Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
File: ABPKmgrnGxDSnboMs-yrXxDfUXk.mft (raw, json)
Hash identifier: dBiaatDdvyhYZucmgyhcHFt7uA+1XoF3Llw/oBkqKRQ=
Subject key identifier: 65:7E:A1:69:B2:72:24:92:5A:E8:2B:83:B8:6A:7E:00:F1:02:D9:A1
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 019A1EAC87B3F3FEB27B89636C0D08044AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
Manifest number: 0DCF
Signing time: Sun 26 Oct 2025 04:00:14 +0000
Manifest this update: Sun 26 Oct 2025 04:00:14 +0000
Manifest next update: Mon 27 Oct 2025 04:00:14 +0000
Files and hashes: 1: ABPKmgrnGxDSnboMs-yrXxDfUXk.crl (hash: hR+7jt63i6DwT8S4taU0yaFifYNxYcyBaFTNa01eXj0=)
2: KOmHsYTT8dHL3QRmpI2yEaWq1H0.roa (hash: lw5VEiyghZjGPBV+Cuu9js4RXnD7F0lqD5TiyyWbpk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:87:b3:f3:fe:b2:7b:89:63:6c:0d:08:04:4a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: Oct 26 04:00:14 2025 GMT
Not After : Oct 27 04:00:14 2025 GMT
Subject: CN=657ea169b27224925ae82b83b86a7e00f102d9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:cd:ea:ea:7f:79:2b:ea:35:54:fd:55:1e:
fd:b5:b0:8c:a9:61:cc:a9:75:f8:a7:2c:3b:09:62:
05:cf:a9:dc:bb:0f:a4:2f:18:f0:c9:83:5b:9a:26:
98:22:48:f3:1d:1a:35:71:8d:35:05:f1:71:fc:c2:
7e:10:12:f3:43:cb:79:62:35:0b:98:83:cf:6c:39:
07:b0:0d:ad:06:f6:81:e8:49:0e:e7:fc:84:87:9c:
07:90:c3:c1:ca:6b:09:2f:5e:a7:7e:0b:33:b0:95:
3b:9b:a5:db:8c:08:53:56:1a:8d:66:eb:71:31:af:
b7:c4:4d:39:5f:1d:83:bf:ca:63:63:e9:b0:c5:63:
ca:d9:13:ba:54:15:28:be:4c:be:02:c1:4a:c1:0f:
6a:ca:67:e5:fa:22:c1:4c:21:bf:40:70:4e:e5:56:
47:99:3a:9f:39:8e:c3:e1:35:f7:38:a0:dc:36:50:
8a:8a:9a:25:2b:d9:3b:fd:9a:d7:cb:bb:0a:08:99:
58:1e:db:ca:ba:9b:fa:2c:45:73:58:91:96:2d:58:
83:99:5f:2c:bf:6f:da:4e:cf:56:19:14:70:af:e7:
ee:90:f4:df:30:c4:42:a0:ca:3f:b8:00:fe:84:f6:
c8:87:50:16:40:67:04:61:5a:17:1c:3a:16:37:da:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:A1:69:B2:72:24:92:5A:E8:2B:83:B8:6A:7E:00:F1:02:D9:A1
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d4:82:c5:9b:57:d8:63:03:03:f9:b8:9f:46:9c:88:33:98:
75:6f:73:49:a3:0a:b4:87:a0:4b:63:d2:4a:9e:0c:4d:e9:4c:
a2:54:34:1a:a5:23:22:77:4d:4d:c6:51:89:3c:ac:7d:ce:de:
4f:58:1e:0d:57:d3:ee:9e:c4:90:1d:f3:36:5f:78:fd:92:af:
b1:e8:da:08:c7:c9:02:9a:28:84:90:6c:cd:3f:ee:16:0d:3d:
db:1f:39:85:41:b1:39:f5:ad:9a:95:17:4c:73:3e:c0:a1:d1:
03:6a:ef:e3:9a:96:7c:6b:8f:89:79:dd:e1:ee:61:b7:40:34:
97:a7:41:8d:0c:00:73:9d:49:31:ed:a3:e6:c9:5c:9d:81:83:
41:ec:6a:11:b4:b8:a6:df:24:8c:6f:b5:9f:da:28:bd:f2:b7:
42:68:f9:b9:32:87:22:24:1f:00:45:0c:97:d7:5f:d9:49:4f:
3d:91:95:ef:40:ab:b8:be:08:59:04:5a:80:ed:26:32:48:84:
79:74:e3:9a:53:47:53:4a:ae:68:70:2f:fb:66:f5:7b:5f:03:
30:9a:b0:c9:3c:ec:9c:4f:27:cb:d3:99:28:d5:df:35:61:80:
f8:64:6a:fd:49:d4:d9:e6:a1:2b:ed:c2:5d:63:7a:bd:b8:47:
dd:cc:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:08:01 2025 by rpki-client