Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: g2TwOweQpOQzTPNk0EQ7AV2M/w1erheounRbuTKutP4=
Subject key identifier: 20:41:EC:ED:A3:5A:54:8D:43:C7:BA:D8:FB:E0:4F:0A:B5:EE:EE:E2
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019872983C5443B59D3741354F62BAB2F05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1621
Signing time: Mon 04 Aug 2025 01:00:36 +0000
Manifest this update: Mon 04 Aug 2025 01:00:36 +0000
Manifest next update: Tue 05 Aug 2025 01:00:36 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: J0dfyA6H9em1BM7LE1NI1WclPwzzx028AW076Z37zf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:3c:54:43:b5:9d:37:41:35:4f:62:ba:b2:f0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Aug 4 01:00:36 2025 GMT
Not After : Aug 5 01:00:36 2025 GMT
Subject: CN=2041eceda35a548d43c7bad8fbe04f0ab5eeeee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:16:66:d8:bd:79:73:95:13:54:54:22:c9:
35:64:50:47:40:03:69:e2:69:02:cf:a5:b5:ed:46:
3d:1e:0d:89:15:3e:6a:52:dd:8d:88:15:d2:16:60:
29:9c:0d:29:c5:0e:58:b4:bc:f4:c2:e6:05:63:83:
0b:ba:f4:54:c4:b8:d4:bb:af:b7:5b:4b:29:fd:e8:
d6:6c:57:40:1a:d2:53:af:db:73:09:95:9d:70:3d:
78:9c:49:21:a9:91:b8:11:ed:48:0f:42:13:86:0f:
a0:be:82:12:2c:0b:4b:87:55:b2:b2:41:fa:28:fc:
d0:8e:be:f9:a4:de:26:89:52:6a:e6:2f:8b:c4:36:
26:5c:d1:91:36:24:a4:7d:4b:b2:2e:66:29:e6:96:
93:d7:ff:26:65:71:92:16:bc:b3:e3:25:06:f4:85:
9c:fe:ec:94:27:4f:e6:da:5b:48:ba:47:ef:ca:0f:
71:75:7c:41:fb:5a:5d:0c:a7:76:a0:fd:31:91:55:
8d:b5:27:8a:08:d6:e2:18:dc:25:60:04:69:4e:76:
e5:25:15:d0:17:73:1c:8c:c0:12:fd:7c:32:35:fb:
13:c9:ec:ec:72:eb:3e:36:a5:a6:70:d6:da:c7:c7:
67:3c:89:27:b7:3e:7f:5a:9d:42:39:b1:d0:85:c9:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:EC:ED:A3:5A:54:8D:43:C7:BA:D8:FB:E0:4F:0A:B5:EE:EE:E2
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0e:bd:3f:3a:35:e3:07:79:5c:46:2d:52:dc:0f:9f:17:d0:
bd:7e:1f:a9:39:ef:2a:70:2c:79:88:75:1d:e1:99:d9:03:22:
f9:ef:8f:f1:da:ab:cb:fe:61:bb:bc:29:4a:0a:05:7e:5d:71:
b0:3a:a2:56:20:1c:35:45:3d:27:dd:0b:e9:1b:5f:32:60:06:
9f:b1:91:93:e5:6f:e0:d9:c7:5a:37:94:f3:f2:bf:23:b4:d7:
72:9d:0c:79:aa:4c:6a:ab:f5:05:69:f6:c9:35:98:89:30:a6:
35:d7:92:fa:9d:fb:d9:83:62:4b:d4:36:26:c1:63:3e:4e:4b:
85:d4:8f:f6:3c:8b:ec:46:02:62:8a:3c:38:22:ca:41:9d:94:
8a:dd:97:8b:61:e0:65:30:b1:59:e0:b6:44:6d:49:c9:c1:7d:
0d:8d:82:9e:ed:33:31:db:ed:2f:94:ea:fb:4f:5a:cf:9c:cb:
96:90:db:8f:c6:e8:dd:2d:8f:0f:f4:f5:e0:bb:12:4d:0c:1a:
7d:33:ad:eb:cd:a5:d4:af:85:d9:e4:4f:0d:6e:ff:8a:1a:17:
0b:17:d2:d2:de:a8:9a:8a:81:a4:16:96:0c:a0:8c:46:91:0e:
64:b5:70:3d:b7:c0:6c:ab:d5:a6:0b:e0:ec:d9:35:19:e3:59:
d6:33:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:15 2025 by rpki-client