Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: eAfklfRA/R7I0IgmkRd6hPvwL08D/JBHciF3++/qowo=
Subject key identifier: DE:98:EA:A4:B5:12:A5:C1:81:4A:AA:88:C7:01:EA:A1:60:05:FD:4C
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0197493160D23BA49C7C045A5BE2628B8364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1587
Signing time: Sat 07 Jun 2025 07:01:02 +0000
Manifest this update: Sat 07 Jun 2025 07:01:02 +0000
Manifest next update: Sun 08 Jun 2025 07:01:02 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: E6S+q4IFgqbuk5sPQPj5W9ar4pijM3wHsd22oTquGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:60:d2:3b:a4:9c:7c:04:5a:5b:e2:62:8b:83:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jun 7 07:01:02 2025 GMT
Not After : Jun 8 07:01:02 2025 GMT
Subject: CN=de98eaa4b512a5c1814aaa88c701eaa16005fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:73:12:25:16:b9:f4:17:a6:d3:a7:61:91:
25:01:f5:34:ae:b0:c1:0d:b3:5a:8a:34:1f:e9:5f:
96:d4:55:cc:db:c7:80:17:fe:ca:78:dd:b9:25:bf:
8b:e6:17:16:17:ec:f2:09:13:b7:b6:93:63:e6:13:
99:74:f3:db:78:51:f2:10:e1:e0:e7:c2:0d:30:71:
c8:4c:f8:5b:90:b9:2d:f6:70:ad:11:36:a4:ff:d3:
e7:dc:4e:dc:ac:b2:17:33:64:0f:ee:68:a2:42:dd:
7c:3a:21:02:95:26:f3:27:d1:6b:0c:70:b9:10:73:
84:41:b6:2d:c7:f4:3f:0f:e4:de:d8:d1:96:a9:9a:
93:78:6f:50:1b:a2:9f:4e:33:13:e2:a8:34:b6:95:
5f:4d:8e:a1:26:3c:08:17:aa:c4:df:21:4a:81:bd:
2e:2f:3e:96:fa:de:64:6d:b0:e6:ef:d2:d3:0d:fc:
9d:3e:b0:79:a4:5a:65:77:43:b3:5b:33:e7:b4:1a:
1e:46:aa:38:24:d1:35:52:48:c0:52:45:7f:ce:69:
90:be:f3:7c:23:c5:d1:c1:71:bd:0a:ef:67:6c:98:
56:a3:c1:74:20:f0:37:fe:b0:b2:74:63:12:46:5b:
9c:18:f7:d4:58:fb:58:90:6a:5c:09:7c:df:a8:4f:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:EA:A4:B5:12:A5:C1:81:4A:AA:88:C7:01:EA:A1:60:05:FD:4C
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d3:fb:ad:48:d7:be:cd:fd:a0:2e:3a:f9:35:93:1e:aa:aa:
1d:9b:f0:16:79:08:2f:28:46:73:2b:1c:8f:f3:9d:f9:4c:4a:
fe:13:23:9d:68:1d:ea:7c:5f:67:0d:39:d9:75:45:a4:8a:50:
d1:2e:3e:bb:db:a8:21:7b:33:70:df:9c:2c:49:28:d2:cf:b1:
e9:cd:27:f0:84:0b:39:da:b6:c0:54:d3:52:ac:22:c1:1b:97:
cc:3b:44:65:f7:f8:b3:9d:75:ef:45:10:c2:1c:4a:dc:fd:0e:
48:48:86:89:6c:a2:10:97:be:df:b6:c0:d5:9a:77:21:bb:f5:
98:21:be:ad:3c:c9:25:90:29:16:d8:63:7a:6d:7c:c4:89:2a:
30:db:b3:ba:ff:54:4a:5d:d5:84:04:8b:c8:75:20:29:38:21:
08:fa:c3:8c:e7:19:f7:69:16:6a:a2:52:d3:3e:11:fc:4f:46:
68:b3:fb:8d:85:50:b3:0e:ba:d2:18:e0:be:42:65:16:cd:48:
6e:2b:cf:55:54:60:c8:33:57:de:d1:24:03:8d:b1:74:f6:e3:
3c:de:45:ce:a1:1d:e1:d0:36:33:a6:f3:39:29:8a:f5:16:39:
35:27:94:62:30:d2:66:f3:3b:8b:6f:39:90:ca:01:77:0d:98:
7e:b7:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:50 2025 by rpki-client