Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: xay4UvjEuBHDbiqB3R/SWJuepyIKilEHoPE4YOBgS44=
Subject key identifier: E2:A7:E0:81:69:D5:41:1D:CB:EE:3B:3C:D3:1C:61:4A:40:13:73:52
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 019A72936E2351EA04B0B12BB01EC71FB3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 04EB
Signing time: Tue 11 Nov 2025 11:00:55 +0000
Manifest this update: Tue 11 Nov 2025 11:00:55 +0000
Manifest next update: Wed 12 Nov 2025 11:00:55 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: d+4YlB7uUcV4+H/gwQJC+63dOaZU9W5S9+YTuETYH6s=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6e:23:51:ea:04:b0:b1:2b:b0:1e:c7:1f:b3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Nov 11 11:00:55 2025 GMT
Not After : Nov 12 11:00:55 2025 GMT
Subject: CN=e2a7e08169d5411dcbee3b3cd31c614a40137352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:92:2c:1a:d5:03:2c:73:68:a4:0a:be:0c:
5f:a9:31:0a:7f:f5:20:6c:57:97:d3:bc:29:0b:e0:
5e:0f:f9:0d:54:a3:e0:ed:a7:c0:8b:c9:6e:8c:f4:
e4:20:9b:9c:3c:3b:d4:60:16:30:b5:68:92:03:b9:
39:99:ec:04:74:32:42:9f:a8:5b:c7:fc:c9:1a:89:
7a:e3:9e:b7:d0:55:e7:cb:77:5f:c5:0c:78:ce:2b:
33:4e:13:1d:bb:66:8b:ab:2b:29:18:ea:80:45:c3:
9b:5a:f9:36:86:cf:8e:65:72:7d:49:c9:e4:ad:3b:
87:dd:14:8e:35:9c:7c:09:07:ae:71:b8:bc:b2:cb:
31:f9:f9:8f:5e:77:ab:fb:25:f7:7c:e2:3e:40:7e:
9a:b3:3e:e3:0d:7e:e1:82:de:70:a2:05:68:30:f5:
fa:a7:3e:97:b2:83:4c:a5:fc:1a:3c:c1:e3:4f:a4:
03:cb:84:af:77:76:80:5f:b3:03:d8:40:e8:06:82:
5d:c9:4c:87:25:d3:59:40:3e:df:a8:3b:b5:5f:06:
23:d5:99:11:ec:97:d7:0a:b6:78:80:5c:ff:57:45:
95:23:30:35:a5:44:5b:8d:2d:f0:29:2e:84:07:d0:
46:e4:bd:0d:70:e1:4b:38:2f:94:d5:d2:f2:44:82:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:E0:81:69:D5:41:1D:CB:EE:3B:3C:D3:1C:61:4A:40:13:73:52
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:03:5a:2b:49:54:08:9c:83:a0:31:97:3b:c3:ce:a5:be:23:
bc:e2:e0:39:03:23:f3:a2:64:48:88:02:cf:15:e1:21:e6:b0:
25:68:9c:13:e1:a4:0f:7b:62:9d:34:a0:a0:49:9c:ca:2f:19:
f4:16:d2:66:e5:8d:a7:7f:85:c8:a2:94:10:8d:d8:56:ec:5e:
6d:37:11:35:8a:be:30:75:42:3b:8b:78:86:6a:33:2d:e5:7a:
d3:7b:f5:5b:3e:e6:bd:56:1d:ec:1f:cc:47:74:ca:a3:65:b6:
44:20:62:de:51:50:c2:73:1e:ee:b3:79:88:1d:2d:7f:a0:8b:
f7:5c:3d:05:cb:43:78:79:87:e5:04:51:c9:4e:9b:7e:23:f8:
a5:cd:16:3b:98:f5:6a:a6:02:b5:ce:fa:84:13:e5:4b:1f:b9:
2d:48:e3:72:82:f6:bd:b3:9d:40:4b:b8:e0:e5:e0:fb:e3:06:
19:29:45:7b:70:a6:89:bf:38:c5:2b:29:c5:66:90:70:c7:6b:
bc:a8:e6:53:91:cc:7f:5c:dd:95:8e:6c:6a:3a:90:30:82:6f:
8b:0e:b8:1d:bb:6b:14:a2:52:4a:b0:a7:17:f1:ae:33:0c:ce:
3a:2a:c4:5f:52:3a:7f:41:b9:49:70:93:15:ab:ec:06:a7:cd:
40:00:62:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk24jUeoEsLErsB7HH7PjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjY2YzZlOWExNGM2ZmQ3NzNmYTMxZGY5ODIwYjMzOTY5
NTJlMmUwHhcNMjUxMTExMTEwMDU1WhcNMjUxMTEyMTEwMDU1WjAzMTEwLwYDVQQD
EyhlMmE3ZTA4MTY5ZDU0MTFkY2JlZTNiM2NkMzFjNjE0YTQwMTM3MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp2SLBrVAyxzaKQKvgxfqTEKf/Ug
bFeX07wpC+BeD/kNVKPg7afAi8lujPTkIJucPDvUYBYwtWiSA7k5mewEdDJCn6hb
x/zJGol645630FXny3dfxQx4ziszThMdu2aLqyspGOqARcObWvk2hs+OZXJ9Scnk
rTuH3RSONZx8CQeucbi8sssx+fmPXner+yX3fOI+QH6asz7jDX7hgt5wogVoMPX6
pz6XsoNMpfwaPMHjT6QDy4Svd3aAX7MD2EDoBoJdyUyHJdNZQD7fqDu1XwYj1ZkR
7JfXCrZ4gFz/V0WVIzA1pURbjS3wKS6EB9BG5L0NcOFLOC+U1dLyRIIeywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKn4IFp1UEdy+47PNMcYUpAE3NSMB8GA1UdIwQY
MBaAFGm2bG6aFMb9dz+jHfmCCzOWlS4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYt
NDJkYzgyY2NhMTkyLzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZGU3MGQtNzQyNS00YzA3LWE4MGYtNDJkYzgyY2NhMTky
LzEvYWJac2Jwb1V4djEzUDZNZC1ZSUxNNWFWTGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwNaK0lU
CJyDoDGXO8POpb4jvOLgOQMj86JkSIgCzxXhIeawJWicE+GkD3tinTSgoEmcyi8Z
9BbSZuWNp3+FyKKUEI3YVuxebTcRNYq+MHVCO4t4hmozLeV603v1Wz7mvVYd7B/M
R3TKo2W2RCBi3lFQwnMe7rN5iB0tf6CL91w9BctDeHmH5QRRyU6bfiP4pc0WO5j1
aqYCtc76hBPlSx+5LUjjcoL2vbOdQEu44OXg++MGGSlFe3Cmib84xSspxWaQcMdr
vKjmU5HMf1zdlY5sajqQMIJviw64HbtrFKJSSrCnF/GuMwzOOirEX1I6f0G5SXCT
FavsBqfNQABiZg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:21 2025 by rpki-client