Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: HoLyNR/alDuL7QBpMYfbANh+fA7QgcqlK8tn4U5+AdM=
Subject key identifier: B1:76:BB:8E:A5:C7:57:83:7A:9E:CE:94:AB:6B:9F:28:F2:7F:F0:9C
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019A71133142F01F526F0B13225E6820DFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0AA5
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: X3f+1kyCExbC//yeKshUeC+w2Dc0lx4/kgw35ic8nUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:31:42:f0:1f:52:6f:0b:13:22:5e:68:20:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=b176bb8ea5c757837a9ece94ab6b9f28f27ff09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:9a:be:3d:49:fb:8d:7c:d4:d1:bb:0c:ab:
24:7d:6a:d5:0d:26:f5:9f:92:8c:85:a5:16:d4:62:
39:b0:0b:48:61:b1:cb:15:64:99:35:4a:7b:ba:d0:
48:85:71:1e:21:1b:38:7d:d5:3c:12:6e:0f:df:da:
e1:ff:87:ee:00:ef:ec:34:81:05:1f:b4:53:8c:64:
41:37:7c:a6:8f:fe:0d:34:64:ca:15:21:db:6e:45:
82:8e:66:fe:02:99:02:3c:9d:e4:eb:5a:ac:8b:0e:
b3:83:ca:7e:53:4f:12:a5:d4:3b:1b:0c:9e:51:b2:
32:23:b9:c4:c5:92:5f:c7:3e:73:9e:24:2c:8d:f3:
e8:8a:fb:4c:9c:cf:5d:ff:eb:f3:ce:76:4c:3c:6f:
9a:5a:9e:e2:2f:fc:d5:87:a7:ba:4d:56:eb:f8:e0:
6e:c3:e6:50:b7:73:ed:af:bf:b7:80:b1:73:41:27:
ba:65:02:2c:b7:a4:f9:6c:07:89:e2:ec:ac:2a:2f:
08:f8:f6:0c:45:28:63:3d:70:2b:a9:e3:17:00:bb:
5f:fd:32:ca:1f:ff:88:ff:c4:c6:48:fa:69:70:99:
5c:9c:69:64:7b:16:fd:3f:a0:81:cf:16:91:89:2c:
8b:36:3b:7b:af:4c:aa:71:3e:5a:7c:c5:da:55:70:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:BB:8E:A5:C7:57:83:7A:9E:CE:94:AB:6B:9F:28:F2:7F:F0:9C
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:cd:42:49:38:52:dc:c3:b9:aa:00:f4:3e:02:6c:43:2b:
6e:90:d5:77:ab:16:e6:bf:24:6a:64:6d:a8:68:c6:fe:62:4d:
5b:51:21:a3:76:c3:6b:8a:f8:00:f1:87:62:9d:d6:73:12:91:
1d:5b:d7:61:e9:4e:18:b9:ce:2a:ed:d8:c7:76:a6:9e:b0:c5:
46:7a:88:89:28:fb:74:0e:2b:da:b5:43:c6:a7:9c:80:1e:67:
96:c7:a1:f6:93:3b:6a:22:d0:95:cd:05:ee:6d:90:0b:a9:6d:
4e:9e:b3:7d:ad:cf:eb:d3:e8:9d:a9:d7:d6:47:05:56:84:4f:
8a:97:43:4e:81:ac:54:2a:d3:f1:06:aa:09:87:04:04:e6:52:
e4:62:7f:57:d2:5a:d9:e1:12:8b:18:fa:27:da:82:b1:97:bc:
85:3b:35:d8:11:c9:f6:af:26:08:d9:88:de:91:57:4c:56:a8:
02:65:f6:18:99:a2:e7:4b:b9:e8:85:c0:d4:b1:c6:8d:07:9e:
4b:ff:e0:fb:28:28:53:78:b1:40:05:59:b6:32:08:e6:77:35:
a3:43:8b:de:fc:9c:7e:03:c8:75:7b:15:3b:67:18:72:fe:75:
90:99:24:f9:a2:47:a8:0d:5b:ea:df:ef:ff:ea:79:e2:ac:f9:
2a:02:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client