Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: 7MmekJacP7n4LJi0Rd+UlYWv+yEvYrnUcXVky7TZmp4=
Subject key identifier: 0E:B2:F6:FD:A9:BE:86:2D:E7:24:F7:FC:AD:CA:06:E8:A3:A1:9F:7B
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019922FA47514F07748B51E1C6C522DC8E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 09F8
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: 6XEW+brAUzfjWoB2HVx2qJS/VsZB4NYblJFGzE4qQ4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:47:51:4f:07:74:8b:51:e1:c6:c5:22:dc:8e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=0eb2f6fda9be862de724f7fcadca06e8a3a19f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:c6:81:5f:79:9a:bd:de:26:8c:72:ea:50:
06:7f:ff:a2:72:67:04:14:a1:de:e3:13:a8:24:68:
5d:c7:34:c0:a8:b7:25:a9:55:01:b1:55:f1:c2:32:
c0:69:14:3e:b9:1e:f0:32:16:1f:08:fb:3d:40:f4:
f0:5d:84:d8:ff:0a:1d:9c:e5:d0:10:aa:b8:9a:d4:
eb:f1:d4:56:0d:9b:08:49:5a:97:0e:e5:d5:fd:c7:
2a:ef:e8:b0:e1:87:1b:ba:66:99:e9:62:83:c1:7d:
70:06:2b:25:1d:44:87:8a:24:82:23:c5:c5:f1:9d:
25:26:eb:32:b8:ee:4d:2e:6a:6e:9e:a4:75:a6:2d:
df:9b:d1:d5:f2:9f:36:79:72:a4:a8:7c:69:34:aa:
76:76:e4:ed:88:ef:26:b3:d6:71:39:5a:70:73:47:
68:0f:fc:f9:8d:46:60:77:47:d7:3a:af:a6:b5:88:
80:0d:fd:1d:f1:e5:da:10:02:b6:8c:c1:59:5f:b4:
0d:da:c6:2b:2b:26:e3:33:68:d7:2c:4c:aa:46:23:
48:21:fd:8e:63:79:18:3c:a5:49:d9:4c:70:a1:37:
cf:2f:ce:2c:d1:7a:6d:ed:67:70:bf:5a:20:6a:9a:
85:7e:7d:d0:61:67:f1:6a:fc:dc:2a:17:3b:40:86:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:F6:FD:A9:BE:86:2D:E7:24:F7:FC:AD:CA:06:E8:A3:A1:9F:7B
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6c:91:02:8b:6d:04:70:5c:72:a1:99:a7:38:68:c2:e2:1d:
66:82:ef:f6:e5:eb:7a:5d:2c:23:d7:ce:bf:76:ea:a3:1a:3d:
db:75:42:7a:64:d7:8a:e7:0d:cb:f8:1a:15:c7:0b:03:d6:40:
b1:0a:21:00:1f:b3:61:12:83:aa:ec:ff:45:8f:b7:4d:5b:5d:
93:7a:60:fc:68:09:e3:80:14:f8:77:d9:88:3a:14:ce:c2:8b:
6e:88:bb:62:ed:5a:ff:62:f9:97:0d:a5:57:8b:14:ad:4c:fd:
02:80:f7:98:33:73:ed:60:b4:85:ad:13:81:dd:f4:6f:c4:5d:
6a:ad:c2:c5:ce:12:a5:a2:99:af:41:b3:42:e0:a5:ad:8b:db:
37:c5:6d:f5:7d:fd:bd:a7:60:06:1a:ec:19:1c:f5:00:0f:a1:
d6:f4:cd:00:51:86:b9:e6:64:e5:3d:ee:9f:03:3b:ee:9f:31:
41:b6:59:2c:91:af:39:93:d7:2c:31:79:fe:aa:51:09:26:0e:
ad:e5:22:b7:95:88:15:37:04:6a:0f:02:f8:c3:2d:e0:a8:dc:
89:42:f6:ab:b6:72:b5:c7:ea:bd:b6:ae:e0:09:3f:b2:ed:f1:
7d:be:bb:8f:8d:f7:5b:89:51:dd:a9:5e:78:20:0d:68:ca:5c:
d1:bc:4c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+kdRTwd0i1HhxsUi3I5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWI5ZDZlNmFjMjgyZThjMTAwMDBjYzNkYmM0YWRmM2Zl
MDFmZTIwHhcNMjUwOTA3MDcwMDUxWhcNMjUwOTA4MDcwMDUxWjAzMTEwLwYDVQQD
EygwZWIyZjZmZGE5YmU4NjJkZTcyNGY3ZmNhZGNhMDZlOGEzYTE5ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzbGgV95mr3eJoxy6lAGf/+icmcE
FKHe4xOoJGhdxzTAqLclqVUBsVXxwjLAaRQ+uR7wMhYfCPs9QPTwXYTY/wodnOXQ
EKq4mtTr8dRWDZsISVqXDuXV/ccq7+iw4YcbumaZ6WKDwX1wBislHUSHiiSCI8XF
8Z0lJusyuO5NLmpunqR1pi3fm9HV8p82eXKkqHxpNKp2duTtiO8ms9ZxOVpwc0do
D/z5jUZgd0fXOq+mtYiADf0d8eXaEAK2jMFZX7QN2sYrKybjM2jXLEyqRiNIIf2O
Y3kYPKVJ2UxwoTfPL84s0Xpt7Wdwv1ogapqFfn3QYWfxavzcKhc7QIaouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6y9v2pvoYt5yT3/K3KBuijoZ97MB8GA1UdIwQY
MBaAFKubnW5qwoLowQAAzD28St8/4B/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84N2Y0OTEtOTVjOS00ZjQxLWI0OGUt
MWNlYzFhMGVlOThiLzEvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84N2Y0OTEtOTVjOS00ZjQxLWI0OGUtMWNlYzFhMGVlOThi
LzEvcTV1ZGJtckNndWpCQUFETVBieEszel9nSC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWyRAott
BHBccqGZpzhowuIdZoLv9uXrel0sI9fOv3bqoxo923VCemTXiucNy/gaFccLA9ZA
sQohAB+zYRKDquz/RY+3TVtdk3pg/GgJ44AU+HfZiDoUzsKLboi7Yu1a/2L5lw2l
V4sUrUz9AoD3mDNz7WC0ha0Tgd30b8Rdaq3Cxc4SpaKZr0GzQuClrYvbN8Vt9X39
vadgBhrsGRz1AA+h1vTNAFGGueZk5T3unwM77p8xQbZZLJGvOZPXLDF5/qpRCSYO
reUit5WIFTcEag8C+MMt4KjciUL2q7Zytcfqvbau4Ak/su3xfb67j433W4lR3ale
eCANaMpc0bxMXQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:13 2025 by rpki-client