Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: JKcG5aGbGFb7ywRhlNhayCQEOn0pN5WRkpfVY3CkpvU=
Subject key identifier: 15:FC:88:FF:B5:C7:19:E8:8C:0E:ED:AA:E3:0A:15:A2:9D:9F:B2:F8
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019A5375D362C8E660E0501397604DA894F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 171A
Signing time: Wed 05 Nov 2025 10:00:22 +0000
Manifest this update: Wed 05 Nov 2025 10:00:22 +0000
Manifest next update: Thu 06 Nov 2025 10:00:22 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: Jt/HBGMM+3EKRsStB/7p3zOsA5SjWspkfqK5gsA4rzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d3:62:c8:e6:60:e0:50:13:97:60:4d:a8:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Nov 5 10:00:22 2025 GMT
Not After : Nov 6 10:00:22 2025 GMT
Subject: CN=15fc88ffb5c719e88c0eedaae30a15a29d9fb2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:99:cd:ad:d5:14:f3:a2:77:54:b4:59:6a:
49:69:73:05:df:01:34:ed:06:94:a4:8f:dd:c0:9e:
1b:0c:00:cb:bd:9f:9d:a2:1b:cc:56:89:42:d1:be:
de:e3:65:6a:fb:ae:ee:00:f2:b5:f0:64:d6:a1:33:
53:7f:a6:2b:05:c1:45:03:00:fb:45:79:30:e8:a5:
6a:e6:37:df:9c:5b:9c:2f:8f:aa:cc:a2:6a:f2:24:
b2:25:75:72:2e:a8:62:4f:50:a0:29:a5:8b:07:ce:
e7:20:0c:2a:08:1d:6b:4d:7d:e8:0f:c3:27:71:00:
30:cb:6d:c5:29:dc:15:06:cd:cd:81:c2:03:22:63:
52:24:3f:19:5f:d1:73:af:96:eb:c4:c1:41:99:5b:
5c:b5:f9:6b:ef:a9:b3:55:d7:36:0c:94:74:3b:5b:
0c:11:1b:d6:bd:ab:ff:66:ff:ac:f0:ba:69:84:6e:
e6:98:00:d0:08:3e:a3:d5:d3:8a:02:b3:a5:1c:10:
73:34:ba:8d:9e:47:4d:4f:85:7b:44:d0:de:8b:96:
e6:73:69:a4:ab:ad:38:48:22:47:48:9b:3b:35:20:
86:88:9a:64:a8:d7:8f:4c:77:9e:57:3a:58:10:cf:
4b:e6:6f:9e:3e:06:8a:0e:b7:b6:42:45:92:6d:18:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:88:FF:B5:C7:19:E8:8C:0E:ED:AA:E3:0A:15:A2:9D:9F:B2:F8
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:41:a5:80:2c:ad:67:3e:98:8e:30:e1:9a:36:28:42:59:42:
54:77:92:91:f6:fd:36:cc:fd:b9:16:42:38:d9:c9:1f:86:42:
e0:0d:2d:38:e9:ce:18:cd:63:6e:6b:88:04:bd:88:7a:99:94:
08:73:38:3d:45:31:4a:d6:1b:94:ed:d6:f9:a5:1a:f4:3b:7c:
5c:5f:12:02:1b:e0:0a:e4:f0:a7:67:4b:82:0c:27:fe:1d:a6:
03:e9:cd:56:9a:66:83:eb:f6:1f:ad:3d:88:d8:da:db:25:78:
6b:ad:53:8b:96:ba:97:a3:35:18:38:63:f9:db:8c:c1:2c:ae:
ee:2c:da:66:e4:48:56:97:2f:95:74:f8:be:19:61:07:2d:39:
de:54:34:7a:66:0a:c3:76:fa:cd:03:30:3c:60:05:1a:5b:75:
83:f4:f5:ba:69:f1:90:29:53:5b:65:b7:c7:41:58:f9:76:fc:
5a:a0:c4:1e:94:ee:d9:46:be:e1:8c:6e:f3:80:53:6d:c4:c2:
fd:3d:7a:5f:47:9b:54:e9:4f:07:47:95:c9:12:72:02:1d:14:
e1:87:96:a9:07:c4:8a:3a:95:78:71:78:1a:27:66:2d:ed:9d:
b0:9c:21:96:7d:fe:7f:7a:87:9b:e9:88:9d:c2:e2:f4:65:ac:
cc:5e:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:01 2025 by rpki-client