Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: XBmdl5x1EomJ2HEQVPRaSqLrcu+lae63W9vUcOme178=
Subject key identifier: D4:8E:7F:90:37:AA:89:34:55:20:17:83:1E:81:F9:AA:E1:C2:48:48
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 019A71EECBB05EB8B23E17A2C5B2A7BC46C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 1192
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: T1hu/B5t2KbqAqdyTfr4In8LPskx+OP6l7AFpWuSAOU=)
2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cb:b0:5e:b8:b2:3e:17:a2:c5:b2:a7:bc:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=d48e7f9037aa8934552017831e81f9aae1c24848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:ee:6b:da:4f:62:86:22:4f:0a:5d:d4:88:
4b:5b:d3:ca:cb:14:74:5e:dc:0a:25:c7:ab:16:36:
80:f2:d7:0b:21:b0:ce:01:49:66:99:53:cf:ce:1a:
51:6d:55:a7:22:26:3e:d1:82:55:b9:c4:b1:62:6f:
89:60:36:09:4d:e1:09:b2:e6:a0:73:be:5d:a4:59:
3e:5b:81:1f:f7:4b:92:9c:28:0e:6a:6e:23:b3:a4:
53:1f:bf:fc:a1:3e:fa:52:35:ea:79:ca:f2:c5:84:
c1:71:23:a6:62:3e:21:87:b4:82:b3:35:26:63:bc:
01:8b:aa:90:45:9e:f7:df:a8:e5:a2:50:bb:74:39:
c3:29:d3:a3:f6:aa:3c:01:f5:8b:e0:ca:e9:aa:e5:
7f:64:c9:f0:23:69:01:55:4b:88:fb:11:d9:b3:58:
a0:d2:1e:98:9c:0b:c0:6e:ea:04:6b:d6:2e:9c:d7:
bd:f2:c4:a7:92:12:86:57:fd:fb:08:a7:c1:bd:5e:
d9:4c:2b:1c:16:7c:f9:fe:77:0c:d6:ea:cb:b5:65:
36:40:b6:ac:5c:db:c7:69:c1:c9:e6:fa:17:af:94:
2f:44:d8:8f:4e:d3:eb:06:d6:9f:03:cd:07:29:88:
d7:2a:54:66:e9:37:99:13:04:32:0e:54:76:31:ab:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:7F:90:37:AA:89:34:55:20:17:83:1E:81:F9:AA:E1:C2:48:48
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:87:66:2a:45:a0:46:bf:56:9a:92:5e:15:95:6e:cb:37:ab:
c3:1a:39:91:78:74:2d:9d:92:6f:2d:76:53:82:31:3f:eb:51:
fe:c8:56:83:6f:72:35:58:05:09:a9:3a:90:27:44:b1:da:05:
23:70:74:8b:b4:88:3f:ec:40:57:79:f2:6f:49:c2:24:cf:62:
7c:d1:fe:92:3d:8f:8f:52:a9:22:1f:aa:c8:ec:4b:78:d3:95:
ab:e8:e8:d6:60:6c:75:2f:b7:84:00:6a:e7:85:58:21:f4:b8:
92:b7:83:4c:7c:bc:1d:bd:7e:79:4a:54:0f:e4:f4:ca:92:0e:
87:7f:90:b3:b7:41:e9:cf:8e:15:e3:1b:71:a3:69:99:2e:c2:
7e:4a:2e:2b:13:9e:4a:b0:38:3e:c2:dd:95:94:14:d4:69:99:
bd:14:ac:cf:00:75:f8:0c:69:98:7f:0c:0e:74:0a:ee:eb:bd:
15:cb:13:a3:f9:55:fa:7d:b0:5d:03:72:db:11:43:1c:c2:9e:
b9:4d:07:d7:59:15:a9:4e:1f:21:92:d4:82:70:20:f6:e2:d1:
93:35:b5:62:17:66:fa:c2:c5:f6:29:8c:17:97:8b:f6:03:e5:
02:28:8f:09:72:99:18:77:e8:2b:e1:03:f5:0c:aa:7b:a9:cc:
01:67:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:21 2025 by rpki-client