Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: +42YECzy1+3MGG3aNJ4uzWP5ZqbTxkMt+big88lDCL4=
Subject key identifier: D3:3E:71:25:F9:B4:4F:6F:CC:9C:36:EF:D5:13:15:84:27:04:CA:A1
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019873E1E3CD1F43EEBB7D678CCBECBE010C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0CE7
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: rkr4JqDrI5ikYhdX6VVs9p+iejra5F/3G/TeA3PhyT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e3:cd:1f:43:ee:bb:7d:67:8c:cb:ec:be:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=d33e7125f9b44f6fcc9c36efd51315842704caa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:fd:a2:6e:2a:62:46:31:56:da:32:62:db:
a4:5a:e6:84:93:40:c9:35:e7:22:ca:bf:d9:e7:07:
05:c5:72:f6:bb:f5:c4:e3:08:7d:e4:ad:f8:b7:6f:
cc:a8:08:1a:78:8d:0b:d5:13:f6:58:ae:c6:95:ee:
74:b8:99:ef:ad:a9:c9:7a:f4:8a:ed:f0:a6:1a:b4:
f6:b8:04:cf:7c:e4:a0:23:1e:5f:cd:ec:ff:42:e0:
18:9d:e3:a9:f6:83:1d:16:da:b4:06:45:bd:01:c9:
f4:c6:35:79:21:54:db:ed:fd:be:21:d6:8f:5f:a0:
c4:61:04:70:55:59:11:30:3f:a9:a6:62:5e:c6:35:
19:16:e4:ae:d3:ac:c1:0f:1b:63:d2:57:81:02:d3:
88:91:5b:b5:2e:b2:8d:2c:37:fa:ab:e4:67:58:96:
9b:29:4d:8d:dc:07:2f:de:1f:df:66:cc:51:ed:5e:
cf:82:0a:0e:c5:be:f1:4b:9e:bb:9c:39:d3:0a:51:
d3:2a:2f:76:cb:20:32:f0:3c:dc:94:67:0c:31:ce:
bb:a1:f4:fd:19:2d:69:d3:99:e4:b8:9d:0f:20:48:
d7:18:33:2f:25:65:8c:35:ad:91:a2:ec:6e:72:66:
50:fa:aa:04:61:25:3f:28:67:8c:88:24:ca:9a:51:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:71:25:F9:B4:4F:6F:CC:9C:36:EF:D5:13:15:84:27:04:CA:A1
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:da:ae:73:f8:b7:29:9e:bc:0a:b2:74:4e:7a:85:9f:f7:aa:
24:9c:f9:82:a2:b8:ca:eb:fc:78:64:37:d5:3d:da:1d:04:ed:
80:89:4b:d1:e2:2d:01:19:ff:0b:2a:50:97:9e:43:1d:4f:da:
f6:47:a8:86:03:53:bc:87:48:2c:05:40:13:24:6c:e4:da:21:
c5:21:fd:67:be:7b:97:12:d3:e6:aa:45:df:9f:a3:26:f5:9d:
17:76:9e:ad:97:41:d5:c1:3e:73:1a:56:73:bf:ba:28:9b:43:
70:6d:e6:7d:54:3c:c7:50:e0:35:e6:65:61:9b:15:10:61:50:
e1:4b:2d:9e:41:70:d1:6e:65:65:8a:ad:62:48:05:d2:75:a8:
66:45:05:39:0d:ff:5c:e0:46:44:44:e3:f6:63:8e:12:3d:49:
a4:c8:71:05:ac:6a:43:94:bf:3f:4b:80:12:ff:46:5f:6c:dc:
62:94:78:1d:64:07:57:94:f9:c0:e6:57:5c:22:2c:2d:9d:6a:
44:cd:2f:4b:52:e9:c8:12:7e:ca:67:fa:f1:15:19:30:46:bf:
f9:a4:cd:2f:db:bc:40:ce:fb:c4:49:d3:bd:ed:ef:4a:20:5f:
6d:e6:48:29:47:6b:c5:1c:08:83:ed:27:1e:88:67:bd:32:21:
8a:c8:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:56 2025 by rpki-client