Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: HksGy+Y4N47emVa4e37/M675xfhu2N/3jdZUbq8ZUAA=
Subject key identifier: E1:00:31:5E:F4:1D:1C:5A:58:03:49:10:0C:75:40:85:B8:EB:3C:B5
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019A503E6F0700BE68A93DB039D0C9B7D6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0A94
Signing time: Tue 04 Nov 2025 19:01:00 +0000
Manifest this update: Tue 04 Nov 2025 19:01:00 +0000
Manifest next update: Wed 05 Nov 2025 19:01:00 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: GC679WKsYtCtZEh4Bp5Pqh95F+ekLF2NS7JAjokwEFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:6f:07:00:be:68:a9:3d:b0:39:d0:c9:b7:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Nov 4 19:01:00 2025 GMT
Not After : Nov 5 19:01:00 2025 GMT
Subject: CN=e100315ef41d1c5a580349100c754085b8eb3cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:d8:36:d4:fd:5c:bc:23:75:9f:c4:39:ee:
55:35:60:18:16:e7:78:cc:d3:95:29:2a:30:7d:50:
6f:7e:e7:e3:0c:1d:cd:f4:76:d9:4f:93:98:ad:49:
1f:eb:d2:9c:33:6e:05:2d:4b:1a:01:47:4c:db:7d:
c3:8d:02:4f:e9:70:bf:92:ab:df:0b:c9:0d:74:1d:
1d:5e:cd:60:32:36:59:51:d1:00:ed:26:8d:24:b0:
95:97:7a:34:b8:08:38:fd:1f:90:d9:43:6c:64:f5:
16:81:a3:63:5c:05:27:ac:62:dc:04:ba:8a:ad:2c:
ca:3e:1d:19:27:62:a0:d0:cf:9c:d0:02:4c:7a:13:
96:50:06:27:6d:5e:f6:5f:31:46:4e:e6:9c:d5:6e:
a5:99:67:16:ad:c6:06:dd:40:4a:59:83:b3:12:87:
4e:db:90:be:f6:d1:71:91:64:56:d6:bf:00:81:cd:
1c:e5:9c:4e:73:ac:a9:17:41:a9:8d:7f:68:b0:55:
89:10:8e:ef:df:13:a1:91:f6:7f:ad:21:d7:ee:6f:
b7:1e:78:ba:59:73:89:b3:fc:47:62:7d:6c:b0:c1:
6f:84:af:15:c7:3e:22:4f:07:98:6d:0b:0b:a8:91:
e9:51:22:c0:48:b0:71:15:1f:0c:ec:aa:8f:d6:83:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:31:5E:F4:1D:1C:5A:58:03:49:10:0C:75:40:85:B8:EB:3C:B5
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:1b:96:d3:42:fc:17:a7:2e:9a:98:40:a5:f3:7e:52:44:
e1:40:2b:6c:f7:e2:02:9b:62:35:91:d8:3f:0a:46:75:d3:28:
3d:86:b5:23:5d:e3:0b:1c:e1:8a:d9:63:69:44:ab:d9:36:85:
ab:33:b5:e9:eb:37:3a:8b:9d:1b:8b:3f:0a:f7:01:c3:a6:b5:
1f:02:2a:17:31:02:a1:9a:64:7c:15:bc:b3:79:f7:0f:b6:07:
c4:eb:1f:38:0f:70:9b:c4:90:b6:5c:3d:0a:1d:cf:ed:a2:7c:
dd:21:a4:b2:06:d3:84:58:81:8a:1e:24:29:60:1e:c7:bf:00:
8b:a6:bc:6a:32:55:1d:9d:37:91:fa:25:a9:35:ec:e9:73:86:
22:5d:73:81:b2:39:c4:f3:e5:aa:74:72:9a:dd:bf:06:63:04:
7a:ea:ec:04:bf:76:e1:fe:8e:53:f5:c0:51:af:20:b1:e7:42:
ab:46:b5:64:10:68:c0:2a:d2:20:39:48:1a:46:53:63:53:54:
47:d6:0d:e1:63:a5:34:04:ef:d3:3c:47:6b:06:cb:fa:1e:3a:
3c:44:cc:31:2f:2a:b2:12:41:1f:cc:9e:79:21:0d:8a:3a:58:
30:ba:ae:ad:e5:23:da:95:94:a2:27:7f:65:eb:f2:8a:02:e8:
56:8c:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:17 2025 by rpki-client