Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
File: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json)
Hash identifier: GBwK4Cp7RsPbBq84jmvnpRyrJ1xE9P8UX4FlL+OPc0E=
Subject key identifier: AE:AF:CE:9F:4D:F5:CB:C1:1B:EE:7F:97:9F:C7:95:40:36:2D:FB:2B
Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
Certificate issuer: /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Certificate serial: 019A725CF600FE4F3968EE24F446D68430C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
Manifest number: 0D91
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: vTpVMhbrxnzp+pZUB7Lvx+3a+fBLJDIj+g8EmXPHguI=)
2: BvIKnOZDDnJ3fYjwKb9MPS2VREA.roa (hash: 6YHj3YUhTYKgioEXOjY6pW/I1gB2DwKxLtlbSUJymPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f6:00:fe:4f:39:68:ee:24:f4:46:d6:84:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=aeafce9f4df5cbc11bee7f979fc79540362dfb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:8f:65:ae:5d:db:ac:eb:38:9e:58:54:4a:
ab:07:c4:e9:9e:70:db:9e:70:2d:3c:e7:8d:ba:a8:
31:49:32:ee:12:09:94:83:7d:57:f8:62:fd:da:07:
f5:2e:e8:41:11:3b:b1:23:90:2b:c1:8f:12:e3:87:
a1:db:ec:10:83:ea:dd:11:b6:e2:42:69:83:79:d7:
c4:88:b4:95:d3:bd:b1:8c:da:62:4b:0e:45:4d:b6:
0c:f4:da:c4:13:ab:0a:4e:c7:13:35:cc:cd:52:3e:
5c:06:22:d1:1d:b7:53:59:f3:68:9e:67:bb:19:32:
f6:d1:0d:4e:e6:fe:94:d1:35:24:21:65:45:da:40:
de:b3:bf:01:e6:66:a9:c1:51:86:12:97:9f:c3:74:
10:f4:ea:f2:05:95:8e:e0:dc:bd:15:8a:37:1e:37:
b3:a1:c6:44:48:43:53:5a:cb:20:65:ea:1e:a9:11:
26:9c:90:95:67:cb:46:23:3d:58:22:f8:d8:ea:c2:
eb:5d:4a:d2:34:a6:85:32:d1:48:68:bb:f4:3f:07:
11:4e:51:a3:60:e3:ce:f3:2a:34:26:bf:27:9b:55:
8c:8e:b3:9c:8e:67:a4:97:d3:ce:65:f7:46:98:c4:
79:f4:23:2b:cb:d1:0a:e2:0d:d7:b4:45:03:c4:1c:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:CE:9F:4D:F5:CB:C1:1B:EE:7F:97:9F:C7:95:40:36:2D:FB:2B
X509v3 Authority Key Identifier:
keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:64:ac:12:59:89:4c:fe:32:fc:b6:b5:c8:87:51:f7:b5:
8b:60:95:a0:30:0f:b1:d7:c1:9d:60:85:b0:cd:cd:a3:41:57:
52:7a:2f:21:2a:76:50:38:e6:2f:48:8e:c0:16:fa:dd:62:1b:
86:c3:52:49:9d:c4:ac:4b:7b:c2:41:a5:78:fe:1d:a4:5d:73:
10:e5:6c:4c:42:06:f9:c4:af:e3:1f:36:65:8f:03:e8:a6:ac:
2f:24:0e:f0:59:82:9a:20:ea:54:53:84:8f:91:ac:3f:54:de:
f8:49:90:56:f0:73:33:9f:18:9f:39:8e:75:62:4c:bf:2b:cd:
ce:e1:95:db:f8:52:aa:21:8d:18:06:4f:8a:cc:89:f9:a9:fe:
65:3a:d6:2d:a4:a7:ad:33:2b:74:96:45:5d:2e:f4:73:ee:d2:
4f:27:70:fd:ee:21:e7:2c:55:82:07:ea:60:d5:c5:3b:21:e4:
1d:e6:e2:c7:b2:40:f0:28:5b:9c:a2:c6:f9:c1:00:f1:a7:0c:
9f:a8:07:4d:de:92:53:4f:c1:6e:06:7a:8a:da:23:81:b4:e2:
2d:46:c0:38:4f:9a:c0:7a:fc:90:02:53:cf:0c:d4:0b:0f:75:
e4:75:ab:d7:e5:77:a0:27:e2:70:cf:d2:cc:7a:68:de:7d:59:
72:37:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client