
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: plWJoTjLBpUH3tk7+HOu+iCfsr6QoJlrHOepjXmUs1k=
Subject key identifier: 6A:28:03:BA:A8:5B:A5:BF:44:6B:E3:72:E0:E8:69:17:F8:D2:66:59
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 0198499C30644F0E7432076F15FDCFD24891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:29 +0000
Manifest this update: Sun 27 Jul 2025 02:00:29 +0000
Manifest next update: Mon 28 Jul 2025 02:00:29 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: pozg5eqhMlJayAEQzME4lIw8yDB01DDeOUfeyL1mahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:30:64:4f:0e:74:32:07:6f:15:fd:cf:d2:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Jul 27 02:00:29 2025 GMT
Not After : Jul 28 02:00:29 2025 GMT
Subject: CN=6a2803baa85ba5bf446be372e0e86917f8d26659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:9a:44:f8:82:94:35:be:8e:40:e6:a2:d8:
1c:5d:ae:23:cc:66:65:7e:2d:6b:1e:9f:1f:bf:9d:
23:b9:45:74:dc:78:24:be:f4:6f:7e:03:4a:83:69:
b2:55:6d:b4:d0:d3:01:59:e4:da:46:76:3b:f6:b2:
79:da:24:fa:5f:2a:e0:46:4e:8a:09:83:40:e4:db:
9f:36:5e:fc:3c:ee:ab:f5:ea:0c:18:0a:aa:a1:bc:
9e:46:d2:c1:e6:89:c6:77:5b:ec:39:0b:2b:88:43:
72:b1:5b:fc:ad:d0:6c:0a:8b:ef:1c:c9:d8:6d:36:
40:2f:b0:ee:3a:a9:59:75:78:65:56:aa:e5:dd:1e:
4e:26:6d:3d:51:63:e8:76:96:57:63:aa:0c:f6:a8:
d5:0f:e9:f1:36:02:9c:61:0d:10:d9:2f:6a:1b:1a:
54:aa:2e:d4:dc:2b:85:c4:e2:92:0c:9c:7a:6a:c3:
eb:06:94:cb:ac:b8:86:d5:b4:f1:6b:58:6d:e8:20:
3a:d1:19:41:56:13:fa:4e:f4:c4:e4:cb:9c:5c:84:
8c:85:37:1c:ec:d0:32:6a:8a:7a:99:5e:59:c4:c6:
51:60:4b:04:79:23:e2:c4:98:7c:97:b7:9a:83:51:
76:51:ac:4c:83:35:bb:89:96:64:11:e3:88:08:d8:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:03:BA:A8:5B:A5:BF:44:6B:E3:72:E0:E8:69:17:F8:D2:66:59
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:78:24:ea:f4:95:07:3f:25:c1:91:3c:6b:d7:d4:6c:23:a4:
a0:66:67:08:74:6c:3f:da:b5:2b:17:ff:d3:1e:d0:c5:ea:ec:
93:c9:a6:ee:3a:6d:77:5e:7f:04:bf:28:03:18:50:a0:93:d1:
73:4c:f6:a1:a9:fc:29:3a:db:85:a5:63:3b:79:ec:db:78:5a:
13:eb:17:0d:b5:ed:4c:ab:8e:f6:19:c0:de:1a:fe:86:b3:43:
ff:f4:b4:dd:d0:7c:b8:e6:92:63:78:97:67:d3:5f:93:16:a9:
9e:78:0c:98:f2:04:04:a0:ef:2f:31:c7:d0:ba:aa:95:c1:5c:
19:e2:93:bb:28:44:0e:b2:69:d8:f0:e5:3b:b8:73:53:57:46:
66:c3:64:3a:6e:42:b6:92:52:74:b1:5c:12:39:ac:f1:32:5a:
9f:bf:7a:a8:75:cd:f9:11:61:cb:ff:fb:1f:20:62:3a:1a:c2:
85:ef:a5:3b:2d:0b:24:c5:ba:d5:5d:f0:d0:32:25:62:16:a9:
ca:53:01:01:71:ba:cc:6d:cf:43:8e:31:ba:e7:10:f4:94:3b:
28:02:af:30:ac:b2:d7:34:7e:db:66:93:43:15:b4:ab:7b:5d:
6c:a0:ee:49:f8:57:d9:45:f5:00:ac:e6:32:c1:4b:3a:da:d6:
91:76:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:39:40 2025 by rpki-client