Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: Ckwe2SDVQfgBWvpd6/vJCWWGMdvaMLsS+g2tScQYnsQ=
Subject key identifier: B1:85:07:A0:54:1C:7F:C1:55:3D:F9:6C:15:BB:B3:A6:CE:85:31:29
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 0197470BD78E291EAE4F760405C47579DFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 150F
Signing time: Fri 06 Jun 2025 21:00:47 +0000
Manifest this update: Fri 06 Jun 2025 21:00:47 +0000
Manifest next update: Sat 07 Jun 2025 21:00:47 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: MjARSry7hIHSBv11AMBUpOrCSYbhASgEEF6sc/8MxZ8=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d7:8e:29:1e:ae:4f:76:04:05:c4:75:79:df:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jun 6 21:00:47 2025 GMT
Not After : Jun 7 21:00:47 2025 GMT
Subject: CN=b18507a0541c7fc1553df96c15bbb3a6ce853129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:a1:15:64:93:6f:6a:06:8c:fa:06:64:d2:
81:2b:a1:c5:c2:55:21:f2:5f:79:bd:ab:fc:08:02:
3c:36:7d:76:b7:7a:b9:65:b6:e3:65:16:a1:f8:e2:
01:2a:a6:19:3b:53:00:d5:1e:40:b2:3f:6a:f5:9e:
13:88:79:65:8f:ab:d6:a7:f1:c1:81:dd:25:d1:27:
06:57:aa:47:64:34:3f:3f:53:94:67:e0:2a:a3:10:
df:bb:a9:f1:2a:57:2b:6e:87:fd:2c:f3:d5:3d:01:
92:49:b1:0a:d8:c2:2a:fd:dc:c5:d4:5d:9f:b4:28:
d7:db:12:63:1c:4e:d5:1e:96:ae:37:00:c8:e1:7a:
d7:58:2f:8e:68:e2:d9:a7:ab:57:4c:c3:67:ef:b5:
9f:b1:78:94:6a:73:a6:29:f1:c9:8d:a1:71:b5:d4:
ba:18:a6:5f:7f:8b:94:ff:aa:a4:13:53:e1:70:45:
e8:0b:b2:37:d0:93:37:90:9c:3b:24:15:1c:67:97:
09:6d:5e:75:38:d9:5a:4d:cb:17:dc:1a:66:5d:41:
91:79:c5:73:80:8b:bf:87:d2:6b:06:94:d1:be:b1:
d8:6c:cb:51:79:14:c1:c0:d9:7f:63:e1:6c:25:62:
16:57:b4:e3:1c:a3:07:02:3c:a4:96:a0:c3:9e:19:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:07:A0:54:1C:7F:C1:55:3D:F9:6C:15:BB:B3:A6:CE:85:31:29
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:c2:6e:e1:47:39:5c:41:8e:7f:44:e5:5f:d3:87:0a:14:
b4:4f:39:7b:03:fc:33:0a:c4:48:a1:3b:e0:07:f8:ec:38:cf:
17:f3:7e:91:a3:97:11:95:dd:97:c8:11:b5:c2:df:af:5b:61:
ff:7d:52:bb:e6:e4:44:fb:62:0e:f6:2f:ce:73:95:7d:0f:09:
47:5f:7f:23:f0:bd:60:64:e6:45:5e:45:e5:b0:4a:b2:a7:b2:
78:76:8c:21:66:67:07:b0:6f:39:42:f6:6c:22:d3:94:ab:80:
18:8e:b6:df:da:bf:55:6f:e0:69:05:9d:a1:19:4f:a3:09:da:
90:f3:7d:e6:b5:1e:d6:79:76:30:28:50:0c:42:ef:89:5a:36:
41:e3:f9:df:b1:fb:a2:c0:af:5a:8d:81:65:9e:6f:b8:c8:17:
5f:dd:28:b4:17:6d:58:30:78:cf:04:4a:ed:64:ee:48:6a:3e:
5c:94:9e:b3:08:f1:8d:e6:5d:00:66:cd:59:6c:1e:e3:46:ce:
74:a4:80:0a:c2:00:c0:f9:80:a0:b1:b6:3e:5a:9d:5d:3a:9f:
d6:a2:1f:22:9c:0f:12:1d:e1:1a:b3:f3:b2:a8:f0:91:9b:81:
02:9c:80:70:da:dc:db:b8:ad:f9:8c:a1:66:68:d9:13:3b:6d:
f7:98:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:06 2025 by rpki-client