Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: iDxKAqInNy+lOjR9DM5eOw5ZSLAR8rrVjplgEtoioro=
Subject key identifier: F8:61:95:A3:F0:AF:89:57:1C:81:A1:20:E4:A2:2C:A7:88:A3:69:1A
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 0198537BBB45E7CD480656C90A7FEA26EE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 159A
Signing time: Tue 29 Jul 2025 00:01:14 +0000
Manifest this update: Tue 29 Jul 2025 00:01:14 +0000
Manifest next update: Wed 30 Jul 2025 00:01:14 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: OL+Bsbx8x2/+kL+DlaOBvrk7TXoM5HxsCpTsCQJwnMQ=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:bb:45:e7:cd:48:06:56:c9:0a:7f:ea:26:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jul 29 00:01:14 2025 GMT
Not After : Jul 30 00:01:14 2025 GMT
Subject: CN=f86195a3f0af89571c81a120e4a22ca788a3691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:4a:8c:b2:e2:f4:26:9f:88:27:0c:5c:59:
62:26:2d:4e:42:b4:d6:b0:57:c6:ef:5e:a5:55:fc:
b8:22:b9:d3:85:f8:61:44:00:7e:a4:84:06:d2:e0:
a9:a4:c8:9e:e4:30:1a:3a:74:3f:7e:a3:7c:3c:0d:
24:98:75:2b:42:87:28:87:82:40:b0:9d:b4:1e:82:
d5:51:d1:13:83:22:f6:ca:a7:53:b1:df:a3:ec:f1:
21:7b:e8:a0:15:5b:c4:33:75:8e:75:ac:4e:39:35:
95:01:de:8c:7f:29:ad:90:2e:20:05:d1:98:26:4a:
91:c2:6c:bb:6f:16:ce:24:36:f3:a7:bc:3e:ea:15:
e7:30:b9:5e:25:7a:4d:b2:dd:2a:64:eb:0c:11:e3:
74:27:a7:70:d8:58:7e:98:b4:e2:ed:6d:56:8c:c8:
06:df:ec:dc:00:75:b6:b4:b1:03:3d:0c:ae:4c:c5:
b6:24:52:bd:53:ad:85:3a:86:7f:64:56:c3:65:92:
24:e4:f0:9a:49:32:44:f9:96:5f:3d:96:85:90:82:
92:3b:f1:e6:6b:54:c6:88:26:3a:57:9f:f2:84:73:
09:c5:ad:6f:6d:59:a0:6b:80:fd:5e:7e:c5:a6:28:
a4:9c:a8:dd:b0:92:cf:3e:6d:4d:e1:4e:00:8c:40:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:95:A3:F0:AF:89:57:1C:81:A1:20:E4:A2:2C:A7:88:A3:69:1A
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3e:ef:84:74:62:f6:82:9d:5b:e6:7e:d8:bb:d9:db:b0:7b:
fa:48:2e:dd:0a:35:df:0c:e8:55:aa:68:a0:4c:c4:12:91:2c:
66:ac:e8:ce:f5:c8:ac:89:d2:a5:61:1d:0e:b5:34:66:17:e6:
30:58:a7:9f:5a:ed:36:36:72:17:35:9e:5d:2b:df:ff:86:ad:
03:6e:9c:f5:b8:ae:c5:45:22:36:18:ff:ac:dd:8e:a0:1a:a4:
29:bb:27:20:04:38:c8:9e:ea:97:09:43:9c:bb:48:40:4b:51:
8f:f1:1a:4d:02:1b:70:f8:d2:1a:99:61:40:67:46:9b:2e:8a:
05:6b:98:e5:4b:cd:16:ff:53:1a:3c:15:69:26:75:15:04:44:
6e:2a:07:42:e5:2c:a2:7a:5e:8d:ac:7a:b2:44:46:ca:a4:27:
53:e8:dc:49:2f:f5:28:3c:05:90:d5:a6:c8:c5:a3:49:40:51:
c7:dc:d6:6a:ab:49:fc:31:b6:68:cf:a1:0c:f6:ea:3e:61:2d:
2b:90:f8:39:67:22:a5:dd:b4:40:6a:90:37:8e:fb:52:70:ab:
43:53:10:8a:b5:cb:2b:a1:be:1c:ec:7d:4f:35:9f:6c:f5:35:
c1:cb:5f:47:90:96:d8:64:3f:07:f2:50:b7:b0:18:fc:8e:b9:
10:e7:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:58 2025 by rpki-client