Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: 2J3Q7M8vs4arMI+OuyNMvFzkktCulk41xe1H3UHeW7Q=
Subject key identifier: 07:9E:30:6B:48:44:A1:BD:F4:1C:FE:10:A7:46:D2:23:08:7C:9A:24
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 019A7113352CAE25A1AAD5E2BF8E01741398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: 6S19nvZoU4qTOr7ZaKXZMtwYFCuCqoCZf2GR7yUhcpg=)
2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:35:2c:ae:25:a1:aa:d5:e2:bf:8e:01:74:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=079e306b4844a1bdf41cfe10a746d223087c9a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:b5:34:d4:a7:36:a7:72:d0:ae:2d:00:34:
f3:78:98:b0:9c:97:99:77:0a:cb:25:47:69:40:1b:
ca:c6:db:97:2c:cf:92:80:ff:dc:98:27:da:63:f7:
d4:89:8f:16:90:cf:36:aa:3c:dd:57:1b:fa:3c:85:
60:0b:bc:ff:af:3c:22:cf:a8:e2:a9:9e:7c:27:70:
a3:10:07:8a:cc:d0:37:1c:1c:9a:f9:62:a7:66:66:
cb:01:4b:85:d7:23:cd:e4:92:ec:d6:42:0d:6d:90:
b6:66:48:dd:0f:05:17:b5:96:11:6d:1f:51:b6:9c:
36:b2:d3:ec:6c:04:8d:6a:75:3d:9c:99:d5:db:3b:
c8:77:c2:18:b0:11:0c:16:4a:45:63:39:51:c5:f2:
8c:a8:4e:10:78:1b:cc:bc:c4:04:b9:08:54:93:79:
ba:9a:66:ff:de:fe:6b:dc:0e:f8:2f:77:52:de:d0:
08:af:b3:4e:3d:f8:6f:77:70:fb:6d:42:cb:0c:bc:
f5:99:78:46:de:75:ee:82:7c:dd:98:ab:08:89:36:
24:90:92:07:5e:67:8f:da:90:52:f4:68:9b:cc:d6:
46:22:fa:3f:5a:10:2b:f2:a4:46:d5:49:07:f2:09:
ec:6e:ca:ab:d8:09:a7:b0:c6:49:21:82:14:e3:2e:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:30:6B:48:44:A1:BD:F4:1C:FE:10:A7:46:D2:23:08:7C:9A:24
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:c8:67:82:8e:26:19:a4:43:b1:8d:3f:7f:b2:77:98:74:
28:4d:76:61:1e:7b:2c:1d:4c:2f:ac:17:16:cb:b2:08:da:e5:
8f:d0:57:e6:b0:9b:ae:9b:8c:14:4a:e9:83:2f:9a:a7:20:18:
ac:b9:2d:25:ee:bf:43:1e:f7:d4:d7:35:f7:2a:32:3c:e9:22:
69:40:32:c8:d1:12:f2:cf:5a:61:a4:18:a5:62:e7:8c:c7:7a:
8a:3e:b1:39:80:d9:37:c0:51:df:3d:fe:7f:51:ae:92:47:fe:
61:2f:39:15:4e:30:c9:af:6f:f0:43:46:d8:49:5c:65:f4:3f:
bf:fe:70:e5:47:7d:a2:e4:42:97:73:ec:63:cf:f9:ee:7a:a6:
29:d2:c9:98:6d:8a:99:63:9a:85:64:0e:c1:eb:a7:cf:89:2b:
8b:f5:80:29:0d:23:42:c1:f1:9d:93:d4:7b:35:f2:ed:59:82:
06:ee:f2:e9:77:37:59:30:56:89:cf:4f:f0:5c:36:da:ff:be:
c9:9d:1d:5c:57:d5:57:bb:5d:8b:40:8a:a1:4e:8b:1b:d0:98:
2a:e6:c9:9b:34:66:dd:07:10:49:ee:83:fb:87:21:bb:79:f8:
6a:48:02:57:69:7e:4e:75:d8:9f:0b:a0:6b:7c:17:b6:64:60:
7b:de:bb:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEzUsriWhqtXiv44BdBOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmFjY2NiNzRjNzdiZDVmZDJhYmVhM2U2MTJkODgxZWFi
NzMzNTYwHhcNMjUxMTExMDQwMTE1WhcNMjUxMTEyMDQwMTE1WjAzMTEwLwYDVQQD
EygwNzllMzA2YjQ4NDRhMWJkZjQxY2ZlMTBhNzQ2ZDIyMzA4N2M5YTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLy1NNSnNqdy0K4tADTzeJiwnJeZ
dwrLJUdpQBvKxtuXLM+SgP/cmCfaY/fUiY8WkM82qjzdVxv6PIVgC7z/rzwiz6ji
qZ58J3CjEAeKzNA3HBya+WKnZmbLAUuF1yPN5JLs1kINbZC2ZkjdDwUXtZYRbR9R
tpw2stPsbASNanU9nJnV2zvId8IYsBEMFkpFYzlRxfKMqE4QeBvMvMQEuQhUk3m6
mmb/3v5r3A74L3dS3tAIr7NOPfhvd3D7bULLDLz1mXhG3nXugnzdmKsIiTYkkJIH
XmeP2pBS9GibzNZGIvo/WhAr8qRG1UkH8gnsbsqr2AmnsMZJIYIU4y6qLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeeMGtIRKG99Bz+EKdG0iMIfJokMB8GA1UdIwQY
MBaAFAG6zMt0x3vV/Sq+o+YS2IHqtzNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEt
ODM3NDEwNDFiOGM3LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEtODM3NDEwNDFiOGM3
LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGbIZ4KO
JhmkQ7GNP3+yd5h0KE12YR57LB1ML6wXFsuyCNrlj9BX5rCbrpuMFErpgy+apyAY
rLktJe6/Qx731Nc19yoyPOkiaUAyyNES8s9aYaQYpWLnjMd6ij6xOYDZN8BR3z3+
f1Gukkf+YS85FU4wya9v8ENG2ElcZfQ/v/5w5Ud9ouRCl3PsY8/57nqmKdLJmG2K
mWOahWQOweunz4kri/WAKQ0jQsHxnZPUezXy7VmCBu7y6Xc3WTBWic9P8Fw22v++
yZ0dXFfVV7tdi0CKoU6LG9CYKubJmzRm3QcQSe6D+4chu3n4akgCV2l+TnXYnwug
a3wXtmRge967dg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:37 2025 by rpki-client