Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: +IilZafBLnMhahRT7VHQTGcqf5q5z8VJ9BbZ1dff9z4=
Subject key identifier: DB:27:89:91:89:2F:85:36:F2:53:F4:58:30:2E:48:C9:9F:85:78:0D
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 01993D5FD9DDFFFF56AC018D71CD7921835C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 168A
Signing time: Fri 12 Sep 2025 10:01:55 +0000
Manifest this update: Fri 12 Sep 2025 10:01:55 +0000
Manifest next update: Sat 13 Sep 2025 10:01:55 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: 5HFYP3H6el+2oCt2z8qI5f5SF8XLQ20G3plyyKeOWU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:5f:d9:dd:ff:ff:56:ac:01:8d:71:cd:79:21:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Sep 12 10:01:55 2025 GMT
Not After : Sep 13 10:01:55 2025 GMT
Subject: CN=db278991892f8536f253f458302e48c99f85780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:e1:46:ae:4f:74:7f:95:7f:1c:a8:91:c7:
84:22:91:61:52:1b:97:6a:17:2d:fc:e6:86:b4:80:
b5:ec:cd:32:16:ec:80:97:3b:52:13:92:2e:a5:90:
e0:98:7d:d2:1d:45:5e:77:a4:41:c0:0b:39:94:d1:
1e:b4:63:1b:24:b6:87:d2:25:c9:6e:24:c3:17:14:
aa:e7:69:2c:cf:ce:76:ce:b0:3b:c3:38:f7:50:81:
c5:29:1b:c6:6f:dd:a3:f0:9e:49:a1:81:c2:13:70:
db:a5:36:0c:0d:a1:4b:cf:5e:b5:8e:0b:36:80:0f:
be:d8:d9:bc:cd:ed:65:b9:a0:7b:6b:c8:25:f1:23:
3f:38:9e:0f:c6:8e:83:5c:fa:2c:45:7b:34:ca:38:
83:eb:ad:bc:86:3d:40:95:8e:aa:27:1e:71:8e:06:
6f:13:6c:99:2f:58:ab:e2:e9:84:dc:12:07:88:56:
ee:09:ea:68:95:19:b7:4c:a0:6f:fc:57:e3:37:3b:
ad:60:d9:14:91:39:10:64:83:1f:ec:1b:cb:ed:f8:
9f:22:f0:45:d9:28:d8:cd:33:f3:49:a1:a7:20:c8:
6a:02:80:91:56:52:7b:b3:92:79:79:12:ba:f0:65:
29:a8:0b:11:41:28:a5:ef:fb:80:17:8d:be:19:75:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:89:91:89:2F:85:36:F2:53:F4:58:30:2E:48:C9:9F:85:78:0D
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8a:a2:af:2f:70:4a:8b:63:d4:d1:cc:6c:80:93:42:50:43:
6b:82:0a:c2:5b:67:de:87:cc:3e:4c:9e:5d:c8:28:a5:64:eb:
cb:63:85:ac:8f:f8:97:c6:b8:09:2b:21:8a:d6:93:96:3c:f6:
6e:02:ea:ad:39:55:50:f2:94:55:d1:15:f4:03:50:60:ed:c1:
e7:be:63:38:3c:25:cf:e1:6d:66:d2:f1:9a:1b:68:b9:f5:54:
9b:14:1d:2d:1f:0d:6c:11:14:88:ac:18:9a:d8:5b:b3:b8:56:
83:2b:6b:8c:1a:db:e5:ff:30:81:71:7a:eb:4d:67:8e:8b:c6:
b2:6a:02:06:f0:97:62:10:3e:e4:f8:ff:43:25:1c:b8:44:c8:
15:a8:3c:b4:0a:50:bd:f7:7a:0c:b8:a0:d5:5d:c5:9e:45:7f:
ca:c1:fe:74:47:62:61:9b:19:5f:1e:cf:74:14:f4:5d:5d:d6:
cc:a4:b4:72:31:08:01:7d:b1:5a:cf:bd:dd:85:1a:a4:5c:ef:
ba:01:44:c6:82:90:ed:b6:ba:8a:84:d8:ab:2a:4a:e3:06:c0:
04:1b:82:09:21:14:3e:b2:dc:30:82:ab:0d:cc:d6:c8:5f:14:
6c:a5:de:8f:46:64:33:af:40:f1:3a:15:26:66:f3:f7:38:ff:
09:02:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 14:51:42 2025 by rpki-client