Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier: 9NW1UHKPq6MYzCfh7evud3imXRfqcoPQOCGuW33sv3g=
Subject key identifier: D9:96:85:02:8F:69:F0:FC:7A:55:0E:3A:CE:8D:ED:70:A7:F5:59:69
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial: 019A23D33DE19A8DE1BB7B1221F8597C726B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 04:00:37 +0000
Manifest this update: Mon 27 Oct 2025 04:00:37 +0000
Manifest next update: Tue 28 Oct 2025 04:00:37 +0000
Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: eOR1xZuoWeP5SypXs1gk3CPr87uZ8wN7q+WTmzfGnJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:3d:e1:9a:8d:e1:bb:7b:12:21:f8:59:7c:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Validity
Not Before: Oct 27 04:00:37 2025 GMT
Not After : Oct 28 04:00:37 2025 GMT
Subject: CN=d99685028f69f0fc7a550e3ace8ded70a7f55969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:64:12:c1:8b:58:6c:e2:f7:99:fa:fd:b4:
2a:5a:36:2b:aa:99:c5:7b:07:84:4a:63:9f:e1:90:
b4:c3:72:ad:82:d9:a7:b8:26:9c:f2:fe:7c:5d:90:
ed:cb:3d:7a:9f:62:69:d0:99:43:6d:0a:c4:c6:7f:
c5:fd:e8:42:51:16:54:6c:5b:f2:53:24:e6:07:43:
d1:f3:fa:49:43:79:a8:a8:38:cf:73:09:6d:19:06:
97:01:ce:be:ef:50:a3:4b:16:42:31:34:e6:62:7b:
e6:41:0f:73:9f:87:45:d7:0d:b3:95:be:3d:47:0c:
a7:57:69:9c:28:8e:5d:c0:85:51:25:a3:b0:17:8d:
5d:ab:76:46:b5:9d:57:c0:b4:6f:5a:b0:f6:95:61:
84:59:cd:c3:24:ee:95:3f:b4:19:84:e4:f7:2e:92:
b7:8f:1f:1e:6f:14:6e:7a:75:34:c2:81:49:e3:27:
2a:c1:17:e0:ff:43:8b:82:c0:59:b4:79:37:e9:92:
ca:20:34:f4:0c:28:2d:c8:d4:a8:5b:ec:bc:95:4d:
0c:0a:dc:84:1c:0c:14:d4:cd:b2:3d:23:80:6e:dc:
c7:61:63:46:2b:74:a2:e7:a1:97:96:11:ce:06:b1:
9f:51:be:af:1a:da:1f:24:c8:7c:ad:fb:fc:ea:68:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:85:02:8F:69:F0:FC:7A:55:0E:3A:CE:8D:ED:70:A7:F5:59:69
X509v3 Authority Key Identifier:
keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:93:b3:d1:94:92:8d:6b:01:e0:d9:e1:77:9d:36:ae:7a:
8e:03:fd:fe:73:1c:b5:20:72:1e:47:69:5c:f9:4b:f2:8d:24:
37:07:64:43:e7:d0:1b:96:db:48:96:48:76:1d:35:dc:e7:07:
45:fb:73:e9:da:74:2d:f7:32:f3:69:a6:b8:be:b4:04:d8:42:
4b:67:4b:7d:82:a3:54:f6:3f:86:6b:fc:e6:a7:f8:62:9a:65:
21:87:25:bd:db:1a:27:47:51:f6:a5:f6:4c:f1:63:f6:6f:f5:
71:52:7c:16:36:41:d0:8e:7c:d4:21:fe:4e:d2:00:a2:57:8f:
f7:87:c2:12:7f:64:55:a9:f0:d7:fe:be:f7:63:cb:9b:f4:ce:
96:bc:7e:5d:ef:8e:09:50:72:7a:73:4a:3b:67:ef:6a:c4:3a:
03:1d:ec:b4:86:85:47:c7:4c:fe:f9:e6:72:48:32:87:ed:26:
ba:dd:63:b7:03:c4:a0:f8:e2:40:48:8d:cf:21:ad:e5:9a:b1:
ff:6e:a6:f8:c5:87:ed:0b:43:21:b2:76:9a:40:85:7f:39:b9:
70:ed:17:38:e7:fc:da:56:6b:67:d2:04:32:3e:a7:38:34:09:
93:d5:07:98:b6:db:b6:71:3f:02:58:3c:34:26:3a:3d:e6:82:
4a:a9:f3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj0z3hmo3hu3sSIfhZfHJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmFlMzdmOGI0ZTQyZGQ5MGQ5YjE0ZjYwYjI0MTQyODdk
NDFiODAwHhcNMjUxMDI3MDQwMDM3WhcNMjUxMDI4MDQwMDM3WjAzMTEwLwYDVQQD
EyhkOTk2ODUwMjhmNjlmMGZjN2E1NTBlM2FjZThkZWQ3MGE3ZjU1OTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4tkEsGLWGzi95n6/bQqWjYrqpnF
eweESmOf4ZC0w3KtgtmnuCac8v58XZDtyz16n2Jp0JlDbQrExn/F/ehCURZUbFvy
UyTmB0PR8/pJQ3moqDjPcwltGQaXAc6+71CjSxZCMTTmYnvmQQ9zn4dF1w2zlb49
RwynV2mcKI5dwIVRJaOwF41dq3ZGtZ1XwLRvWrD2lWGEWc3DJO6VP7QZhOT3LpK3
jx8ebxRuenU0woFJ4ycqwRfg/0OLgsBZtHk36ZLKIDT0DCgtyNSoW+y8lU0MCtyE
HAwU1M2yPSOAbtzHYWNGK3Si56GXlhHOBrGfUb6vGtofJMh8rfv86mjlQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmWhQKPafD8elUOOs6N7XCn9VlpMB8GA1UdIwQY
MBaAFAG643+LTkLdkNmxT2CyQUKH1BuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEt
ZTdjMzlmNTI5MGQwLzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEtZTdjMzlmNTI5MGQw
LzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuiTs9GU
ko1rAeDZ4XedNq56jgP9/nMctSByHkdpXPlL8o0kNwdkQ+fQG5bbSJZIdh013OcH
Rftz6dp0Lfcy82mmuL60BNhCS2dLfYKjVPY/hmv85qf4YpplIYclvdsaJ0dR9qX2
TPFj9m/1cVJ8FjZB0I581CH+TtIAoleP94fCEn9kVanw1/6+92PLm/TOlrx+Xe+O
CVByenNKO2fvasQ6Ax3stIaFR8dM/vnmckgyh+0mut1jtwPEoPjiQEiNzyGt5Zqx
/26m+MWH7QtDIbJ2mkCFfzm5cO0XOOf82lZrZ9IEMj6nODQJk9UHmLbbtnE/Alg8
NCY6PeaCSqnzyw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 06:29:38 2025 by rpki-client