Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: yLoShLUWir/hHQA82yTPwhDJZeaww+LCbg7PyNKWLkI=
Subject key identifier: C4:8F:0A:C4:AC:8B:F5:AB:CA:AF:EF:05:B4:AC:C6:9B:88:80:4E:4A
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 01984FD4E58B8339401A688134DF5855E606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 160F
Signing time: Mon 28 Jul 2025 07:00:09 +0000
Manifest this update: Mon 28 Jul 2025 07:00:09 +0000
Manifest next update: Tue 29 Jul 2025 07:00:09 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: 0yUlfJCnHztzYhSJ4ql/nAehVoeXwDIjCedfe8MQ42o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:d4:e5:8b:83:39:40:1a:68:81:34:df:58:55:e6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jul 28 07:00:09 2025 GMT
Not After : Jul 29 07:00:09 2025 GMT
Subject: CN=c48f0ac4ac8bf5abcaafef05b4acc69b88804e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:26:3d:80:a4:b4:3a:ca:d0:b8:32:3a:40:
96:98:fc:98:c4:4a:d6:2e:48:b9:98:95:4c:02:a4:
85:d6:99:10:fa:dc:f1:97:19:d9:7a:0b:85:b1:d1:
cf:96:a6:b8:a6:4e:4d:04:ce:56:af:27:14:7d:95:
c6:ac:53:6d:ac:ec:ae:61:49:dc:0e:b1:66:8e:b9:
a5:85:27:b4:8d:af:df:0d:5b:02:9e:8d:7e:08:d5:
2e:80:31:2d:5d:73:60:d5:e5:72:a1:0f:23:93:3a:
29:1f:e4:bf:bf:43:b8:10:6e:9b:1f:21:40:c7:a4:
2c:b7:09:d6:2f:94:90:70:e7:bb:32:87:1c:83:1f:
85:94:16:57:a6:a7:e4:db:64:e2:01:a2:40:a4:b0:
de:32:53:a4:3d:26:ea:98:11:8b:fe:f8:4a:c0:db:
93:77:36:04:60:89:4c:20:aa:56:e5:20:3d:c9:c9:
bf:c3:c1:a4:7d:66:e1:dc:c4:b5:ee:f3:56:d5:69:
4f:ed:2f:5b:d1:23:a2:3c:3c:5a:18:1b:6a:cf:0a:
fe:8d:a6:65:92:24:86:14:e9:8e:f1:b8:73:cb:f1:
7e:6e:d6:fb:f5:ef:5b:48:b3:8a:e6:82:47:b5:5d:
33:03:fc:da:a1:d5:0b:7d:d6:4f:fc:47:0e:1c:49:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:0A:C4:AC:8B:F5:AB:CA:AF:EF:05:B4:AC:C6:9B:88:80:4E:4A
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:52:93:ad:b1:c3:92:e8:86:a2:dc:3c:86:fe:6f:58:70:
6a:fb:33:7e:ad:3d:03:c1:20:1e:1b:d6:c7:0a:62:d0:81:44:
2f:a2:5f:ff:7b:13:7c:36:f9:39:3d:07:fb:8e:b1:cb:e1:4f:
47:11:4d:fe:e1:e7:49:1e:f7:e2:0c:6a:30:b0:1c:81:54:6d:
48:64:4f:3c:31:52:06:30:d0:a8:40:c4:70:26:5c:e5:ea:5e:
5a:5e:ec:d5:6f:03:c0:3d:39:54:21:33:fd:f7:10:51:57:f0:
94:cb:b7:47:47:c1:4d:e3:a7:62:05:b9:49:7d:75:7c:ad:2b:
0c:b7:3d:41:e5:3c:e2:14:47:8a:26:00:36:85:08:5f:03:92:
41:5d:52:3a:4a:84:8f:c8:86:d7:a0:40:09:ba:9a:9c:28:fd:
15:cb:a8:ae:80:f5:4e:74:bb:cd:35:53:9c:86:3c:c8:e8:35:
4f:f7:4a:33:79:55:83:be:36:50:7f:53:37:37:89:8b:3e:d9:
87:5e:f5:90:ec:42:32:c7:56:34:6a:11:76:a3:09:e2:4b:44:
d9:cc:15:76:61:6f:5d:69:b8:d8:5b:9e:a7:72:3d:64:c6:3a:
9c:1e:bd:2b:19:da:b9:c4:10:5c:26:47:72:9b:4a:9a:9c:d6:
c8:88:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 14:45:31 2025 by rpki-client