Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier: Iew6vgEV8wsp6AG2HSxx/Gp/rKHyPPkQ2N18Ic8bU10=
Subject key identifier: 78:5E:A2:70:7E:0D:89:1B:DA:C3:75:6D:F3:CF:FC:EA:C5:0A:6F:09
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial: 019A71B8DC175670514B0E979CDF67FEEB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: cRhqj2tYmFys/yCslQ7WP611a+dkITDK3MprHIoRF+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dc:17:56:70:51:4b:0e:97:9c:df:67:fe:eb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=785ea2707e0d891bdac3756df3cffceac50a6f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:4d:e9:c1:3e:f4:d7:d4:94:27:61:85:04:
73:c7:4c:90:3e:d5:9d:19:c2:37:b8:99:c3:6b:b8:
92:f8:26:4a:d5:ad:e2:c1:cf:30:8d:02:26:36:b1:
0d:3e:cd:35:68:aa:b9:a3:03:59:37:2c:a9:f4:82:
10:ce:a7:16:a4:91:84:5a:f9:26:9a:ff:6d:5e:1f:
e3:41:e7:81:d1:fa:82:7a:68:05:d9:27:29:70:73:
de:16:38:cf:a6:fc:cf:c4:70:c7:2a:bd:9c:19:3b:
59:ca:6e:67:f8:ff:c4:32:67:90:4a:9a:04:8f:1c:
ba:eb:c5:5f:15:a1:9b:54:a4:fc:ff:8a:5c:e8:19:
f7:a1:c8:2d:0d:d4:bc:d9:fd:80:11:f8:f4:14:a8:
9a:1b:d8:f0:e4:a3:7a:4f:cb:c5:91:55:b1:bb:8a:
db:3c:8d:b0:55:5c:88:13:91:ad:02:6b:2e:69:b1:
c9:34:a0:d0:27:7d:3a:7f:5e:f8:bf:6c:fb:a6:39:
56:8e:e9:5c:89:d1:25:57:c9:5d:67:4a:81:99:87:
9d:98:a8:71:1f:62:2e:5c:e6:ee:c6:df:33:dd:db:
c7:d5:3a:e8:2c:c8:e7:9f:a8:f7:99:61:81:0b:d7:
d5:7e:fd:1c:73:90:d8:fa:bd:7a:a1:35:1a:b9:46:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:A2:70:7E:0D:89:1B:DA:C3:75:6D:F3:CF:FC:EA:C5:0A:6F:09
X509v3 Authority Key Identifier:
keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:15:41:ac:e3:b4:fd:4c:89:6e:aa:f4:3d:46:49:bf:d6:2a:
9c:ef:61:92:6b:f8:5e:a9:9a:3c:fb:ef:8f:b7:9b:ed:81:3b:
f6:23:d7:8f:c1:1a:d7:e4:0d:c7:88:47:3b:ff:d7:ef:8b:9b:
fa:02:aa:77:78:ad:2b:86:07:88:40:ad:ab:00:f5:6c:b4:c9:
f6:62:95:f2:0f:7e:ad:44:c5:47:99:6d:1a:83:89:40:4c:b3:
fe:8a:41:c8:4d:aa:51:1d:b3:c1:a7:d8:0a:ae:a0:60:22:36:
ad:c6:68:bd:6f:a7:c8:72:c5:89:9e:ea:01:64:d5:4b:47:bc:
fe:87:9b:a9:f7:de:21:d5:08:21:30:31:31:07:fd:24:79:d0:
75:a8:01:ae:ad:04:76:e6:40:06:09:97:32:bd:1c:28:41:82:
bb:95:eb:82:d9:fa:b5:55:71:ba:40:b6:ae:97:e6:60:d3:9a:
7d:da:d9:67:68:0c:7a:9c:78:4e:fc:3a:36:4f:3f:4b:27:9f:
ab:ce:3f:4d:ce:f3:3a:60:25:c3:a4:90:53:44:dd:7d:2c:1e:
27:48:37:2a:27:2f:22:2e:c2:c6:75:04:50:49:68:33:c3:9a:
94:5d:b1:ff:d0:5f:06:6d:20:a7:6a:39:a0:bf:37:78:44:09:
ab:56:7e:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuNwXVnBRSw6XnN9n/usQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMThhMzMyOGM0NGYwOGY2NTI0M2M2MWUwNjRmZWZlZDY0
MTNjMDQwHhcNMjUxMTExMDcwMjExWhcNMjUxMTEyMDcwMjExWjAzMTEwLwYDVQQD
Eyg3ODVlYTI3MDdlMGQ4OTFiZGFjMzc1NmRmM2NmZmNlYWM1MGE2ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+RN6cE+9NfUlCdhhQRzx0yQPtWd
GcI3uJnDa7iS+CZK1a3iwc8wjQImNrENPs01aKq5owNZNyyp9IIQzqcWpJGEWvkm
mv9tXh/jQeeB0fqCemgF2ScpcHPeFjjPpvzPxHDHKr2cGTtZym5n+P/EMmeQSpoE
jxy668VfFaGbVKT8/4pc6Bn3ocgtDdS82f2AEfj0FKiaG9jw5KN6T8vFkVWxu4rb
PI2wVVyIE5GtAmsuabHJNKDQJ306f174v2z7pjlWjulcidElV8ldZ0qBmYedmKhx
H2IuXObuxt8z3dvH1TroLMjnn6j3mWGBC9fVfv0cc5DY+r16oTUauUZkbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHheonB+DYkb2sN1bfPP/OrFCm8JMB8GA1UdIwQY
MBaAFAAYozKMRPCPZSQ8YeBk/v7WQTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYt
NzIwZTUxNTM5MTZjLzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYtNzIwZTUxNTM5MTZj
LzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBVBrOO0
/UyJbqr0PUZJv9YqnO9hkmv4XqmaPPvvj7eb7YE79iPXj8Ea1+QNx4hHO//X74ub
+gKqd3itK4YHiECtqwD1bLTJ9mKV8g9+rUTFR5ltGoOJQEyz/opByE2qUR2zwafY
Cq6gYCI2rcZovW+nyHLFiZ7qAWTVS0e8/oebqffeIdUIITAxMQf9JHnQdagBrq0E
duZABgmXMr0cKEGCu5Xrgtn6tVVxukC2rpfmYNOafdrZZ2gMepx4Tvw6Nk8/Syef
q84/Tc7zOmAlw6SQU0TdfSweJ0g3KicvIi7CxnUEUEloM8OalF2x/9BfBm0gp2o5
oL83eEQJq1Z+aw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:48 2025 by rpki-client