Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: bkeDpixeS/Bd8SNRU9fNouP/HcxmYTtCJL7pM4OCfJ8=
Subject key identifier: 73:4B:AD:A2:44:87:23:7E:32:1B:8F:0A:62:82:F9:C2:09:31:F3:3E
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01988D33DCD2F9A581B72C55C247AD44943E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0A5F
Signing time: Sat 09 Aug 2025 05:00:42 +0000
Manifest this update: Sat 09 Aug 2025 05:00:42 +0000
Manifest next update: Sun 10 Aug 2025 05:00:42 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: Zm26fqyibp2fVUeIrX/QmRlygHP9z9s/ndbLNKjinVw=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:dc:d2:f9:a5:81:b7:2c:55:c2:47:ad:44:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Aug 9 05:00:42 2025 GMT
Not After : Aug 10 05:00:42 2025 GMT
Subject: CN=734bada24487237e321b8f0a6282f9c20931f33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:95:67:27:17:cf:9a:01:00:08:7c:89:fb:
68:1f:da:44:a5:13:51:3f:67:ec:68:d0:a4:a4:78:
23:2b:fb:fb:2d:4f:86:26:b7:a7:cd:c2:3a:f5:88:
95:b9:65:56:38:45:5a:78:34:87:f8:41:a2:df:b2:
1d:81:7c:87:a4:01:2b:8e:40:a7:9c:9e:5e:c0:df:
20:e6:b7:f9:57:bc:70:ab:a2:53:54:d0:ad:64:12:
ad:3a:29:fe:4e:d3:50:18:c7:4d:0c:f7:0a:67:98:
79:97:cc:d7:10:b1:fe:26:ee:32:cd:90:23:bc:4e:
e4:bf:1d:0a:e5:67:81:71:4e:62:6b:57:26:c1:92:
96:49:7a:a1:1d:cb:61:d7:f2:3f:fb:20:64:ec:08:
91:9d:65:4b:eb:46:84:58:30:5b:1d:f5:40:75:e9:
cf:e5:44:06:b7:be:8c:74:5e:bc:4c:c4:d6:10:9a:
a4:c8:0e:a8:f9:48:ea:31:4e:f0:5d:86:d9:7b:3a:
1c:25:02:5c:e3:0e:40:ea:a2:f8:bf:1b:33:5d:e1:
5b:5b:a4:eb:99:92:c7:50:a4:5f:a0:09:24:d2:14:
4c:4c:b8:68:da:fe:4e:41:75:01:65:a2:87:34:8d:
5c:49:e5:ec:c3:70:c8:8b:d6:fe:4c:42:3c:e3:d6:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:AD:A2:44:87:23:7E:32:1B:8F:0A:62:82:F9:C2:09:31:F3:3E
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:3e:77:f3:6b:2c:3b:1c:b9:fc:c9:ec:ea:33:76:bf:88:
c8:c2:c7:a2:dc:8a:7b:67:44:1e:f3:bf:01:be:70:8d:2c:ba:
04:00:f5:1f:ec:b7:61:63:03:61:a9:f2:b0:a8:42:e5:a2:ec:
22:3b:a8:44:3a:e9:aa:98:57:a0:f4:fb:99:92:de:8c:ef:8e:
0e:1b:1a:46:59:4e:7a:bf:96:2a:f2:a9:77:91:72:b8:67:59:
96:6c:ed:b3:0c:a9:dc:35:65:be:dd:66:9b:f4:c0:ed:cc:9d:
db:4c:16:d5:05:89:0d:62:55:26:47:12:a2:26:5c:43:d6:6a:
52:24:64:44:ff:f1:81:23:d6:62:7f:fc:20:94:c4:b6:f7:fe:
ea:c8:fb:05:39:c0:bb:a5:94:e9:e4:fb:2a:56:7f:01:b4:a7:
14:89:5c:57:44:0f:2f:c8:33:a5:16:48:51:a5:3b:97:18:88:
43:83:09:cf:dc:92:84:0f:3c:73:02:9d:d3:e1:92:8b:19:d2:
61:93:55:a7:96:7a:d8:16:9c:76:69:4e:24:8b:36:01:b3:f9:
7a:cb:8a:46:82:0f:cb:ce:aa:a3:38:2c:ce:57:78:d0:79:f2:
38:b4:fd:dc:ef:42:28:31:37:16:c2:f4:2a:a1:70:d0:4a:d5:
21:9c:46:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNM9zS+aWBtyxVwketRJQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1
YTk2ZTAwHhcNMjUwODA5MDUwMDQyWhcNMjUwODEwMDUwMDQyWjAzMTEwLwYDVQQD
Eyg3MzRiYWRhMjQ0ODcyMzdlMzIxYjhmMGE2MjgyZjljMjA5MzFmMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrSVZycXz5oBAAh8iftoH9pEpRNR
P2fsaNCkpHgjK/v7LU+GJrenzcI69YiVuWVWOEVaeDSH+EGi37IdgXyHpAErjkCn
nJ5ewN8g5rf5V7xwq6JTVNCtZBKtOin+TtNQGMdNDPcKZ5h5l8zXELH+Ju4yzZAj
vE7kvx0K5WeBcU5ia1cmwZKWSXqhHcth1/I/+yBk7AiRnWVL60aEWDBbHfVAdenP
5UQGt76MdF68TMTWEJqkyA6o+UjqMU7wXYbZezocJQJc4w5A6qL4vxszXeFbW6Tr
mZLHUKRfoAkk0hRMTLho2v5OQXUBZaKHNI1cSeXsw3DIi9b+TEI849YuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNLraJEhyN+MhuPCmKC+cIJMfM+MB8GA1UdIwQY
MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt
MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5
LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi0+d/Nr
LDscufzJ7Oozdr+IyMLHotyKe2dEHvO/Ab5wjSy6BAD1H+y3YWMDYanysKhC5aLs
IjuoRDrpqphXoPT7mZLejO+ODhsaRllOer+WKvKpd5FyuGdZlmztswyp3DVlvt1m
m/TA7cyd20wW1QWJDWJVJkcSoiZcQ9ZqUiRkRP/xgSPWYn/8IJTEtvf+6sj7BTnA
u6WU6eT7KlZ/AbSnFIlcV0QPL8gzpRZIUaU7lxiIQ4MJz9yShA88cwKd0+GSixnS
YZNVp5Z62BacdmlOJIs2AbP5esuKRoIPy86qozgszld40HnyOLT93O9CKDE3FsL0
KqFw0ErVIZxGkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:34 2025 by rpki-client