Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: wBBuHIM2UQS1yL2yuVaqHbvKdLsY++nwadAoC6xtkuE=
Subject key identifier: CB:C8:B1:90:83:FA:7A:A9:1C:47:7E:1C:4C:5F:AC:75:8C:DA:43:C4
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0197B9342B24D247E8823E037E8B367ADEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 15C1
Signing time: Sun 29 Jun 2025 01:01:33 +0000
Manifest this update: Sun 29 Jun 2025 01:01:33 +0000
Manifest next update: Mon 30 Jun 2025 01:01:33 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: 4riw3uJWbFTVZ5m/8D2RiTkwxqn91lWPe6Hx62yBHSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:2b:24:d2:47:e8:82:3e:03:7e:8b:36:7a:de:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jun 29 01:01:33 2025 GMT
Not After : Jun 30 01:01:33 2025 GMT
Subject: CN=cbc8b19083fa7aa91c477e1c4c5fac758cda43c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:c7:2b:81:64:e8:9a:b1:18:01:3b:df:eb:
e2:cc:63:ad:6d:ec:b1:e5:08:1c:36:e3:38:82:b2:
27:69:c3:bb:62:30:8c:42:9b:77:ca:53:20:d1:52:
8c:c1:54:a1:6c:fc:71:1a:a8:ed:bd:7f:31:81:37:
44:31:8c:d4:f1:73:6d:b8:4e:a2:83:e0:96:c4:af:
99:15:d1:7e:ac:fd:ef:ea:38:fc:51:88:c2:13:0f:
48:c1:e1:a8:bd:84:20:25:cc:56:9d:e2:29:15:7c:
43:7f:00:07:cc:ca:22:d4:3d:2f:72:ee:41:ec:03:
94:c0:d2:6f:b6:0e:87:f3:dc:1a:1e:69:3c:1e:55:
2c:35:18:d8:04:0f:ee:59:4b:2c:2b:f2:7e:42:0b:
93:eb:f2:13:1f:4a:dc:35:94:3a:85:be:c2:0e:cc:
b0:99:0f:22:08:03:93:7e:71:33:f1:5c:24:e5:c1:
dd:ba:d3:75:7c:49:6a:95:6e:86:54:22:97:37:d2:
1b:81:8a:f2:7e:a2:08:07:5e:2a:32:8c:a1:73:5a:
3a:e8:54:69:ae:67:f8:d5:17:89:3b:7d:5e:d6:14:
ca:b2:70:77:37:c4:97:8c:1d:1c:2e:ec:87:d3:66:
e4:af:ff:b4:17:94:55:b2:72:ed:d5:66:cc:aa:5d:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:B1:90:83:FA:7A:A9:1C:47:7E:1C:4C:5F:AC:75:8C:DA:43:C4
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:28:a9:2c:fc:4d:bc:fd:a8:df:de:25:97:27:4b:82:18:05:
35:14:ad:a1:09:26:15:5e:85:9e:e3:c6:25:b0:94:b4:9f:89:
ef:17:a9:b5:b0:c5:22:10:2c:d0:2d:f9:f5:5b:fb:2a:1c:f7:
d2:8a:58:b5:0d:dc:88:61:da:74:a7:c2:01:f8:fa:ab:db:07:
58:8a:69:af:a3:7b:d5:f6:95:fb:56:3a:65:ed:42:7c:3d:de:
8f:f7:c9:eb:c0:de:0e:64:24:e2:fb:69:51:b7:00:e6:ec:5e:
1d:e5:54:64:ac:b1:25:21:db:78:0b:fd:98:7b:90:b9:26:c1:
fb:9c:bc:c8:17:c5:91:bd:6c:8a:59:4c:a2:33:36:89:f0:3e:
68:e5:e3:ce:5d:01:13:93:45:65:04:d9:3f:73:72:bb:1b:1c:
55:5c:99:73:51:2b:70:ab:30:a9:36:5e:c8:93:f5:ab:92:03:
b6:26:c2:33:02:82:2b:5f:b9:14:eb:45:f9:bb:f6:27:a1:fd:
c1:27:48:83:35:f0:4f:78:90:34:32:57:74:22:f3:b7:e7:4e:
14:99:4c:50:a1:4c:92:0f:98:6a:a3:10:ed:74:4d:2c:50:89:
c8:b2:ab:25:60:e9:98:b6:f3:ae:57:30:5c:78:4f:da:f2:75:
71:d2:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:02 2025 by rpki-client