:0a:b4:60:fb:cb:40:c9:0c:f2:07:86:10:ca:5e:
4b:44:f1:07:ae:b6:7a:d6:c3:51:a4:f0:eb:a7:d2:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:AA:F1:E9:69:32:92:90:6C:1B:F2:CE:5F:4B:09:C1:BB:77:6F
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3b:c2:96:d8:99:df:de:11:a3:b8:92:2d:c5:08:8c:8f:9f:
40:d4:70:f9:2f:6e:69:c6:b6:e0:e6:23:86:57:89:f7:3e:75:
a7:4a:e4:ed:ac:b2:08:41:4d:fe:eb:8b:8f:8b:9b:89:07:e3:
23:d8:fb:92:df:1d:e4:33:0a:a4:0a:6a:52:0f:c3:bf:37:62:
ca:a6:62:18:d4:95:50:62:54:a7:5c:6a:08:01:b2:c2:e1:29:
44:f1:2a:ec:39:0d:ca:15:a9:f8:0f:a7:54:0b:0b:d4:40:24:
44:87:67:1b:fe:05:86:60:c8:d5:f2:9a:d2:3a:0f:34:4f:e8:
e4:95:a0:be:92:52:19:da:3c:05:c1:74:c8:0d:2e:30:bc:f0:
b6:df:d7:3e:6c:1e:5e:92:39:a9:a6:45:60:92:96:87:c1:ba:
36:cb:00:84:53:b0:61:e5:6c:a5:50:44:71:10:31:d3:1a:24:
2e:5a:80:2e:eb:e5:c7:d6:91:94:95:ca:c1:ff:9a:28:9a:50:
ca:43:a5:97:8d:46:ed:02:23:12:0b:b1:98:bb:a0:47:37:7f:
5f:f6:25:33:00:85:2f:49:98:60:60:6d:13:40:c8:d4:a3:b3:
ed:5d:16:a3:3c:a5:8e:0a:ff:58:af:f5:15:6e:a3:46:5c:a0:
86:41:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:45 2025 by rpki-client