
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: 8nr1gAxoKFiFOBp756ai7d/v0Rpj9xfKqyjA6HkGBZQ=
Subject key identifier: AB:5A:B2:AA:6D:98:CA:43:B3:FE:3E:A4:6E:D6:8A:CC:B7:DA:AB:7D
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019843D0E00A94AEB7D0E3AD085F99E8C390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: E3
Signing time: Fri 25 Jul 2025 23:00:18 +0000
Manifest this update: Fri 25 Jul 2025 23:00:18 +0000
Manifest next update: Sat 26 Jul 2025 23:00:18 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: 5vrdOyytLjLJ8KcpRMjQMmc3LhsCwly68Ra4tLkBJug=)
2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d0:e0:0a:94:ae:b7:d0:e3:ad:08:5f:99:e8:c3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Jul 25 23:00:18 2025 GMT
Not After : Jul 26 23:00:18 2025 GMT
Subject: CN=ab5ab2aa6d98ca43b3fe3ea46ed68accb7daab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:1f:98:cb:4d:a3:84:7c:4e:4e:fc:f5:e8:
c3:6c:e0:0a:ad:00:42:ee:9f:88:6c:7f:83:b7:a3:
40:0b:6a:71:a6:66:fa:d7:86:48:02:d2:12:16:91:
f6:53:4b:51:4f:63:4e:36:dd:12:47:00:a7:15:77:
71:a3:93:4f:e8:2f:05:9e:20:01:8b:a0:d7:a3:2a:
00:b7:b2:5f:12:f4:1d:65:35:f2:47:db:20:c5:04:
b1:86:2a:ea:6c:e8:95:08:7e:f6:b7:19:f7:fd:8e:
60:ee:1a:27:82:83:c4:07:70:b9:ab:ed:ae:19:5a:
97:2e:60:f4:ef:b4:b5:b1:e2:7a:5f:29:c0:d6:4f:
de:4f:62:a0:55:b6:60:17:30:7e:a2:ab:8a:57:be:
67:d6:74:ec:d4:a7:46:f0:99:26:df:84:e9:d8:6f:
ae:16:d9:9b:56:f9:5a:95:7f:45:6a:80:7b:05:b6:
59:09:5f:43:a0:89:fc:52:43:5e:a7:01:99:63:8f:
06:99:24:fa:84:af:f4:92:33:2a:5e:45:34:48:5a:
0d:10:74:3c:a2:fe:ed:9f:e3:8f:5b:42:a9:74:2e:
c8:2c:7b:e5:6d:3d:de:ae:3e:20:c8:e1:21:7d:65:
bd:b8:4b:df:14:aa:76:6b:24:50:e6:e3:34:21:4d:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:B2:AA:6D:98:CA:43:B3:FE:3E:A4:6E:D6:8A:CC:B7:DA:AB:7D
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:62:d9:08:49:c8:36:97:fd:12:07:da:42:52:83:a0:10:49:
3e:ed:17:7b:88:73:5e:db:8b:10:78:3d:dc:7a:d1:80:a0:38:
d0:e4:07:d3:1e:67:a8:47:c6:61:68:11:13:a7:c8:6f:ed:f7:
e5:82:c8:11:ba:17:be:f7:cf:1f:27:b8:85:1c:12:91:27:54:
03:3a:f3:4c:bc:76:71:ca:9d:2b:4d:20:bf:42:73:d1:e8:a1:
fa:7a:cb:b8:fa:ff:a3:3e:f1:36:a2:f0:5b:d1:e5:f4:bb:24:
f9:1e:b1:54:f1:12:79:2f:0e:59:de:00:56:a6:4b:ad:75:99:
a1:ff:1a:17:24:23:1a:eb:51:c4:cd:83:01:7c:14:b1:71:d7:
f4:4f:80:14:67:40:43:49:70:bd:7b:9d:9c:cb:39:63:0b:e7:
71:11:7e:56:22:9b:ee:88:da:08:a6:89:87:78:1c:9f:16:05:
18:8c:12:58:af:e2:9c:5e:b8:3d:2c:20:f6:50:64:87:91:3a:
f6:29:b2:98:d1:59:2c:8c:71:14:6c:3e:7b:48:40:9d:39:a3:
4e:47:05:5b:c8:04:a4:b5:18:eb:8b:04:04:00:1e:1c:ee:7f:
20:e9:a7:a5:c9:d1:90:8c:16:d9:ef:da:fb:32:39:a3:f0:57:
bc:82:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:40:03 2025 by rpki-client