Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: gsObnjstBTGVC9TVlN55j8NcFQohoI5MoouNNHLF2LU=
Subject key identifier: 75:11:D6:36:AA:26:1E:9E:C1:47:C4:FA:04:48:D3:39:15:EF:6A:8D
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 0198D5BB9D4A92B25C713C1D02ABE40F052B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 09D0
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: vCG1ElfZUPkXMtk3zoo18CJVknT2BuJYp27uS2HymYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9d:4a:92:b2:5c:71:3c:1d:02:ab:e4:0f:05:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=7511d636aa261e9ec147c4fa0448d33915ef6a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:9a:64:78:92:8d:c8:40:51:e6:ce:c6:85:
fa:b5:7b:19:94:e1:eb:75:1b:3e:1f:b0:c4:f6:76:
99:89:02:ae:e5:00:6e:e0:37:f1:0f:d4:2d:c6:50:
e3:4c:63:a5:9c:a1:2a:84:87:92:f4:b3:d3:90:53:
9a:a8:fd:13:77:cf:b4:fa:1d:f9:fa:57:f0:61:6f:
12:fe:1a:a3:7e:2e:76:b0:23:26:68:56:15:72:f6:
04:54:5b:3c:db:19:8c:52:e0:66:a7:03:a0:f8:78:
30:45:6e:82:08:fc:5b:c6:99:5b:2b:7a:91:01:26:
17:00:af:59:62:5f:50:36:c1:b1:8f:02:a0:ac:32:
fe:43:33:57:2f:e1:4c:ad:41:9a:6e:e4:b6:aa:24:
c3:f5:fa:14:55:fb:9c:2c:d9:3e:72:ab:b4:bc:ba:
13:b6:98:bc:56:bb:bf:68:7e:1a:42:4f:03:91:58:
e3:f1:e6:19:c2:b6:f5:92:a1:37:d7:3b:03:03:60:
47:a7:58:81:e4:84:1a:b8:ea:58:dd:af:14:70:21:
8e:98:b8:ed:18:97:b3:49:5d:e6:b8:15:f7:00:a5:
4c:3c:7b:5b:76:d6:8d:8c:7c:93:33:44:6e:84:23:
b3:14:2d:70:26:05:80:d0:cf:50:7c:e3:12:60:2c:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:D6:36:AA:26:1E:9E:C1:47:C4:FA:04:48:D3:39:15:EF:6A:8D
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a7:41:49:ed:e6:c5:4d:6f:99:29:53:6f:00:46:dc:3a:da:
4b:16:f2:99:8a:af:b3:56:73:c6:f2:cd:40:c1:b4:8a:3d:d7:
25:a3:39:da:7e:04:04:87:c5:2f:fb:d1:20:c8:13:56:89:0b:
16:a7:7a:40:6b:1a:ab:c0:eb:21:68:12:c6:3c:60:63:07:59:
05:0b:2a:56:d7:7e:fe:40:0b:3b:cc:5c:79:d5:ba:b4:56:7c:
ea:e7:fe:68:60:2a:25:82:89:94:84:60:4e:3e:73:30:a3:17:
7d:33:dc:c1:42:30:0c:d3:fc:ff:f9:f5:34:61:d9:59:54:cf:
76:e8:61:8a:e5:6c:ae:1b:71:1b:03:11:67:09:d3:6b:c9:db:
9f:43:18:bf:0d:33:07:0e:5d:32:f4:aa:a2:e4:9d:06:6e:0f:
ce:7c:ae:6b:c8:7e:15:a0:05:37:35:0f:b4:96:8f:eb:6b:4e:
49:a6:e9:5b:a4:4e:7b:15:93:29:b7:c8:ad:ac:1a:56:0b:c7:
65:49:d9:11:e4:32:dc:22:23:b3:07:ab:83:6f:33:d3:7d:c1:
e1:d3:1a:d0:b3:97:56:e6:b1:d7:37:98:93:fd:23:ac:2a:da:
29:b7:4b:24:f0:a0:67:53:a4:7a:8b:fb:5f:4d:8e:f0:88:0a:
66:0a:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:11 2025 by rpki-client