Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: 9gXWZbwF/myBQlYcPJqW+iXjnCpP0EvFsiuz1lgkiEI=
Subject key identifier: 89:7F:54:CE:0D:3A:02:05:01:DB:B0:0C:11:EE:67:2F:44:1E:A0:17
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 01974A7A7BE50ECBCC91D49D79FA9D673F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0C4D
Signing time: Sat 07 Jun 2025 13:00:30 +0000
Manifest this update: Sat 07 Jun 2025 13:00:30 +0000
Manifest next update: Sun 08 Jun 2025 13:00:30 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: jFhuDWl8Vc879imTI4QyiF52OsKBs0XDgB7gwqHcfHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:7b:e5:0e:cb:cc:91:d4:9d:79:fa:9d:67:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Jun 7 13:00:30 2025 GMT
Not After : Jun 8 13:00:30 2025 GMT
Subject: CN=897f54ce0d3a020501dbb00c11ee672f441ea017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:d2:a0:f1:a6:8d:c9:d8:27:af:9a:d6:2c:
be:6c:d1:29:10:71:75:5a:16:0a:44:8e:f2:e5:6a:
39:21:16:59:89:af:78:9e:d8:f4:1c:f8:00:9f:f7:
a9:97:97:2a:42:97:a7:b2:b5:11:84:2c:3c:ff:56:
09:b9:4f:a2:f2:4f:f2:4a:ea:7b:0b:10:02:a3:38:
97:db:3c:32:de:a2:5d:15:6c:4b:94:17:d2:61:2a:
d0:17:9d:99:e9:11:c5:74:2d:7c:20:fb:80:6c:ba:
22:68:87:f3:88:f3:b6:6b:95:89:58:c9:16:f8:d8:
99:0c:b1:a9:f5:61:42:8c:75:be:58:56:8e:a7:df:
00:ec:25:47:14:57:79:00:e1:5b:ec:fa:0e:a5:60:
0d:89:f1:3a:92:54:c1:75:af:01:5e:5a:d4:76:a1:
14:c0:f8:45:6c:83:9b:fc:45:34:da:96:f8:bf:c0:
c2:ad:b2:f1:ee:a6:e6:69:2c:8d:ef:e8:ce:a9:70:
68:6d:27:01:80:7f:df:ec:dd:7e:d9:4d:35:d3:c4:
ed:0a:bb:27:61:13:f3:b3:17:1a:8d:0a:10:96:49:
a6:e0:34:83:11:53:36:5d:87:bc:d5:33:96:07:ad:
72:4c:b2:0a:ad:69:50:c3:eb:6f:b5:ab:bb:fd:c6:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:54:CE:0D:3A:02:05:01:DB:B0:0C:11:EE:67:2F:44:1E:A0:17
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:2a:33:22:72:4d:04:0d:13:12:ed:4d:3e:b3:1c:b3:7c:
00:63:8d:68:f1:09:48:08:e2:60:10:11:99:f8:fa:b8:c4:b5:
d2:44:5c:f4:ce:04:4e:19:61:9c:3e:48:02:f9:72:00:97:e4:
65:be:06:ad:4f:d5:e2:d3:86:fc:b1:29:8e:c8:c9:f7:45:72:
fe:f6:80:f2:6e:a0:ff:b9:0a:9b:4f:b6:c8:43:65:ec:bc:f9:
64:9c:06:b2:86:1a:70:3a:93:03:38:a5:7e:4a:72:60:64:82:
e6:f2:ec:0e:94:62:4c:2a:92:47:e3:cb:5d:4d:74:23:10:59:
2c:82:b0:4f:c1:ef:ef:34:60:8b:66:98:9e:69:bb:92:bc:39:
07:21:67:c1:3c:02:fd:36:4d:7f:be:bb:c5:18:da:8c:68:a3:
cc:de:d0:9b:50:35:e5:4a:77:a3:52:02:02:7e:50:d0:93:c6:
2d:6b:44:8a:ba:4d:c3:c5:92:f7:29:db:58:88:53:11:6f:56:
18:b8:d9:a7:1d:ab:ee:74:4e:c0:85:49:94:a2:e0:fe:7a:60:
eb:e0:f2:16:0f:7c:f8:f5:c0:6b:3c:5c:8d:34:39:5f:50:87:
30:d9:a4:17:40:f8:0e:f6:46:a1:ad:ca:53:dd:55:94:95:07:
56:7b:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:17 2025 by rpki-client