Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
File: aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json)
Hash identifier: jWMRIUHJtbTyWgc9jTMANXkI7vQ4WpNEYlezKJyYWrU=
Subject key identifier: A7:8C:41:41:41:0C:49:25:8F:66:D1:71:2F:14:C4:EA:F5:FC:38:06
Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
Certificate issuer: /CN=681146303f5751ec0dfc2ef547aab247af4e681f
Certificate serial: 019A71B86C8B532E36F5D047620CFE17AF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: LgYd4OXep7oHs6dZpP51I5vQLavx/YoqpgwoMnt/OfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6c:8b:53:2e:36:f5:d0:47:62:0c:fe:17:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=a78c4141410c49258f66d1712f14c4eaf5fc3806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:da:70:6a:43:ec:70:37:04:98:01:f2:dc:
4a:bf:f9:3b:df:c3:72:ef:80:39:6f:29:86:7f:ee:
f0:a1:de:52:8e:60:04:25:77:97:0b:a5:48:cb:df:
bb:74:8f:85:21:a7:38:1d:09:26:be:71:20:7b:1e:
64:19:80:e0:4c:25:18:53:82:b6:1c:36:4d:8b:dc:
04:17:58:57:fa:4e:d7:ee:be:8f:c8:d6:16:1b:10:
ea:a1:46:57:47:26:00:aa:8f:d7:58:45:3f:66:30:
a4:9b:aa:df:78:3a:e2:aa:a4:c5:4d:31:4e:5a:de:
ad:70:4f:61:9f:52:92:69:35:84:68:dc:54:cf:ab:
e7:74:27:e8:64:a8:a2:c6:3d:10:c1:39:3c:f5:19:
32:ef:f0:57:50:6e:75:fd:b4:ae:30:77:d1:a9:e0:
70:94:8d:96:d3:a9:ed:ee:0e:0a:2c:9c:e9:09:8d:
c0:37:1c:8f:9b:b5:24:f4:ee:59:58:de:b7:52:aa:
ae:60:3f:1c:32:39:54:4e:e6:9f:e8:ac:79:98:14:
a6:e3:0e:8d:44:9c:d6:23:02:2b:b5:c7:61:0b:b9:
2a:b2:78:dd:3e:b0:1a:a6:00:dc:aa:66:04:08:9e:
ac:57:5a:7a:63:47:b7:bc:e4:fe:fa:85:52:dc:44:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:41:41:41:0C:49:25:8F:66:D1:71:2F:14:C4:EA:F5:FC:38:06
X509v3 Authority Key Identifier:
keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:95:10:89:19:b1:4f:6f:c3:67:7d:c0:d6:5c:43:83:e0:
02:b2:98:ce:f6:13:a2:f1:68:d3:6a:dd:1c:fd:ee:60:a5:9b:
4d:a5:ab:da:5a:6c:58:1c:b8:bc:ce:4b:71:33:c2:c9:df:4a:
d4:e1:e0:46:d1:b3:81:b6:c9:b8:54:98:6f:8e:de:c9:ba:92:
26:63:ec:7e:7c:33:79:98:9b:aa:12:04:d5:39:b2:20:94:06:
31:69:fc:5f:03:82:70:f2:bd:93:dc:f1:1b:ab:2d:37:0b:92:
d0:71:71:84:46:c3:bf:b1:84:51:ce:14:9f:48:4f:06:da:e2:
55:bf:e0:9b:7d:a2:fa:fe:cd:62:9a:b2:69:08:16:66:4a:f6:
38:7b:59:4f:ab:2c:53:6b:a8:a5:e4:59:cd:53:70:6b:fd:29:
83:37:26:2d:ff:1f:22:f1:65:2c:5c:b9:86:f2:9c:6b:37:c5:
59:34:33:e2:f2:b8:78:f5:41:12:10:c1:2f:e9:62:29:1e:38:
bc:bd:69:57:7b:77:59:62:19:6b:17:75:7a:7b:ff:a9:bf:ba:
42:e6:e2:13:94:56:af:39:6f:4a:a5:bc:dd:6e:b1:7c:65:d3:
0b:e9:ad:03:9a:e1:c3:e6:ab:d2:42:17:71:6c:3e:76:59:fd:
f8:12:e2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGyLUy429dBHYgz+F69zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTE0NjMwM2Y1NzUxZWMwZGZjMmVmNTQ3YWFiMjQ3YWY0
ZTY4MWYwHhcNMjUxMTExMDcwMTQzWhcNMjUxMTEyMDcwMTQzWjAzMTEwLwYDVQQD
EyhhNzhjNDE0MTQxMGM0OTI1OGY2NmQxNzEyZjE0YzRlYWY1ZmMzODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9nacGpD7HA3BJgB8txKv/k738Ny
74A5bymGf+7wod5SjmAEJXeXC6VIy9+7dI+FIac4HQkmvnEgex5kGYDgTCUYU4K2
HDZNi9wEF1hX+k7X7r6PyNYWGxDqoUZXRyYAqo/XWEU/ZjCkm6rfeDriqqTFTTFO
Wt6tcE9hn1KSaTWEaNxUz6vndCfoZKiixj0QwTk89Rky7/BXUG51/bSuMHfRqeBw
lI2W06nt7g4KLJzpCY3ANxyPm7Uk9O5ZWN63UqquYD8cMjlUTuaf6Kx5mBSm4w6N
RJzWIwIrtcdhC7kqsnjdPrAapgDcqmYECJ6sV1p6Y0e3vOT++oVS3ERgCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeMQUFBDEklj2bRcS8UxOr1/DgGMB8GA1UdIwQY
MBaAFGgRRjA/V1HsDfwu9UeqskevTmgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTM4ZGMtMDBjNC00NjgwLTk5NDQt
NGEzNzMzZjQ3MjJiLzEvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kOTM4ZGMtMDBjNC00NjgwLTk5NDQtNGEzNzMzZjQ3MjJi
LzEvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYGVEIkZ
sU9vw2d9wNZcQ4PgArKYzvYTovFo02rdHP3uYKWbTaWr2lpsWBy4vM5LcTPCyd9K
1OHgRtGzgbbJuFSYb47eybqSJmPsfnwzeZibqhIE1TmyIJQGMWn8XwOCcPK9k9zx
G6stNwuS0HFxhEbDv7GEUc4Un0hPBtriVb/gm32i+v7NYpqyaQgWZkr2OHtZT6ss
U2uopeRZzVNwa/0pgzcmLf8fIvFlLFy5hvKcazfFWTQz4vK4ePVBEhDBL+liKR44
vL1pV3t3WWIZaxd1env/qb+6QubiE5RWrzlvSqW83W6xfGXTC+mtA5rhw+ar0kIX
cWw+dln9+BLiZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client