Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: /O2+NgdU8xk4r52iOA1yrLiCt/s28ryI+9DBkGM9KZE=
Subject key identifier: 19:48:59:59:61:ED:79:3B:47:DA:9E:EA:29:F2:AB:B3:69:CF:48:0C
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0198D5156E966F6693FCAE5448A144FC238B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: m7Pncwko/SsFHY7ngtvdHGU+4Zp6TZhTnQJ0XYXckyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6e:96:6f:66:93:fc:ae:54:48:a1:44:fc:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=1948595961ed793b47da9eea29f2abb369cf480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:d6:d3:5b:68:08:04:31:28:07:38:76:a0:
92:08:ad:c8:6e:37:bb:38:37:fd:be:31:47:a4:93:
0c:a2:fd:7c:34:e5:f2:11:b8:b6:1d:ff:5a:3b:1c:
fb:31:72:73:04:b0:4c:2d:b2:5c:b5:ac:a7:a9:48:
f2:4b:1b:5a:33:7e:8c:ec:1e:8f:78:73:a3:d9:f1:
3c:61:d0:dc:51:cb:53:9e:30:fe:be:6a:7a:f9:8c:
73:9d:f4:24:9c:bf:65:2a:96:09:ed:25:81:ef:78:
5d:b9:84:96:d8:34:c9:46:ee:00:25:6a:f8:3f:4f:
34:d8:f7:cb:02:36:0f:e0:d0:b0:3f:ae:e4:e1:b9:
37:35:fd:45:1f:6f:cc:c0:cb:4c:89:33:fb:00:92:
a4:0f:1f:79:72:af:77:9e:6d:9c:cd:d5:2c:d2:d0:
6c:d8:16:d0:f6:01:82:a4:f5:ed:be:e6:4a:c1:9f:
2e:e1:6a:c6:50:6c:88:c3:c3:82:70:ad:69:11:d2:
9e:5b:40:91:a9:4b:07:8f:9f:ee:f7:42:0b:ec:4e:
5d:f8:8c:7e:9e:ca:78:6c:1f:01:f8:ea:e5:0b:1b:
70:06:ec:7f:db:3b:07:f2:a3:bd:50:8f:a2:66:77:
3a:11:56:49:ec:d5:49:cf:d3:04:bf:8c:a6:a6:f4:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:48:59:59:61:ED:79:3B:47:DA:9E:EA:29:F2:AB:B3:69:CF:48:0C
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8c:b9:ba:69:c2:9f:f9:90:6e:6d:bd:e0:26:92:90:f8:d1:
11:b1:00:ee:37:89:00:e3:23:75:c6:5f:8c:7d:9f:03:0e:28:
31:d7:f7:cc:d2:1a:50:4c:3b:11:17:b0:d9:10:9b:44:e7:72:
ad:cc:1a:f3:4e:a1:f3:1f:a8:a9:d3:1d:5e:e1:6c:e6:de:c0:
7e:22:7d:46:72:81:16:b7:39:98:d0:29:bc:3d:2b:7a:06:02:
79:f0:73:85:4d:6a:8d:87:73:ff:df:55:c7:ea:20:74:c0:62:
87:e9:5d:48:a2:18:ae:4e:1c:01:4e:77:1a:38:b1:81:e0:e7:
ca:7f:38:3f:e9:e3:71:39:fe:66:7d:72:1d:0d:09:78:5b:7e:
e9:36:b2:0a:42:78:48:87:29:12:90:3f:c4:f0:23:db:dd:79:
11:a3:ac:a4:91:ee:56:91:74:a5:f9:ed:4e:2a:9e:13:3d:79:
98:e5:db:bb:13:c3:6d:a1:78:96:e4:89:42:a1:19:63:25:6b:
a2:5f:b0:c9:36:29:61:03:35:8a:9f:35:cc:a3:d5:bc:9c:16:
e8:54:2d:4f:a2:e3:cc:72:4c:67:ce:55:02:02:31:a1:b3:8d:
53:db:23:9d:75:cb:83:b1:d5:99:6c:9b:02:09:42:ba:e2:5d:
3a:a0:f6:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFW6Wb2aT/K5USKFE/COLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjUwODIzMDQwMDA4WhcNMjUwODI0MDQwMDA4WjAzMTEwLwYDVQQD
EygxOTQ4NTk1OTYxZWQ3OTNiNDdkYTllZWEyOWYyYWJiMzY5Y2Y0ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnvW01toCAQxKAc4dqCSCK3Ibje7
ODf9vjFHpJMMov18NOXyEbi2Hf9aOxz7MXJzBLBMLbJctaynqUjySxtaM36M7B6P
eHOj2fE8YdDcUctTnjD+vmp6+YxznfQknL9lKpYJ7SWB73hduYSW2DTJRu4AJWr4
P0802PfLAjYP4NCwP67k4bk3Nf1FH2/MwMtMiTP7AJKkDx95cq93nm2czdUs0tBs
2BbQ9gGCpPXtvuZKwZ8u4WrGUGyIw8OCcK1pEdKeW0CRqUsHj5/u90IL7E5d+Ix+
nsp4bB8B+OrlCxtwBux/2zsH8qO9UI+iZnc6EVZJ7NVJz9MEv4ympvS1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlIWVlh7Xk7R9qe6inyq7Npz0gMMB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIy5umnC
n/mQbm294CaSkPjREbEA7jeJAOMjdcZfjH2fAw4oMdf3zNIaUEw7ERew2RCbROdy
rcwa806h8x+oqdMdXuFs5t7AfiJ9RnKBFrc5mNApvD0regYCefBzhU1qjYdz/99V
x+ogdMBih+ldSKIYrk4cAU53GjixgeDnyn84P+njcTn+Zn1yHQ0JeFt+6TayCkJ4
SIcpEpA/xPAj2915EaOspJHuVpF0pfntTiqeEz15mOXbuxPDbaF4luSJQqEZYyVr
ol+wyTYpYQM1ip81zKPVvJwW6FQtT6LjzHJMZ85VAgIxobONU9sjnXXLg7HVmWyb
AglCuuJdOqD2cA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:56 2025 by rpki-client