Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: 53WZeC6ik6eOexql20sgSzBQk5dC7O+wURFOVxpCSKQ=
Subject key identifier: 18:FC:61:21:4F:2E:D2:CB:21:59:18:34:B1:02:E5:72:88:59:DA:B9
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 0199228CED5DF969D1DF5A77092D58FF0EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 043D
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: 0U1AMWP4vSz0dcQaTryTHH1qV8DJ0ungXrvNciyqslo=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ed:5d:f9:69:d1:df:5a:77:09:2d:58:ff:0e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=18fc61214f2ed2cb21591834b102e5728859dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:3b:c7:75:2d:63:53:2f:98:38:2a:91:c5:
1d:f8:d7:61:0e:8f:f6:40:47:d0:51:07:1f:6d:26:
08:6f:53:1f:ca:aa:da:ba:37:14:cf:4a:77:43:28:
83:d4:b9:c9:b8:a0:7e:b7:07:de:dd:00:4e:8c:d3:
3e:41:ff:e0:d7:c4:95:0a:b8:44:17:c1:20:82:98:
b4:31:3c:0f:19:28:6d:a3:3f:a7:cf:73:c9:45:b6:
e6:ad:42:9b:82:81:96:84:dc:0a:9e:41:9d:9d:c4:
bd:80:f7:64:bd:60:38:b3:e0:ee:43:41:bd:75:eb:
1c:74:9b:5e:06:29:d9:61:ba:43:38:d6:fd:b8:d9:
2f:e8:0c:1d:9e:35:29:cb:e2:6e:1b:94:16:c2:64:
73:e7:07:e5:86:53:7c:e2:3e:64:14:fc:0f:17:e6:
bb:cc:cc:4c:36:0f:8c:01:45:32:4c:97:ba:2d:b4:
84:31:0a:59:c4:46:8a:5c:3f:46:0d:b2:e4:ff:c6:
50:e9:44:8c:05:b6:ee:93:d8:9c:f3:4f:76:26:99:
d7:d6:54:3d:e2:05:0a:a2:3a:7a:fc:1d:57:c8:cb:
45:35:c9:ac:20:dd:d7:cc:80:1b:d3:7c:ad:5b:5e:
e9:6f:ea:1e:ab:d8:35:47:c0:b8:f8:0e:eb:ba:f3:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FC:61:21:4F:2E:D2:CB:21:59:18:34:B1:02:E5:72:88:59:DA:B9
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:40:10:24:e9:f5:57:fb:c2:f8:fb:cc:63:ab:17:6a:53:
28:97:65:11:4e:15:8d:db:01:09:b1:a9:02:99:58:34:04:23:
ce:e6:6f:46:f0:01:0b:0b:29:c0:c1:aa:22:9d:8c:16:c4:87:
23:ae:be:64:38:bc:41:48:2d:3b:0e:04:46:f6:5d:be:66:90:
2e:5a:73:c8:fe:4a:c5:d4:85:82:0d:69:0b:70:d7:31:35:36:
1a:66:5c:8d:04:50:a7:6f:14:a5:ef:66:79:9a:2b:e8:77:b6:
6e:f6:a2:21:c1:e2:db:75:bd:d6:53:9f:dc:7c:ae:f3:ce:a5:
45:fe:0e:9a:fc:ab:5d:37:92:45:c0:29:84:0f:37:49:2e:8b:
c6:7c:c5:34:a6:ba:b1:9e:db:67:54:8b:27:e8:e6:6a:a9:6c:
8f:6d:24:50:af:01:b1:f2:b6:4c:44:e6:e1:86:27:19:01:5e:
8d:4f:08:e9:fa:37:df:2f:a3:78:dc:e2:92:fd:03:93:5d:93:
d5:12:39:b9:7d:e4:75:d8:6f:5f:4a:e1:57:0c:6a:41:9d:b1:
f0:42:92:23:79:5c:91:4c:f4:c8:cb:88:15:e5:1a:a3:10:ac:
85:7b:18:5f:c9:ad:ca:43:b2:b8:3c:76:d9:fe:48:f6:36:6a:
04:16:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:07 2025 by rpki-client