
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: BQ3H4vG1y9fsPsLNgCERK50fJyT3pUKiZE1ULuWXGfA=
Subject key identifier: 7E:3A:0A:93:34:00:AD:9E:C1:6C:27:41:FF:BD:13:39:62:8D:2F:2B
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 0199FB460A5E519A08E790EA8879C04CBC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0A68
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: 2KAvQOyyTfhimGOEYDywB4vfEjbl0hPqaLAZoWnV0QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0a:5e:51:9a:08:e7:90:ea:88:79:c0:4c:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=7e3a0a933400ad9ec16c2741ffbd1339628d2f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:37:d9:c0:33:9c:b6:19:07:40:cd:c1:ef:
34:9b:c6:4c:42:22:0d:a5:a0:fa:87:a1:56:eb:ac:
34:75:73:98:23:33:9f:3d:13:47:d6:ab:2c:57:cd:
2a:67:a9:85:53:38:a3:48:4f:ad:f0:1c:9d:0c:48:
0c:fa:85:8c:34:8c:a8:ed:b8:73:7d:3c:59:0f:83:
79:17:4d:74:77:05:2f:0c:d5:60:9e:bc:2d:43:a0:
35:dc:10:36:a9:fc:69:86:04:6b:6d:b6:00:e9:62:
46:f2:0a:3d:8c:33:09:dc:c3:44:15:48:53:fe:00:
43:22:4c:a7:90:86:92:df:00:b3:7d:c3:17:e1:3b:
8c:d8:7d:89:6d:c6:d3:ee:96:cf:43:90:84:48:c4:
27:f8:88:b5:7f:d2:be:4a:08:8f:b5:28:8a:fa:b4:
19:93:4c:ce:31:cb:ac:d9:cf:f8:92:52:59:0b:9b:
de:fc:d3:9b:2e:34:8c:cf:f1:91:96:77:a4:bc:f2:
81:13:dd:c1:d1:dd:95:7d:b2:80:40:de:cc:65:71:
30:3d:4a:33:ca:c2:c7:82:76:ac:30:4f:88:09:ba:
8b:b9:be:23:db:22:05:f9:d9:f9:24:54:97:a0:58:
10:c9:8a:40:d4:7b:f2:15:82:fd:61:b3:a4:32:eb:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:0A:93:34:00:AD:9E:C1:6C:27:41:FF:BD:13:39:62:8D:2F:2B
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d7:10:28:f8:09:dd:49:02:b2:e5:53:ea:ed:19:eb:80:4f:
eb:00:23:93:f8:bb:da:46:8d:16:83:5f:38:19:81:fe:2a:65:
a3:77:c7:e1:44:4c:d3:ec:4d:42:26:a3:66:89:3f:ef:ad:55:
0b:27:4b:d1:40:e4:3f:1c:30:c9:18:3e:e1:56:65:13:38:2d:
a9:d7:49:46:5f:72:3d:ba:c5:6e:76:f5:f6:b9:dd:da:aa:b8:
e0:23:82:17:9b:3a:17:b6:2a:3e:a8:76:33:4e:67:43:ef:a2:
a7:aa:7c:6a:f9:d9:e7:d6:06:35:d4:f6:32:8c:23:de:dc:48:
b2:12:02:7a:29:6a:66:e9:d2:ae:ee:bf:65:53:9e:1f:78:53:
02:e0:ef:ef:eb:8b:67:99:00:69:b7:1e:a4:7b:d2:11:ac:e9:
1a:3a:f3:d4:ef:87:28:51:da:2f:3c:40:cb:c3:8d:db:64:11:
f0:60:cb:10:bd:bf:cc:0c:d2:63:91:bb:0d:aa:46:a2:04:a5:
33:f2:7d:dc:2a:47:6c:27:b9:fa:a8:19:7a:f0:76:08:a0:40:
43:a4:15:b4:03:6e:15:40:06:de:67:61:0d:d0:33:22:dc:31:
8a:88:1d:4e:9d:78:06:65:0f:df:cb:88:e4:77:22:65:6b:a4:
48:31:d1:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RgpeUZoI55DqiHnATLwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWI5ZDZlNmFjMjgyZThjMTAwMDBjYzNkYmM0YWRmM2Zl
MDFmZTIwHhcNMjUxMDE5MDcwMTM1WhcNMjUxMDIwMDcwMTM1WjAzMTEwLwYDVQQD
Eyg3ZTNhMGE5MzM0MDBhZDllYzE2YzI3NDFmZmJkMTMzOTYyOGQyZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXg32cAznLYZB0DNwe80m8ZMQiIN
paD6h6FW66w0dXOYIzOfPRNH1qssV80qZ6mFUzijSE+t8BydDEgM+oWMNIyo7bhz
fTxZD4N5F010dwUvDNVgnrwtQ6A13BA2qfxphgRrbbYA6WJG8go9jDMJ3MNEFUhT
/gBDIkynkIaS3wCzfcMX4TuM2H2JbcbT7pbPQ5CESMQn+Ii1f9K+SgiPtSiK+rQZ
k0zOMcus2c/4klJZC5ve/NObLjSMz/GRlnekvPKBE93B0d2VfbKAQN7MZXEwPUoz
ysLHgnasME+ICbqLub4j2yIF+dn5JFSXoFgQyYpA1HvyFYL9YbOkMutDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH46CpM0AK2ewWwnQf+9EzlijS8rMB8GA1UdIwQY
MBaAFKubnW5qwoLowQAAzD28St8/4B/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84N2Y0OTEtOTVjOS00ZjQxLWI0OGUt
MWNlYzFhMGVlOThiLzEvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84N2Y0OTEtOTVjOS00ZjQxLWI0OGUtMWNlYzFhMGVlOThi
LzEvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9cQKPgJ
3UkCsuVT6u0Z64BP6wAjk/i72kaNFoNfOBmB/iplo3fH4URM0+xNQiajZok/761V
CydL0UDkPxwwyRg+4VZlEzgtqddJRl9yPbrFbnb19rnd2qq44COCF5s6F7YqPqh2
M05nQ++ip6p8avnZ59YGNdT2Mowj3txIshICeilqZunSru6/ZVOeH3hTAuDv7+uL
Z5kAabcepHvSEazpGjrz1O+HKFHaLzxAy8ON22QR8GDLEL2/zAzSY5G7DapGogSl
M/J93CpHbCe5+qgZevB2CKBAQ6QVtANuFUAG3mdhDdAzItwxiogdTp14BmUP38uI
5HciZWukSDHRlw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:51 2025 by rpki-client