Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: KeRQJXP3wNZR8iwC5guV8yxvIWh1F54uYsOuoYCidM4=
Subject key identifier: 3A:9E:F8:B1:35:F8:50:02:52:86:F4:C2:50:84:6D:0E:4D:99:4E:72
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0196A6F85ED3DFA586AB6158E80C0E6FACB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1533
Signing time: Tue 06 May 2025 19:00:17 +0000
Manifest this update: Tue 06 May 2025 19:00:17 +0000
Manifest next update: Wed 07 May 2025 19:00:17 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: eKgY/u4Lgv4jSdu76zNmfsDQgzvFp3W7gaiHKfDEJkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:5e:d3:df:a5:86:ab:61:58:e8:0c:0e:6f:ac:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: May 6 19:00:17 2025 GMT
Not After : May 7 19:00:17 2025 GMT
Subject: CN=3a9ef8b135f850025286f4c250846d0e4d994e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:8a:dd:7c:b6:4e:43:85:d3:f2:81:9e:7a:
52:40:28:8a:05:f6:9c:85:76:32:a6:7b:6d:78:3d:
a6:22:5c:e7:ce:e7:f3:51:12:74:43:93:f8:da:9e:
20:9b:ba:c6:00:87:b1:81:43:a7:a0:02:dc:37:5c:
37:d1:a1:04:0a:c3:d7:9a:e1:37:91:44:0e:61:d1:
9a:01:64:b5:18:2c:bd:26:01:e4:9f:27:45:6f:bd:
1d:63:ac:20:84:a9:b6:b1:c2:10:82:e7:d1:85:c5:
11:d6:96:d5:09:8e:37:90:3b:8e:36:e8:ee:4b:67:
96:f9:e1:90:b9:51:44:df:26:ac:c0:1d:ec:85:13:
cc:d6:ed:27:e8:90:95:f8:6d:15:6f:89:f0:1c:84:
a1:d0:e7:83:43:59:11:ed:7b:8b:5d:82:aa:6a:d7:
e4:2e:72:01:b5:9c:2d:04:78:95:fb:3f:0e:2f:56:
98:86:68:37:29:41:60:fa:b1:61:72:a5:0d:51:bd:
3d:38:4f:ac:59:c9:82:38:aa:36:06:28:ee:20:a3:
ec:ac:a4:6f:48:1f:77:9d:5a:e3:3c:3f:cb:bc:5d:
40:83:7c:c7:fc:2c:0f:bc:d1:5e:65:89:f1:98:05:
0b:93:c2:9f:69:58:04:de:85:d5:f2:83:fb:37:ce:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:F8:B1:35:F8:50:02:52:86:F4:C2:50:84:6D:0E:4D:99:4E:72
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:87:68:c7:e3:ee:f0:cf:fe:f8:32:3c:da:76:04:8c:6c:4e:
83:70:08:6c:ca:50:1e:8d:5b:b1:44:84:21:50:62:97:5e:24:
ec:89:77:67:6d:aa:0f:5c:00:36:a9:6a:0d:ef:35:be:bf:26:
dd:83:83:5b:5d:e7:9d:5c:10:08:51:ff:38:15:d2:6a:f3:22:
33:e0:c6:63:56:89:da:03:c3:86:dc:b1:7e:5d:08:b6:20:0c:
71:00:b4:16:53:77:e6:d4:bf:3d:a7:a2:6d:c4:d4:99:1e:d8:
f3:6f:fd:08:36:8b:e8:03:b0:fd:ff:26:7b:58:66:65:72:75:
14:de:c6:33:f4:29:ff:3d:07:5a:e4:a1:3d:61:c7:be:89:4a:
cf:3b:fd:b5:16:60:ac:4a:22:41:68:61:a3:f2:7b:b7:d3:80:
ab:d0:a8:43:67:e7:4f:a8:c5:60:53:ed:62:49:14:c9:93:65:
71:c8:04:85:14:c7:0a:15:81:e6:14:b5:67:e7:1c:95:18:4c:
5d:4a:28:23:41:c8:c7:f3:82:bf:a6:47:05:d8:ca:ff:9a:ae:
f6:cd:27:df:b3:35:4c:90:06:55:ab:ed:28:f0:54:58:3e:94:
2a:7c:92:c5:3b:4c:06:38:8f:d3:83:60:79:6d:dd:16:7e:6c:
65:d6:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:18:18 2025 by rpki-client