Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: dmusKcV9IaLkD7Ozl9gWu7YYoV9Rly1SHN4lEBOUFOQ=
Subject key identifier: 65:AA:64:55:8C:67:05:D8:54:E6:A6:A5:7F:93:05:52:38:EC:7A:68
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019A71B89A75971FEDA7842CD3BA7DA9A99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0DEF
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: q5tFUPB55K8BMleSh8X1y6HTPhnMUVthBFXbpJa6VK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9a:75:97:1f:ed:a7:84:2c:d3:ba:7d:a9:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=65aa64558c6705d854e6a6a57f93055238ec7a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:80:c6:ad:a9:0f:c1:66:e1:63:d5:68:95:
73:56:92:c5:fb:7f:67:1e:75:57:e9:28:21:34:51:
80:e2:6b:74:d2:07:1c:d1:69:cf:db:39:3e:d5:b1:
15:cc:d3:fc:f6:08:8b:c7:dc:dc:8a:a1:d2:72:d8:
fe:7b:17:27:20:21:a9:57:a2:2c:6c:88:85:49:c8:
79:be:14:61:d2:6e:24:03:94:d1:5e:7a:c3:95:ee:
a9:79:68:88:1e:ca:f0:58:5c:a0:0d:49:bb:b8:61:
c5:ff:40:4a:15:6f:76:84:78:c1:fc:85:56:27:af:
f4:37:5a:30:4c:77:f1:6b:e3:69:05:63:a3:e8:fe:
7f:7c:f1:10:7e:f3:fe:e7:71:44:d1:59:87:9a:df:
51:f5:6a:26:b3:cb:80:57:19:57:e6:94:f2:ad:c2:
4b:de:83:f4:ef:46:01:9b:db:8a:e8:e7:f6:69:a4:
73:02:a9:30:39:ff:df:62:10:57:75:ec:5e:bd:c1:
1c:be:e7:24:35:54:7b:cb:34:f0:7e:6d:a0:98:79:
42:56:30:23:b2:17:e3:9b:16:2a:b8:6c:21:a7:ff:
c5:6d:fd:b2:64:1b:f3:8a:7d:99:d7:dd:f3:1a:df:
85:73:ba:65:13:c9:ba:62:38:12:66:b2:78:49:7c:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:64:55:8C:67:05:D8:54:E6:A6:A5:7F:93:05:52:38:EC:7A:68
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:8f:07:33:3e:67:97:41:cb:90:09:f3:44:1c:c5:77:b0:
11:30:6f:27:f8:0c:4b:cd:00:68:44:93:b8:d4:39:14:42:c6:
fa:1d:cd:86:a9:af:99:e9:6f:3a:ab:15:8f:6c:75:28:44:8b:
9a:c9:23:36:13:d1:61:e3:41:25:e3:11:80:57:63:08:11:0e:
b2:f1:7e:3b:b0:fa:5b:d3:5d:b3:f1:92:d6:6c:bd:9d:ef:33:
be:c1:a6:49:b7:35:c7:25:0b:d6:19:a2:75:4a:27:5e:f1:34:
76:f6:20:8f:ea:78:39:aa:2e:9f:0c:1b:6a:05:c7:ba:15:fa:
9d:be:55:99:f4:a3:fe:13:79:31:96:1d:ee:ed:5c:c3:b1:e8:
9e:33:59:47:58:8a:20:99:e9:e6:ed:7e:ba:6b:8c:30:e3:8c:
21:b6:b9:77:28:da:cc:dd:a0:dd:07:dd:e6:45:41:22:e2:ae:
7c:63:ce:aa:da:03:2e:74:6e:82:27:1b:5d:e7:82:aa:0c:c8:
b5:25:99:32:6b:c9:ab:e9:0a:dd:58:01:18:4a:bb:e7:75:06:
66:d7:79:ce:21:3a:26:b7:0a:0b:0f:1d:e3:39:ca:32:97:fa:
8c:9c:49:be:ef:a7:55:b5:96:b3:63:db:56:d3:43:4d:f0:b4:
bf:4a:ea:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuJp1lx/tp4Qs07p9qameMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4
NmQ1YzAwHhcNMjUxMTExMDcwMTU0WhcNMjUxMTEyMDcwMTU0WjAzMTEwLwYDVQQD
Eyg2NWFhNjQ1NThjNjcwNWQ4NTRlNmE2YTU3ZjkzMDU1MjM4ZWM3YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2iAxq2pD8Fm4WPVaJVzVpLF+39n
HnVX6SghNFGA4mt00gcc0WnP2zk+1bEVzNP89giLx9zciqHSctj+excnICGpV6Is
bIiFSch5vhRh0m4kA5TRXnrDle6peWiIHsrwWFygDUm7uGHF/0BKFW92hHjB/IVW
J6/0N1owTHfxa+NpBWOj6P5/fPEQfvP+53FE0VmHmt9R9Woms8uAVxlX5pTyrcJL
3oP070YBm9uK6Of2aaRzAqkwOf/fYhBXdexevcEcvuckNVR7yzTwfm2gmHlCVjAj
shfjmxYquGwhp//Fbf2yZBvzin2Z193zGt+Fc7plE8m6YjgSZrJ4SXzs+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWqZFWMZwXYVOampX+TBVI47HpoMB8GA1UdIwQY
MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It
ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2
LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzSPBzM+
Z5dBy5AJ80QcxXewETBvJ/gMS80AaESTuNQ5FELG+h3NhqmvmelvOqsVj2x1KESL
mskjNhPRYeNBJeMRgFdjCBEOsvF+O7D6W9Nds/GS1my9ne8zvsGmSbc1xyUL1hmi
dUonXvE0dvYgj+p4OaounwwbagXHuhX6nb5VmfSj/hN5MZYd7u1cw7HonjNZR1iK
IJnp5u1+umuMMOOMIba5dyjazN2g3Qfd5kVBIuKufGPOqtoDLnRugicbXeeCqgzI
tSWZMmvJq+kK3VgBGEq753UGZtd5ziE6JrcKCw8d4znKMpf6jJxJvu+nVbWWs2Pb
VtNDTfC0v0rqiA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:16 2025 by rpki-client