Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: 1Pb2iuLO223pumfDQkz8dwBCRuJCmawK2DeaxldwE3c=
Subject key identifier: 5B:DC:A9:09:C5:83:50:39:5F:8B:A2:E0:F6:F2:14:46:10:52:CD:E2
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019A50E36B56D1A0F2DB77A2312A9071C87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0DDE
Signing time: Tue 04 Nov 2025 22:01:12 +0000
Manifest this update: Tue 04 Nov 2025 22:01:12 +0000
Manifest next update: Wed 05 Nov 2025 22:01:12 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: RTDXKcUoAs6T1FZW4QWtKX3gV6SzsBHt3E2bAYfaHYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6b:56:d1:a0:f2:db:77:a2:31:2a:90:71:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Nov 4 22:01:12 2025 GMT
Not After : Nov 5 22:01:12 2025 GMT
Subject: CN=5bdca909c58350395f8ba2e0f6f214461052cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:0d:6d:a1:dc:11:43:fe:12:08:77:7c:82:
e9:0c:38:60:af:4e:ba:2e:37:d8:39:81:b9:dd:cb:
5e:6a:5e:27:9c:a1:40:d1:37:ea:a3:4b:40:ce:15:
f3:31:ff:91:e0:5a:b8:43:38:46:21:f4:82:6f:fe:
01:ec:30:2c:ae:40:d4:94:c2:25:0b:4f:46:92:02:
87:00:39:f4:1a:04:d0:f6:e2:cb:cf:77:1e:40:ff:
15:82:7f:75:71:72:e0:30:64:2b:ab:d3:3e:e4:90:
99:6b:b4:69:39:9e:aa:9c:d1:fd:28:ae:ee:54:1b:
2f:ba:83:85:b7:15:ef:e4:61:77:55:18:cf:86:b5:
c8:9a:61:40:71:97:c0:49:43:f4:64:d0:be:a7:4f:
81:6d:34:7b:51:d7:d0:47:35:4d:35:9e:4e:1e:9d:
77:e2:0d:61:81:7d:ae:e4:df:0d:9c:f2:b5:59:29:
fc:03:a0:e5:2a:9d:a5:3f:4b:27:1d:81:9c:65:7b:
14:24:0c:9c:b5:c3:62:b0:cb:ff:0a:d5:6e:ac:e3:
00:62:eb:76:3a:ed:3d:dd:87:cd:8b:31:da:a5:e6:
b8:29:95:4d:93:79:41:b2:b0:d4:a5:ec:4d:fc:72:
48:b1:07:d1:b8:37:a1:3e:e9:75:91:56:fd:21:25:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:A9:09:C5:83:50:39:5F:8B:A2:E0:F6:F2:14:46:10:52:CD:E2
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:40:b3:ea:c4:31:50:94:24:2d:60:95:9e:c2:a0:0a:77:ae:
fe:b6:fa:2f:36:29:fe:e1:14:4f:5e:27:c8:5f:60:21:34:85:
67:60:2d:d1:16:6e:8d:1b:2e:bf:3b:3f:25:bd:78:75:4a:78:
94:fe:5f:e7:3e:81:55:9f:45:53:a5:d0:34:43:44:0a:91:f3:
51:c9:a6:06:82:dd:fd:02:32:cc:e9:bd:cc:5c:f1:30:9f:40:
a7:eb:e4:57:ba:35:09:59:e7:7d:ec:46:4a:e9:81:3f:7f:6a:
6f:78:75:4f:45:8a:c1:bd:f2:b3:5b:89:5a:3f:70:84:6d:f4:
54:0f:9c:09:f5:74:db:c6:18:c1:12:c2:f4:5e:86:ad:20:e8:
1d:0d:fa:76:83:9c:60:b2:b0:69:9f:bb:ea:90:6b:c4:fd:0c:
8f:48:2a:86:87:06:a3:87:78:10:84:7a:d7:97:50:83:3b:b7:
43:9f:12:45:49:f6:66:b6:e3:f1:b9:6b:52:1d:6b:7e:17:4e:
ef:0d:8d:f9:06:c1:22:ec:50:41:cb:d6:e2:d5:76:99:0e:e3:
31:5b:56:e0:9d:fb:de:19:8e:3f:60:b7:0a:3b:f9:35:d6:45:
a5:8b:03:9a:6d:47:78:cc:f1:06:2c:04:1a:28:10:92:8f:a3:
06:00:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:42 2025 by rpki-client