Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: ybbzbMLnVs6JqT/vWURZT4gpT41+pSeMpj+SK5nK7M4=
Subject key identifier: B7:A2:4A:22:52:E8:77:AB:A2:A5:B3:AF:F9:FF:D5:9F:6B:95:27:CF
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0197778A6FB3E2D9BAC1618251EF2F5B52C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 159F
Signing time: Mon 16 Jun 2025 07:00:50 +0000
Manifest this update: Mon 16 Jun 2025 07:00:50 +0000
Manifest next update: Tue 17 Jun 2025 07:00:50 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: MsldJFQyZNmCqTRQ+jBUFc6lvoqJifCqgqa0OZv5jUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:6f:b3:e2:d9:ba:c1:61:82:51:ef:2f:5b:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jun 16 07:00:50 2025 GMT
Not After : Jun 17 07:00:50 2025 GMT
Subject: CN=b7a24a2252e877aba2a5b3aff9ffd59f6b9527cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:f1:92:9f:a2:21:cd:e8:70:56:ea:2d:9f:
df:68:4b:dd:a8:07:e8:01:16:ac:99:06:68:8e:9f:
a7:6c:b5:9c:c2:f0:b4:ef:7a:90:f7:3e:f3:23:d6:
9a:58:ae:15:74:6a:52:5b:78:b9:ce:23:71:a8:d7:
df:7e:1a:6b:88:7d:fc:01:bb:ea:1e:f5:c3:98:c0:
06:17:01:03:b0:c9:5b:2a:a3:d5:34:05:cf:6a:0d:
d8:81:23:c4:59:49:d7:0b:52:63:09:73:8d:fb:3c:
b1:f2:85:41:28:f6:03:d3:39:e6:dc:02:58:f6:cb:
da:53:a2:8d:9c:ae:20:07:e4:f7:00:fc:dd:3d:cd:
bb:2c:20:f5:0a:e3:8f:c6:d5:af:20:3f:69:2d:89:
63:a3:3f:f6:11:0c:67:b7:c7:db:7f:eb:53:a8:7d:
75:99:26:e9:41:26:04:b6:1d:bb:8d:53:bf:c1:e0:
52:8d:bb:37:66:c7:e7:dd:8f:7e:f7:e9:ba:ba:f8:
68:1f:61:3c:c5:0f:45:ae:b2:55:a3:d5:e6:7b:2a:
99:e9:93:0b:2b:b3:e8:2e:6d:01:16:bc:90:f1:3c:
1c:89:b4:69:f4:0d:20:87:08:67:54:2e:6c:60:66:
53:fc:39:43:c2:f1:7c:40:4b:c5:43:48:68:34:ee:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:4A:22:52:E8:77:AB:A2:A5:B3:AF:F9:FF:D5:9F:6B:95:27:CF
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:ea:de:3c:e1:bc:c5:c5:31:16:9b:c1:b3:f0:85:81:e0:
b0:80:ae:39:8b:ff:21:0e:59:76:df:d0:b8:22:ef:30:78:c2:
9f:35:98:5e:42:69:23:15:16:fc:df:a6:ce:fb:41:9a:f0:97:
bb:8f:22:7f:d4:ae:e0:2e:89:55:cf:a0:e5:33:7b:21:75:c5:
d1:5a:46:aa:58:b8:a6:59:15:35:09:fb:bc:ac:84:d0:6c:a2:
b6:1f:bc:4a:83:e0:ee:13:44:04:77:f6:a1:51:36:31:96:41:
62:30:3d:07:19:a8:0b:64:24:02:29:3c:8a:5a:b3:da:4e:cd:
64:65:19:d0:c2:d7:38:8c:d0:08:ee:8a:91:7d:dc:04:9c:cb:
98:61:c0:ae:21:e4:cc:ee:46:c3:20:e2:95:a4:63:b8:25:6c:
92:23:7b:b4:67:f1:db:09:5e:31:67:b2:31:2a:67:5f:78:b6:
35:f9:56:d8:b0:55:a4:40:41:0d:0c:9f:37:99:af:ff:44:1c:
ef:38:d0:fa:09:4a:ee:b2:ec:73:d2:93:9a:2f:8a:ea:0d:0d:
67:94:2d:e1:31:1f:9b:37:7e:8a:db:af:cf:be:ab:46:cb:fc:
73:85:b3:b1:fd:ee:d6:d1:ef:57:87:d8:bc:b7:6c:f2:dc:32:
f2:64:33:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3im+z4tm6wWGCUe8vW1LEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjUwNjE2MDcwMDUwWhcNMjUwNjE3MDcwMDUwWjAzMTEwLwYDVQQD
EyhiN2EyNGEyMjUyZTg3N2FiYTJhNWIzYWZmOWZmZDU5ZjZiOTUyN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiPxkp+iIc3ocFbqLZ/faEvdqAfo
ARasmQZojp+nbLWcwvC073qQ9z7zI9aaWK4VdGpSW3i5ziNxqNfffhpriH38Abvq
HvXDmMAGFwEDsMlbKqPVNAXPag3YgSPEWUnXC1JjCXON+zyx8oVBKPYD0znm3AJY
9svaU6KNnK4gB+T3APzdPc27LCD1CuOPxtWvID9pLYljoz/2EQxnt8fbf+tTqH11
mSbpQSYEth27jVO/weBSjbs3Zsfn3Y9+9+m6uvhoH2E8xQ9FrrJVo9XmeyqZ6ZML
K7PoLm0BFryQ8TwcibRp9A0ghwhnVC5sYGZT/DlDwvF8QEvFQ0hoNO4NDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeiSiJS6HeroqWzr/n/1Z9rlSfPMB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT3q3jzh
vMXFMRabwbPwhYHgsICuOYv/IQ5Zdt/QuCLvMHjCnzWYXkJpIxUW/N+mzvtBmvCX
u48if9Su4C6JVc+g5TN7IXXF0VpGqli4plkVNQn7vKyE0Gyith+8SoPg7hNEBHf2
oVE2MZZBYjA9BxmoC2QkAik8ilqz2k7NZGUZ0MLXOIzQCO6KkX3cBJzLmGHAriHk
zO5GwyDilaRjuCVskiN7tGfx2wleMWeyMSpnX3i2NflW2LBVpEBBDQyfN5mv/0Qc
7zjQ+glK7rLsc9KTmi+K6g0NZ5Qt4TEfmzd+ituvz76rRsv8c4Wzsf3u1tHvV4fY
vLds8twy8mQznA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:03:35 2025 by rpki-client