Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: YW+c53mFO4a8znVdyPFtkwEMoLOmbI4L9yPJN+4xkyk=
Subject key identifier: BC:18:BC:52:28:59:27:CF:68:9B:B5:28:A8:C9:93:66:DA:05:A8:F6
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 019A26D45877F1F4851121E8D54066C89D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 168C
Signing time: Mon 27 Oct 2025 18:00:41 +0000
Manifest this update: Mon 27 Oct 2025 18:00:41 +0000
Manifest next update: Tue 28 Oct 2025 18:00:41 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: jR7GKzpmlSCmQla5mnIcK2kEWP2R56YTMlbibK6pihc=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:58:77:f1:f4:85:11:21:e8:d5:40:66:c8:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Oct 27 18:00:41 2025 GMT
Not After : Oct 28 18:00:41 2025 GMT
Subject: CN=bc18bc52285927cf689bb528a8c99366da05a8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:37:b0:62:c2:a5:b7:61:b0:7f:ff:d9:77:
31:58:5c:fa:73:c1:ef:b6:64:9e:5f:25:62:7d:49:
02:5d:26:f3:71:bf:20:96:32:08:34:5e:54:78:7e:
16:7b:3f:0b:fe:47:57:f9:ab:d2:06:e0:30:c2:fc:
0d:3d:bb:f8:06:03:36:45:33:0c:cd:3b:b1:63:ac:
0f:70:c0:27:b6:6e:c0:18:ae:27:5d:e4:c5:6b:3f:
b9:ea:0d:0a:fd:e0:8e:e1:74:57:ac:7f:9b:9e:ac:
39:13:8b:f8:ad:99:cf:e3:6b:3e:b8:70:cd:03:6c:
bc:c6:f6:3f:24:ce:98:7d:2a:d0:0b:93:b2:4f:5e:
2e:98:97:6d:39:93:b0:ab:82:1a:42:97:dd:c3:43:
84:3d:6e:d8:e9:db:39:31:80:43:c4:dc:52:a5:2a:
14:cc:3d:1d:d2:99:1c:36:30:87:bf:c9:85:f8:f1:
80:60:7e:48:6d:17:e8:e9:ac:d7:a8:87:83:18:5f:
bf:32:84:83:5b:72:7b:61:45:05:d3:c1:7e:97:b0:
2c:13:11:46:9e:3e:b5:e4:60:f9:4a:87:30:0a:52:
37:61:92:07:88:49:9f:f9:a9:72:8d:94:8a:3a:89:
9b:1c:a2:49:3e:ad:ba:13:79:14:a1:8a:b6:f3:e6:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:BC:52:28:59:27:CF:68:9B:B5:28:A8:C9:93:66:DA:05:A8:F6
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:c3:e0:90:f0:e3:85:9b:c9:83:c7:fa:81:6b:46:c8:8f:
5a:9a:e4:88:d0:ae:4f:5b:19:c4:ab:d7:96:f2:21:2f:25:0b:
0d:ba:f4:0d:5d:24:f5:35:fb:6c:e9:db:07:02:e8:04:36:ab:
bc:dc:69:0f:54:a4:20:c9:91:27:99:ef:68:00:98:9a:92:6b:
65:76:64:c2:42:c3:b2:bd:84:c1:fe:e4:30:c4:87:e9:93:f2:
a4:02:fb:86:9a:e1:0b:f5:53:ff:d7:1c:6b:4b:c9:d6:50:17:
37:f5:b2:fc:72:38:58:0d:bf:86:4d:ae:fd:d7:33:c5:52:9c:
06:10:38:76:c3:39:cd:62:7b:62:fa:80:9a:0c:29:5d:89:98:
52:1d:ca:24:c0:ef:a6:89:44:62:f1:84:c8:3d:bb:1d:65:e9:
3f:d8:91:e9:cf:99:98:62:cf:d4:81:1c:d2:2e:cf:68:e4:47:
24:52:3c:0a:b0:63:e4:f7:04:32:0e:69:99:e8:2f:1d:51:ad:
c4:65:90:66:1f:28:44:d6:84:85:09:5f:52:43:db:18:7e:67:
0a:bb:af:e1:a1:e2:fc:8f:96:e6:c6:cd:2a:b1:4c:89:5d:10:
be:2e:4d:d4:4b:6d:ba:86:2f:b8:ec:73:be:81:79:33:d5:52:
54:c6:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:25:27 2025 by rpki-client