Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: 0L2Sn+hUSqB4wxA0kKS7aD8dPmvebkjaLOj/sn57IcU=
Subject key identifier: 1A:5E:95:11:D7:83:A8:13:FB:50:D2:93:5E:61:89:55:E9:5A:7D:55
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019768BC521ADD37B8B8C122124B4495608B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0913
Signing time: Fri 13 Jun 2025 10:01:01 +0000
Manifest this update: Fri 13 Jun 2025 10:01:01 +0000
Manifest next update: Sat 14 Jun 2025 10:01:01 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: KGTttuy4XJhGglsG1mo6JREe3EU3GD24mUhWjjm+Fno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:52:1a:dd:37:b8:b8:c1:22:12:4b:44:95:60:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Jun 13 10:01:01 2025 GMT
Not After : Jun 14 10:01:01 2025 GMT
Subject: CN=1a5e9511d783a813fb50d2935e618955e95a7d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:07:ee:81:b8:c1:92:08:71:95:08:26:e8:
81:fb:51:f0:41:cb:f8:b8:9f:32:b7:cd:17:24:24:
66:a2:a9:2b:32:42:d0:bc:36:e3:82:3f:f6:cd:06:
e2:cf:0c:6e:1c:a5:9d:09:68:85:49:50:83:b9:31:
17:49:63:32:c6:d4:cd:41:3f:da:b8:15:b6:4d:ce:
cb:cc:4f:b8:7d:ea:87:2a:c6:80:f1:fa:e1:ff:0c:
08:63:a4:7c:2c:ee:f2:fc:20:7b:ed:ba:2e:b4:1b:
1b:fc:d6:cb:eb:ed:e6:ba:9a:5f:1a:81:83:c5:f6:
d1:c6:1e:34:5e:f5:ca:60:df:b8:3a:09:9e:cc:11:
e7:08:8c:5f:21:3a:1d:b2:8a:48:77:0b:ff:6c:8f:
46:5a:4d:ef:42:f9:08:d0:bd:12:a1:37:81:2e:42:
c7:00:0e:03:e8:f2:45:ce:71:bb:32:2a:c4:22:87:
d2:ff:9a:ff:85:57:8f:0b:ee:0d:1b:3f:82:e4:73:
92:39:04:c7:6a:69:72:d4:cf:ad:a7:df:c0:20:94:
55:a3:ba:e9:c7:4f:8e:f6:36:c6:78:94:1d:d7:57:
f6:c9:4d:83:c5:64:6b:a3:53:1b:89:d2:84:86:74:
ab:8a:f7:e5:2b:d7:f9:01:be:df:68:58:91:6d:1b:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5E:95:11:D7:83:A8:13:FB:50:D2:93:5E:61:89:55:E9:5A:7D:55
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:ba:37:7b:22:fb:a9:22:f8:75:1a:de:f4:71:f2:7c:3a:
eb:4f:76:50:4d:48:5a:21:e8:4d:27:fb:88:c7:67:c1:d6:4e:
7e:d2:ed:99:b3:e8:f3:53:00:53:a8:93:3d:42:89:57:d8:78:
af:16:8e:ba:8c:4d:54:3a:f1:96:ea:6b:1a:30:f4:44:ae:cb:
9f:7f:c2:c5:0d:6c:72:55:25:44:1c:da:44:f7:b0:34:d1:f2:
77:ae:b8:35:d2:6e:57:d9:68:d9:c7:a7:eb:bd:cc:7d:f2:e8:
a0:0c:ef:d3:9b:0e:b0:77:6f:36:e1:f9:e6:20:0e:eb:2b:35:
7b:e6:07:1a:de:1e:c3:63:6e:60:0c:48:c2:bc:7b:98:9c:04:
5f:76:b0:c3:15:2d:f0:42:2f:e2:fa:08:29:bb:d2:a4:41:eb:
71:b1:ea:8d:eb:f0:ba:8f:b7:ad:74:66:49:d6:b0:fd:48:71:
2c:a6:8e:50:37:77:a0:36:a7:86:83:54:25:d7:30:e1:24:25:
84:4d:67:bc:80:1f:31:04:bc:ba:41:d5:69:8d:0a:9b:07:99:
79:83:db:fa:b6:c4:2d:ca:8a:59:16:c9:95:cd:74:13:e3:f6:
cb:1a:73:e2:4b:5e:cc:f8:c8:2c:62:50:d5:0e:3d:20:11:8c:
95:58:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:55 2025 by rpki-client