Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File: abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier: 6D78RT9LB9X4RpHiMnA2iDnKjdxBcTXT8NOV0XY0xrs=
Subject key identifier: 03:4E:73:FC:E7:BB:2C:A8:06:77:77:5F:C4:21:15:FD:44:FC:CC:B2
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer: /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial: 019A22F7C9C684CAB9857457A703904A0375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number: 21
Signing time: Mon 27 Oct 2025 00:00:55 +0000
Manifest this update: Mon 27 Oct 2025 00:00:55 +0000
Manifest next update: Tue 28 Oct 2025 00:00:55 +0000
Files and hashes: 1: R7q2gktvFsNXXsx_b10S5ynAXaw.roa (hash: +bf2vfop1BjTPFaIwsRZHC/bhXQwlqn19Fh+mJR9npc=)
2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: 1MBpimLBBRd7DyxbkP57h0+EzY8twoVnxLDROBVbCw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:c9:c6:84:ca:b9:85:74:57:a7:03:90:4a:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Validity
Not Before: Oct 27 00:00:55 2025 GMT
Not After : Oct 28 00:00:55 2025 GMT
Subject: CN=034e73fce7bb2ca80677775fc42115fd44fcccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:18:92:86:a7:df:7f:18:be:82:5e:d5:72:09:
67:ae:a7:0e:41:98:2c:32:1d:82:0b:44:ab:98:bb:
f5:74:78:ef:f0:65:95:b3:a6:1a:86:3d:a6:71:e7:
96:08:40:a5:92:9b:01:70:73:0d:36:62:ce:de:e9:
0e:63:a6:ba:c7:bd:bb:1c:3f:5f:de:9e:c9:89:58:
f9:7e:a9:9e:7e:8c:ed:00:f0:e7:b3:d2:60:9d:b1:
9e:dc:92:46:50:85:18:e9:85:7b:7b:f8:8a:a5:06:
f9:b3:5d:b2:b4:2f:3a:06:61:90:51:ed:ee:79:95:
31:7e:86:af:61:29:9b:53:a9:15:ad:57:18:97:d0:
b6:90:1c:f6:df:55:2e:5e:96:50:4d:ad:2f:b7:81:
bb:fc:50:53:cf:49:05:90:d0:e6:6c:34:bb:4f:97:
2f:d8:3a:b9:a9:c4:f2:a9:d5:3a:07:cb:f3:eb:82:
cf:ff:df:40:82:a3:78:f3:53:fa:2f:6e:b6:46:fc:
49:b2:95:80:58:b3:66:a0:14:62:8d:c2:6f:94:3e:
0c:11:94:16:13:58:a3:62:3c:54:b2:ce:fc:e7:92:
08:0e:83:81:52:b9:e4:6d:05:e4:e7:e5:bf:e4:9a:
8b:e0:47:3a:3c:a0:dd:78:65:e4:c7:c1:22:9e:2c:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:73:FC:E7:BB:2C:A8:06:77:77:5F:C4:21:15:FD:44:FC:CC:B2
X509v3 Authority Key Identifier:
keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:33:89:67:d0:8d:f7:20:a0:ca:c5:40:81:5b:76:bd:92:6d:
ed:49:1f:ff:36:13:3e:e2:ea:d2:00:9c:05:70:94:72:47:62:
4c:3c:92:b0:8c:0b:98:59:39:5f:4f:d2:89:2c:82:c1:1d:10:
ab:28:2e:87:b4:3c:cc:66:a2:7d:cb:dc:be:e8:e3:22:78:ea:
2a:cd:32:75:a0:06:ca:71:42:68:29:2f:82:fa:e8:31:bb:2e:
10:c3:3a:d7:48:3b:17:9a:11:d4:28:0f:5e:a4:59:96:8c:0b:
ab:74:cf:49:f8:e3:e1:58:81:85:63:c3:69:ad:cf:b1:9c:b8:
99:22:a8:20:00:0b:14:5b:54:95:c7:4f:44:32:91:62:52:a9:
d4:9c:d0:65:01:14:6b:83:9b:61:3e:9e:71:8d:3a:76:32:41:
24:4c:a0:1f:18:49:62:16:35:48:1b:da:90:d4:54:8a:43:5d:
b6:9a:05:16:79:df:89:f6:03:09:f1:53:79:f5:c7:aa:aa:d6:
13:35:65:32:18:0e:0f:6e:a1:8d:4a:c0:e7:74:1b:c8:c3:4b:
04:14:56:e5:a6:1d:b9:61:a6:30:18:ca:76:1c:ba:ff:cf:7a:
58:5a:3c:c1:36:22:a7:1b:72:2c:00:e2:92:c6:d4:0c:9f:1c:
cf:21:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:54 2025 by rpki-client