Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: Pk1YUTcu3VldJCX/fYz93C2VCYd43VnlGzCxeZGBBkg=
Subject key identifier: 14:03:BC:01:D2:9B:E6:D7:23:AE:12:F2:01:2F:1E:5C:5A:8D:10:34
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019A30B2EA942C0303C22D679C86174A2B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1708
Signing time: Wed 29 Oct 2025 16:00:23 +0000
Manifest this update: Wed 29 Oct 2025 16:00:23 +0000
Manifest next update: Thu 30 Oct 2025 16:00:23 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: JYw6cswurr1TuMMkSQQttCZrL5tAfN0nz9s9WxlW4l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:b2:ea:94:2c:03:03:c2:2d:67:9c:86:17:4a:2b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Oct 29 16:00:23 2025 GMT
Not After : Oct 30 16:00:23 2025 GMT
Subject: CN=1403bc01d29be6d723ae12f2012f1e5c5a8d1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:0b:34:ed:12:1d:5a:13:7c:d4:64:dd:89:
52:d6:5e:50:87:f4:9b:67:35:ea:1b:94:86:c4:14:
fc:58:c3:dd:07:ca:20:a0:84:06:64:e7:53:39:ee:
27:38:4b:b5:41:65:f2:5b:54:fb:ac:0d:ed:98:49:
66:95:0c:72:aa:bd:56:c1:f9:da:7f:f2:40:c1:9f:
a7:fc:60:d0:7e:49:7d:99:78:f3:a9:a9:4a:1c:64:
aa:da:14:4e:58:b6:95:45:c1:6f:d2:3c:99:ca:47:
87:74:35:e5:04:22:55:b5:4f:63:40:ab:b6:ec:61:
2d:f6:d5:65:82:a3:53:6f:5d:5b:c9:57:d4:5e:b8:
40:7d:26:6b:a2:71:98:9c:6e:06:46:a2:de:3a:59:
89:c5:5e:81:28:b7:1f:48:8f:be:cb:70:28:53:b0:
23:d9:12:17:7b:31:f3:1f:0e:d8:f7:39:5b:0c:4d:
d0:0d:d8:4e:45:fa:1c:04:4e:c7:a6:b0:58:4f:de:
5d:6d:24:03:96:79:b0:9c:9f:26:57:cc:f7:90:48:
da:93:09:f2:86:ba:85:f4:f9:07:98:73:f7:90:3e:
0c:8f:90:f3:39:e1:eb:fb:22:99:ec:fe:23:a3:c1:
b8:c4:3e:21:75:93:d3:5e:2e:a6:06:72:c7:77:2c:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:03:BC:01:D2:9B:E6:D7:23:AE:12:F2:01:2F:1E:5C:5A:8D:10:34
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:5f:55:98:41:52:ed:4e:4b:4c:3b:6d:d7:3b:41:56:d7:
a2:ba:34:77:13:a3:0f:86:31:d4:13:76:71:13:1c:89:51:bf:
98:5e:7c:1d:a1:11:61:33:4c:1b:ab:fe:65:49:37:f7:44:b8:
46:7b:80:98:41:51:ed:b9:28:6e:53:7e:92:80:70:ab:3f:86:
ef:0d:da:e3:5a:58:5a:a0:39:51:95:a9:6e:86:11:af:d2:43:
de:78:96:38:0c:13:89:88:7d:b5:a0:ee:87:c9:99:8b:a9:f4:
3f:d0:91:6b:d7:69:17:8b:9a:f3:5d:e1:02:33:34:75:49:ce:
e0:95:bc:e3:b6:bc:7d:a3:9c:98:d6:af:d0:2a:24:75:88:bf:
26:af:5d:b7:d2:bd:3c:80:ba:96:ea:03:6e:ec:10:89:ba:2e:
62:1b:a7:98:76:1f:64:ff:fd:91:fb:11:83:f1:89:f7:63:d9:
c5:61:06:38:c7:2a:c4:00:4b:dc:d1:44:de:cf:1a:37:98:9f:
d2:86:00:53:55:39:83:3c:88:1a:23:31:29:8b:81:cf:85:8d:
c5:b4:67:d3:33:f3:aa:7f:c6:18:36:4c:e8:97:a7:05:43:c5:
3f:fb:9b:43:bf:ed:39:09:b1:31:b6:e8:ee:6b:7b:ab:01:f9:
e7:c0:1d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:09:17 2025 by rpki-client