Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: Yk/U+OGONyHxIgDM+JlkSSX08TKBJ9CuVQXAcdK3vIU=
Subject key identifier: F8:43:D2:78:5C:80:58:8F:D5:55:DD:78:76:71:D7:3C:42:1D:E2:05
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 019923D5A901AB268965852C6A9477C416DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 10E5
Signing time: Sun 07 Sep 2025 11:00:28 +0000
Manifest this update: Sun 07 Sep 2025 11:00:28 +0000
Manifest next update: Mon 08 Sep 2025 11:00:28 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: g4sLksI6yHOAGGe3gLnMCNifyTGYVtZdvWhYNtDjCnY=)
2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:a9:01:ab:26:89:65:85:2c:6a:94:77:c4:16:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Sep 7 11:00:28 2025 GMT
Not After : Sep 8 11:00:28 2025 GMT
Subject: CN=f843d2785c80588fd555dd787671d73c421de205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:0a:76:c0:bb:68:f1:a5:f4:ab:5d:66:72:
11:6f:fe:38:8c:a2:af:8e:ce:1b:8a:08:3e:14:2b:
9d:d0:55:d1:8e:3f:89:92:cd:c2:71:1e:52:e0:5d:
48:29:90:a6:32:4c:d3:42:ca:44:c9:fd:12:75:8e:
a7:07:61:31:33:0f:61:4e:8d:23:7f:34:4b:66:e3:
2e:d2:1f:08:58:f5:e8:7c:c7:20:0c:de:ec:e3:6b:
db:b8:05:73:06:33:2a:a1:cc:99:76:98:ca:52:23:
a8:52:1f:9e:eb:c0:00:45:cf:99:d4:14:37:91:2b:
78:a5:21:4e:e5:86:81:b2:0b:0d:3b:22:68:a9:96:
04:01:dd:51:c4:ee:89:bb:ee:5d:ba:55:9e:da:9e:
77:f4:81:0f:69:97:c8:0e:79:c5:c3:34:78:0f:e2:
d3:9e:b6:06:bd:13:0e:95:49:37:3c:28:3f:c1:f2:
b5:98:25:e6:9f:ad:70:a1:6e:d2:36:5d:5c:8d:40:
c2:64:04:47:c2:7c:4d:39:e1:ba:f1:7e:52:dc:74:
7e:53:b0:9b:f2:26:18:72:ac:79:38:fd:0a:f8:78:
e4:3b:ba:6a:9a:8a:72:45:c0:1c:9b:c2:06:bc:9d:
65:f4:f0:26:ea:8a:ab:b8:76:75:0e:9e:af:8e:37:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:D2:78:5C:80:58:8F:D5:55:DD:78:76:71:D7:3C:42:1D:E2:05
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7e:98:7e:74:88:08:b4:18:78:0f:39:5f:4b:65:88:e6:e5:
b4:17:29:8f:92:6b:ba:91:03:2c:43:f4:7b:27:7b:6c:8b:bc:
66:70:11:1f:75:55:5f:99:0f:c2:d2:db:24:41:7b:f5:e4:57:
ec:cc:b1:c5:03:7f:78:22:88:f9:6a:53:89:c3:15:24:27:13:
41:1f:d6:65:f8:56:67:e8:f2:c3:e9:47:f6:94:73:05:de:dc:
d7:4d:86:cb:b8:c9:ac:04:34:da:38:3a:a2:99:c1:fb:59:7d:
ed:5a:19:84:7b:1d:4d:4d:b8:ed:b7:e5:3d:d6:22:cc:36:6a:
d9:7e:aa:79:c5:73:d7:47:ef:c5:fd:cf:79:5d:9f:20:b0:47:
de:9f:67:df:e8:df:a4:8f:4d:4c:89:1e:86:e8:13:28:7e:c4:
72:ca:fd:c7:dd:3b:8b:fa:d3:a5:6f:cb:13:e0:1a:31:c0:20:
6c:c9:b8:67:cf:96:e4:ee:44:d3:04:ff:31:d9:5a:ea:7f:6a:
2f:56:5e:c9:ce:66:05:f3:8b:e0:03:0e:b1:5b:67:c9:05:3a:
c7:05:2c:d4:9c:9e:39:59:a2:3d:cc:37:f5:be:07:ed:7f:84:
a8:cf:8c:81:93:18:51:5f:af:5d:25:c4:56:96:1d:5a:45:e0:
ce:4a:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:18 2025 by rpki-client