Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: 6cECIypQl6KKEyvYoP4bwb+fvC1KRHdPHkXnw8a2Hzo=
Subject key identifier: C7:74:D8:75:F4:7F:75:25:C4:3A:A9:F4:3A:8F:E7:58:1E:5B:B0:6E
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 01993725A17410BBB4165E6238EA2931D209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 05:00:36 +0000
Manifest this update: Thu 11 Sep 2025 05:00:36 +0000
Manifest next update: Fri 12 Sep 2025 05:00:36 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: jgMxMBJ9lkyadWabipB6bcWpSzuXHMD2wcWG2alrxx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:a1:74:10:bb:b4:16:5e:62:38:ea:29:31:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Sep 11 05:00:36 2025 GMT
Not After : Sep 12 05:00:36 2025 GMT
Subject: CN=c774d875f47f7525c43aa9f43a8fe7581e5bb06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:66:12:78:a5:71:be:67:b6:db:64:20:46:
29:62:d7:4c:a1:05:df:26:26:39:48:13:64:99:bd:
47:dd:2f:e2:9d:c2:a8:0a:75:5a:35:e1:e4:06:11:
a5:40:a2:85:dc:19:6d:33:83:5a:c2:ae:fc:a4:79:
15:27:a9:6d:1c:12:5f:78:61:7f:bc:08:46:9d:f1:
1e:85:df:73:cf:18:43:64:9e:23:89:36:7f:3e:61:
70:3e:36:1c:6d:7e:52:ad:22:56:7b:15:bb:d4:32:
7d:ce:92:d7:58:3f:55:1c:85:41:df:44:ad:b7:21:
a7:a0:d1:78:1b:6e:ce:6e:f9:f9:54:32:9e:55:31:
6d:e0:3d:e2:57:09:80:0c:cc:3c:77:5a:d5:f6:bd:
44:3d:f6:43:51:42:05:65:1f:9c:02:0d:92:4e:ea:
4c:59:78:fd:7c:0b:a5:ec:76:9e:b2:97:0c:b7:23:
6b:b7:79:1f:d0:b2:be:98:e1:d1:17:1c:8d:0f:36:
a8:56:b6:d4:b9:3b:de:ed:da:23:e7:00:b3:69:de:
91:7b:7d:d8:39:c5:12:9a:62:a4:18:d0:51:b9:be:
49:c8:2c:51:44:4e:04:df:d0:86:09:89:ee:0b:d8:
5c:f4:77:0c:27:04:ab:35:e6:ea:24:7d:a2:0e:da:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:D8:75:F4:7F:75:25:C4:3A:A9:F4:3A:8F:E7:58:1E:5B:B0:6E
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ff:a5:03:b7:db:fa:d1:5f:f7:ee:16:3f:1c:69:a1:1c:fe:
95:1c:5b:7f:3e:15:7a:87:80:28:38:76:8b:cc:4f:95:b9:d0:
3a:07:5e:74:06:b7:ec:b0:48:b8:c9:f0:8f:8c:c7:b8:45:cb:
d1:d5:24:74:65:88:80:16:c2:5f:fe:da:be:28:4b:81:02:10:
a5:54:93:24:b9:38:21:56:07:34:ed:4e:2c:97:82:ff:3e:39:
e3:7f:c4:ad:fc:2d:ef:8a:8b:7c:45:9a:17:2c:ee:0c:8d:71:
09:12:f1:eb:65:6c:af:20:35:47:17:7a:85:c0:36:f4:64:40:
cf:f2:0c:8b:c4:92:b9:78:6a:bf:ad:49:55:c2:40:dc:05:91:
fa:cf:b9:4c:34:e1:a5:5c:6f:3a:a7:e1:d2:be:01:3b:df:9a:
ca:6b:b3:a1:0e:4e:db:0f:66:69:4d:8a:c8:6c:76:88:bb:53:
f3:e7:e2:23:ac:d5:d9:7e:c3:b2:82:d9:5a:6d:ed:94:45:b5:
7d:6a:2f:fb:54:94:74:2f:f1:4e:aa:a4:24:7c:fa:48:92:d1:
5b:2b:d4:91:f7:25:bb:46:b4:7b:38:ab:fb:36:ec:66:5a:f0:
7e:ce:20:de:f8:8f:c1:99:68:71:26:25:ad:fb:1f:77:dd:e1:
fa:46:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:11:09 2025 by rpki-client