Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: 5HGupnJpetaokD8IlpwBjNecjxFTj8ZB0rLrvDITzCw=
Subject key identifier: DC:40:6B:BA:95:D5:9B:79:82:5A:C2:44:8D:ED:32:18:B3:BD:0F:94
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 01976D3E93DA99E204A0378986550FD7C8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0C5F
Signing time: Sat 14 Jun 2025 07:01:46 +0000
Manifest this update: Sat 14 Jun 2025 07:01:46 +0000
Manifest next update: Sun 15 Jun 2025 07:01:46 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: KVuY4RnqrKHMqu9MXyXXSt61+WDVLk1ONtZ/yQArWJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:93:da:99:e2:04:a0:37:89:86:55:0f:d7:c8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Jun 14 07:01:46 2025 GMT
Not After : Jun 15 07:01:46 2025 GMT
Subject: CN=dc406bba95d59b79825ac2448ded3218b3bd0f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:5b:41:5d:32:d0:56:d8:82:8c:23:d9:d3:
d4:6b:a3:ea:21:a5:a6:40:22:20:fe:ca:59:01:48:
35:2a:9d:07:d1:9e:47:57:61:c9:36:09:69:95:f0:
5a:c2:4c:3f:59:63:cf:a8:f6:1f:76:1b:e0:b7:78:
6e:41:94:49:2e:0e:fa:57:e7:ec:b5:ef:49:8b:26:
77:e3:fa:cd:f6:1e:d9:ea:dc:35:7b:36:09:81:75:
60:0b:e4:96:12:d5:f3:d7:f3:fb:8b:3e:b3:53:69:
51:c6:b4:4d:5d:71:4b:d0:5b:58:00:e0:d9:e3:53:
ad:99:6d:70:3b:b1:91:92:38:76:2d:ba:d0:dc:5a:
fc:83:3f:01:6d:5d:19:aa:99:a2:5a:ed:ed:be:44:
9b:b4:50:ff:ab:bc:76:e7:3b:04:e8:fb:a5:36:1e:
50:d2:08:60:bb:c4:a7:74:9e:a2:f2:a5:ff:12:d6:
72:99:b6:87:c6:05:a1:1c:d9:db:3f:7f:1f:c8:d6:
a0:e4:d6:ff:9c:7e:95:b0:06:01:58:31:05:a4:ef:
11:32:31:e1:5b:94:55:00:70:bc:ae:6c:6b:ee:e7:
f2:14:ea:49:5a:90:2c:10:09:45:99:f5:b6:fb:73:
df:9a:81:d5:0f:c5:a2:dd:47:82:ad:30:dc:ba:4c:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:6B:BA:95:D5:9B:79:82:5A:C2:44:8D:ED:32:18:B3:BD:0F:94
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cd:4f:67:d5:81:47:40:38:e6:43:5a:a8:15:76:42:3a:32:
a0:01:51:97:36:43:80:42:b1:ed:5c:69:8a:ae:80:4c:81:f8:
b9:62:d1:88:90:8a:41:af:00:15:25:25:2b:99:d8:6d:25:b1:
2a:78:b8:c8:98:c9:46:40:c4:9a:9d:ef:d2:b3:84:e8:f2:54:
c0:f9:67:08:6c:bc:0c:8e:0b:0a:22:18:e5:28:17:7b:3f:13:
59:8e:b8:07:b2:79:f2:35:a4:f3:b7:e7:6e:99:8e:21:e8:06:
a3:a5:e7:15:aa:d4:52:b5:46:af:4b:49:c1:85:ca:80:f6:03:
2a:fa:d9:57:08:77:93:96:3e:5d:e1:0e:55:0e:d4:1b:f4:f8:
bc:b0:31:22:7d:41:7f:42:77:40:fc:dc:8f:cd:d7:28:d0:88:
d0:61:ec:8d:d1:f2:82:b1:19:fa:bb:6b:6a:cb:ea:49:61:e5:
47:42:8e:37:51:b7:d3:83:24:ef:16:b3:a5:c2:3b:12:8c:9f:
db:32:36:a5:e4:38:c8:64:a0:7a:ec:cc:f3:44:45:60:41:f4:
1a:66:b9:f9:6b:35:bf:20:a5:18:b8:2b:bd:6e:13:48:7f:b9:
05:92:39:d1:2a:3c:10:35:70:1d:f9:be:d1:e7:42:68:37:95:
9d:da:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:22 2025 by rpki-client