
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier: TCn4bFBwmh9XCvubO16/6RVYVhXUcRauP0eR1BsYkXk=
Subject key identifier: F8:8C:ED:52:C9:70:DB:E1:C2:94:ED:25:9D:13:A0:E1:B0:B2:74:84
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer: /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial: 019A71B7F968486B5AD7CCFAF0401C5A43C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number: 1462
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: ly3xvszwuHb43cztFN1UVV+mfRWkbzTG+j4gtLnREow=)
2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f9:68:48:6b:5a:d7:cc:fa:f0:40:1c:5a:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=f88ced52c970dbe1c294ed259d13a0e1b0b27484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:a3:8e:a0:7a:b3:b2:81:2a:23:59:c2:13:
d0:08:a7:61:09:9e:88:8b:6d:e0:d1:c3:91:3d:ba:
8c:c1:31:ab:49:b0:e4:ee:7c:e4:fc:1a:fe:1e:1d:
4d:41:3a:0c:62:17:1f:d5:e7:95:68:46:2c:7f:a1:
00:e9:e9:e0:80:b0:cd:af:dc:24:48:42:3a:d5:79:
05:45:db:0f:17:51:bd:a6:c1:98:ba:1f:fb:a6:5e:
2f:bf:d5:b3:95:93:5d:c4:29:17:68:b7:86:0f:df:
48:42:68:be:21:d4:1e:d2:ae:91:ef:23:6f:3c:d6:
45:b9:47:36:eb:af:7e:16:cd:5d:e7:e1:5c:83:5c:
c4:54:a1:98:fc:f8:26:22:70:e7:4c:69:cb:cc:7b:
82:57:ab:42:ee:0d:af:8a:15:f8:f8:91:7a:e3:43:
9e:4d:1c:ec:4b:8a:5f:91:d1:21:79:0a:6b:17:5a:
67:91:6f:5a:af:81:e3:c6:04:0a:cc:a9:81:54:e9:
ca:3d:2a:f0:9c:06:f0:77:27:b7:96:20:5b:d9:67:
c3:2c:e7:16:98:36:e0:c9:76:eb:2f:f2:09:aa:aa:
af:09:db:8d:82:5c:45:91:26:e5:1a:c8:18:74:16:
2d:4d:40:9c:18:15:a1:d0:1e:fe:27:e1:49:9b:a3:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:ED:52:C9:70:DB:E1:C2:94:ED:25:9D:13:A0:E1:B0:B2:74:84
X509v3 Authority Key Identifier:
keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:50:8f:8e:c3:d5:07:b8:cd:10:52:0e:db:24:97:51:3b:48:
0b:a8:72:64:9c:f6:06:bc:07:d6:65:ca:2b:5d:7d:af:03:00:
a3:e8:58:09:1a:13:52:3b:f5:99:98:c4:3f:22:5c:31:c2:66:
28:bb:c1:b5:72:dd:73:a4:d0:fb:41:73:df:ad:0a:4d:07:68:
a7:f7:5f:ad:25:ea:9e:c0:9a:8c:67:bf:49:e6:19:8b:58:e0:
8a:2c:c1:7a:00:9e:61:22:20:f4:1b:90:b7:9a:f5:a6:c8:2a:
47:ef:71:c1:d6:f9:11:c2:2f:86:6a:f6:98:e2:b6:ca:93:3e:
1c:3b:4c:ec:39:01:a3:14:22:f7:d3:4f:87:4e:e3:f7:35:11:
7a:61:ef:ad:3e:9d:db:e8:30:97:9b:d5:53:f6:f1:fa:97:f1:
dc:cd:5f:72:71:3b:ef:71:dc:42:28:fd:54:bd:dd:c6:ce:28:
ea:1c:a7:17:ed:da:16:1c:a5:2c:fa:2c:22:78:d6:ac:d7:ec:
11:2b:55:93:8f:34:d9:46:ba:0a:3f:49:84:89:22:67:c0:12:
4f:98:6a:f8:35:75:2d:39:75:f3:84:01:1d:49:0c:c9:d4:69:
92:9d:e9:e2:03:10:31:0f:b5:f8:0f:23:ab:9d:a2:77:0a:43:
c8:aa:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:19 2025 by rpki-client