Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: EmFJDRHc9Lp9JarkXIYJCvUKyOi0+MCGBCFjkN9o8so=
Subject key identifier: 15:7D:1E:6F:E6:AE:DD:4F:F1:BE:61:85:A4:46:55:F5:D2:B6:74:BC
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 0198733CFEA90E4C78853AF19DFAF809FB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 099D
Signing time: Mon 04 Aug 2025 04:00:33 +0000
Manifest this update: Mon 04 Aug 2025 04:00:33 +0000
Manifest next update: Tue 05 Aug 2025 04:00:33 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: kHUvGcVtu1BUbqAt0jz8YDkVpWXVpKyNq7eCjV7mOuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:fe:a9:0e:4c:78:85:3a:f1:9d:fa:f8:09:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Aug 4 04:00:33 2025 GMT
Not After : Aug 5 04:00:33 2025 GMT
Subject: CN=157d1e6fe6aedd4ff1be6185a44655f5d2b674bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:50:ac:35:24:bc:e8:bb:31:1d:58:0b:d2:
1d:bf:07:32:65:35:cd:71:f4:20:50:9b:24:87:be:
c7:c4:07:a4:dd:e8:6d:a4:e0:55:8c:9e:f7:4f:f5:
fe:8b:7f:36:78:2d:bf:7a:6c:42:ff:2e:7b:3a:b4:
86:e3:f3:a6:d1:10:eb:5c:d9:65:91:2f:dc:e3:76:
3a:d1:84:a5:56:42:2b:ee:57:91:97:cd:c6:a8:c0:
2a:da:c3:cb:5d:07:e1:da:6c:1b:16:da:91:df:c3:
26:9c:9a:0a:83:22:df:ba:7f:e1:c1:78:a3:2c:05:
85:ba:4d:ab:8e:1b:73:6f:d3:90:cf:38:e3:62:3a:
5b:52:9e:7b:0f:68:0e:a0:41:9a:8d:c5:22:84:1d:
8d:63:d2:da:43:14:0d:88:76:42:27:54:b6:a4:12:
b9:27:22:03:01:d9:88:5f:27:c1:06:5a:18:f1:84:
b9:b3:54:f0:d5:0d:68:42:f1:4e:30:fe:89:d5:cf:
11:96:57:70:14:46:90:b2:3c:ab:ad:4f:ed:d0:45:
b5:29:ff:4e:e8:3e:16:95:5a:59:d0:e1:59:69:9a:
4d:9c:9f:36:e4:66:4f:ec:3e:fa:1e:a5:c7:1d:8e:
20:a6:5e:4c:74:36:56:a4:b6:7c:88:29:7f:d9:74:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:1E:6F:E6:AE:DD:4F:F1:BE:61:85:A4:46:55:F5:D2:B6:74:BC
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f5:df:6f:0a:2b:da:53:02:d6:42:09:ef:7d:22:87:88:82:
3c:42:b1:c5:e8:d9:97:89:7e:3b:93:9d:31:77:47:cc:b3:8f:
d4:f8:d3:4a:8e:c5:bd:76:1c:8f:9e:97:9f:c2:30:18:b8:ac:
9d:dd:4a:e6:41:f6:63:c8:2d:29:cb:3f:be:7a:47:e1:fd:7b:
57:fd:4b:98:e2:bc:40:2c:db:88:f5:da:ce:25:46:dc:eb:09:
81:3f:0f:0c:a1:93:89:ba:74:67:9a:34:23:9c:19:48:a3:97:
82:d4:3f:95:e9:7b:79:b6:55:34:c6:b3:05:46:89:f4:2d:13:
0b:cb:67:54:dd:80:45:c5:5f:96:75:86:ae:c0:5e:a2:10:e0:
30:4b:56:83:7a:f1:f2:3d:01:7a:20:49:9c:44:95:fa:8b:ab:
33:38:7c:ef:96:86:79:82:88:78:4c:c2:84:49:6f:2d:86:2e:
a3:36:dc:2f:38:d1:01:5b:1a:96:d5:d9:5a:84:a1:b8:d1:3e:
0b:8b:5d:82:04:ce:89:85:db:da:09:7a:87:17:8e:55:9b:87:
91:73:70:20:9b:69:47:d9:bb:ef:d2:b0:c1:36:c1:3a:1c:ef:
88:5c:37:33:b7:7c:d3:d8:42:42:15:9d:95:23:0b:39:14:70:
ef:c2:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:57 2025 by rpki-client