Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File: ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier: J5vEv0y39e1bW+haoXcitzjxYZzXGmfaQKsll7TliXk=
Subject key identifier: 37:72:98:C5:61:B1:A8:02:FC:B8:83:E4:DC:7B:C4:05:DD:D4:C9:EA
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 019A71B8FC2ECE2A0CB4FEBDC94B663734EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: L5nPeeyn+1DsdeSKPPj0OvKlBw7uoEdcAl004JCcLd0=)
2: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (hash: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fc:2e:ce:2a:0c:b4:fe:bd:c9:4b:66:37:34:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=377298c561b1a802fcb883e4dc7bc405ddd4c9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:9d:42:14:d8:b5:1e:15:e8:6e:7c:e7:bc:
4a:60:96:f3:a4:ac:96:d3:76:16:9d:3f:d1:32:9a:
3a:9d:94:d9:8a:8e:fc:4b:2b:7b:80:cc:5d:ff:8e:
fa:19:63:35:21:75:ab:cd:10:a3:68:42:47:5b:a1:
ac:90:f3:2f:a9:3a:9b:96:e4:f6:c8:9a:68:cf:36:
aa:4f:17:bf:cd:95:96:05:c5:1a:3c:6c:a6:b5:9b:
a1:95:3e:55:1d:a4:d1:f3:16:77:fd:62:7b:c6:ce:
20:dc:56:73:fa:a7:bb:e4:34:1e:cd:20:e9:76:c3:
ae:a6:1c:8c:f0:d9:a1:a1:37:5f:cc:31:0d:2d:40:
d6:bc:e9:37:ed:4f:2e:13:a9:c1:a9:e4:c5:bb:2c:
0f:bb:80:ec:47:1b:57:9a:d6:69:6e:77:71:ec:5b:
d0:73:7f:64:23:d8:d3:b6:da:5a:b5:a8:96:1f:a2:
ff:b1:a7:00:85:e9:44:5c:d9:16:14:8f:b4:c4:ba:
b1:2c:ab:bb:9f:a7:52:00:7c:23:64:ad:61:8f:78:
bf:0b:08:7d:0f:cc:16:c7:38:98:2d:5b:80:3b:9e:
38:7c:ed:35:c7:61:5b:c3:29:aa:6b:ac:2a:9a:bb:
54:9c:bf:b7:27:94:32:d1:f6:84:ca:f8:96:70:45:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:98:C5:61:B1:A8:02:FC:B8:83:E4:DC:7B:C4:05:DD:D4:C9:EA
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:c6:44:84:cb:66:53:44:dc:ed:d5:a1:74:5a:d2:e4:c9:
da:c4:a5:47:77:e7:06:9a:68:eb:32:6f:03:c4:1b:ba:11:73:
6a:18:bb:b4:20:ac:90:80:c8:61:71:f1:3c:c3:4a:a6:a1:88:
1c:a1:87:49:02:94:e2:3d:a2:17:50:84:3e:ec:13:11:05:ea:
c4:97:a6:e2:d3:e6:fa:bb:c9:a1:d0:6d:c3:42:9e:ca:f7:90:
c4:8f:3c:96:51:3b:25:ec:c0:86:4f:d3:12:79:e0:cb:8b:e5:
8f:eb:62:be:28:05:9f:0e:f8:a7:22:cc:26:e2:58:99:b7:a1:
07:5a:30:1a:0b:8d:7f:fc:eb:d4:a2:2b:2c:87:5d:67:45:35:
b1:f5:65:71:62:5a:4b:18:9d:6d:20:76:81:ef:b4:2b:e7:8e:
fe:0e:8b:37:8e:c1:31:c9:84:fb:aa:d7:ec:76:8e:5a:66:c8:
4c:51:d5:a2:f2:35:a6:11:25:7d:07:b7:f5:50:eb:15:0e:3d:
20:9b:8d:59:7d:88:ec:f5:bf:c5:12:d2:4b:e3:38:c8:5c:fd:
61:b6:7e:b3:bf:77:6b:1c:36:b1:4f:e4:38:02:d1:89:20:d2:
f8:99:5d:d5:f9:4d:bc:b8:45:38:cd:de:a4:f1:f6:ae:eb:3d:
03:08:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:54 2025 by rpki-client