Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: QVzEecbY0puWCulyOjaYd2dnbHOsX1UH/vaHG6Y4PNw=
Subject key identifier: 92:C9:99:53:F2:85:F9:FB:2E:FF:E7:92:6F:15:78:5E:B9:16:DB:1A
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019A20D20E41E9FEFAF1B84E3D62993D3B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 14:00:28 +0000
Manifest this update: Sun 26 Oct 2025 14:00:28 +0000
Manifest next update: Mon 27 Oct 2025 14:00:28 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: yhwZofL1Ane7wRVMl/dXa9laLfEUhSkLjN5iXQXXiCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:0e:41:e9:fe:fa:f1:b8:4e:3d:62:99:3d:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Oct 26 14:00:28 2025 GMT
Not After : Oct 27 14:00:28 2025 GMT
Subject: CN=92c99953f285f9fb2effe7926f15785eb916db1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:c5:b2:c1:12:0e:72:b8:94:94:f2:6d:95:
c5:35:ac:a5:45:60:1f:77:e5:e0:cc:ca:fd:66:07:
4b:17:c7:d8:66:12:da:25:2c:ec:80:ff:6c:d7:32:
90:04:34:d8:12:5e:52:4b:03:08:cd:f1:a6:5f:85:
a3:1f:a6:8d:e9:da:aa:79:16:bd:f8:4d:55:66:3b:
f7:d6:f0:46:b8:d1:74:f8:30:df:ee:ba:12:bb:71:
e2:2c:62:55:27:35:00:bc:5e:92:d4:a2:7a:a6:0a:
6e:63:58:69:c9:cf:32:b9:c3:86:4b:65:1c:69:2d:
7e:c9:66:56:dd:86:d2:4e:9e:e7:8b:bd:52:0b:a7:
5e:79:b8:5f:9d:81:6c:7e:5e:35:84:92:2b:d3:7f:
41:56:ea:19:e3:98:79:f4:b4:00:d8:08:cd:c5:05:
91:dc:d4:ac:91:e8:78:59:8d:ca:5a:9c:e3:b8:7e:
b2:c5:0b:91:fd:a5:37:6e:89:a1:07:cf:d2:88:f7:
36:56:82:9b:07:38:3e:b7:b9:f9:c6:b8:08:ee:1e:
ed:a6:ae:8a:05:f6:ec:a0:87:32:bf:f7:66:28:bc:
a5:b6:41:bc:6f:01:08:7e:3f:5e:87:ac:4f:5d:fd:
4b:5d:5e:25:2e:ba:76:ac:3d:a8:3d:89:22:38:4c:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C9:99:53:F2:85:F9:FB:2E:FF:E7:92:6F:15:78:5E:B9:16:DB:1A
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8b:97:9a:fb:f5:6a:2a:55:20:c7:14:1a:2d:01:bc:09:6d:
ba:23:d9:13:37:c7:5a:64:a5:84:f8:c1:de:12:15:95:70:bb:
d3:03:59:ef:2a:e6:94:a9:bb:e8:30:43:06:aa:ea:79:a5:43:
e4:51:6e:b2:eb:cc:95:7e:75:fb:1d:cb:e6:d4:2b:43:d4:79:
d3:f1:e9:53:2c:11:e7:16:fe:65:07:11:86:d5:b6:b1:d9:2d:
1c:eb:e0:9b:19:fa:ef:65:e1:94:9a:f6:69:ca:e7:38:a2:f8:
f5:b3:ae:aa:e1:c6:74:06:21:ae:86:62:c4:15:ce:26:72:6d:
a5:bc:9d:05:d6:53:85:af:53:64:16:91:2e:94:54:b9:5e:12:
09:6d:58:17:98:b1:1c:25:0b:04:1c:cb:20:42:31:2d:be:14:
48:83:1e:a0:6f:08:09:59:5d:e1:05:21:49:ad:25:a0:ec:49:
5f:0b:2b:52:10:e7:19:86:2e:09:ff:37:df:ed:c8:a5:38:10:
d2:fd:cb:94:b2:90:ed:2e:3f:a8:37:8d:22:5a:51:a3:e9:6a:
36:aa:c1:19:3b:40:8e:bf:6f:38:ee:79:f2:18:5d:af:e6:33:
c0:6f:40:90:91:7c:7f:d3:03:2b:99:c0:65:f4:79:0b:fe:ca:
42:3c:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:14:39 2025 by rpki-client