Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: GpFqZjAHcedmGAyBM3cBdtHqt+YA8HxbL5m+IjjE62o=
Subject key identifier: 63:12:55:76:72:59:09:5D:E0:F3:EA:09:E7:EF:CD:6A:F8:22:D9:05
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 01984A09C11A412399F02D6A0A6983AA7AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 02C5
Signing time: Sun 27 Jul 2025 04:00:09 +0000
Manifest this update: Sun 27 Jul 2025 04:00:09 +0000
Manifest next update: Mon 28 Jul 2025 04:00:09 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: MVgUl/t/o93nPe6OoS/BFGxo3BEk5DGooTKe2X+/ZCU=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c1:1a:41:23:99:f0:2d:6a:0a:69:83:aa:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Jul 27 04:00:09 2025 GMT
Not After : Jul 28 04:00:09 2025 GMT
Subject: CN=631255767259095de0f3ea09e7efcd6af822d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:75:36:f1:af:6a:43:a3:b8:90:ce:ca:65:
8b:4f:62:d4:d0:c0:52:93:7e:1f:c0:6f:0d:52:1d:
62:2b:c9:17:8c:f5:c4:ed:4c:18:64:82:ba:0d:04:
7a:54:9d:c8:fd:cf:5b:f6:16:0a:9c:0c:e9:86:bc:
0e:ad:de:05:cf:df:ca:31:0e:23:ce:fe:e0:17:5f:
fb:28:8f:92:c4:fb:bd:21:f8:02:cc:e0:71:48:00:
f7:d8:0d:24:04:7f:d6:52:32:51:94:0d:a4:2a:cc:
e6:a8:8a:d7:51:f2:14:97:71:7a:6b:da:1d:c9:64:
d6:31:ac:4c:6b:fd:0b:fb:6d:06:13:33:5a:e3:a5:
9d:33:9c:63:b9:94:40:cf:d3:cb:37:d4:ea:23:d1:
25:4b:c5:11:ec:f6:54:41:df:63:c6:ca:60:4d:87:
aa:66:db:33:94:eb:4a:2d:0c:d5:61:08:26:b5:f9:
e9:7b:3b:84:78:80:c9:52:7f:f3:42:d3:82:49:40:
49:11:81:d8:e1:86:ec:8c:94:81:4a:53:3b:2b:b8:
7a:a3:f0:b8:4b:73:23:b4:34:55:02:be:c4:4b:9f:
16:73:09:0c:4b:41:2b:08:61:93:4f:47:af:f0:9c:
bf:bf:71:b0:ad:33:65:06:17:9a:cd:ac:11:4b:73:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:12:55:76:72:59:09:5D:E0:F3:EA:09:E7:EF:CD:6A:F8:22:D9:05
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:04:df:9a:69:61:e7:7b:20:97:22:93:ae:48:42:bc:4b:04:
dc:b0:2c:c9:0d:42:8b:a1:1b:25:84:0b:8e:76:bf:a2:b0:59:
5b:b2:3a:75:2b:a4:a9:b3:e4:d0:4a:bc:44:be:87:5d:f7:a4:
69:ca:b2:e3:06:4f:ef:9f:f6:6f:ce:57:15:1a:0f:4f:5e:73:
23:64:bc:ab:45:88:b7:69:a6:c5:28:3f:90:27:f9:d9:e5:f4:
6e:8b:ad:31:42:b4:c3:4e:3b:1a:2d:b4:09:98:d9:03:30:af:
94:40:b6:91:58:a8:e6:80:9e:8d:4c:78:f3:b2:a6:e9:fe:d7:
f3:b7:c9:71:44:a9:68:4a:68:bf:63:31:ae:13:41:b3:c3:e9:
ff:8e:d6:c5:6a:f3:46:1f:dc:fa:eb:3d:4d:66:59:2f:f6:28:
5e:83:82:ba:a0:09:bd:1d:3f:31:07:57:8b:f3:45:51:9f:2b:
6d:f0:c4:7c:9f:48:a6:f9:82:ab:c9:fd:a6:a7:f0:2b:a7:ac:
e3:d1:5d:41:3b:30:ae:54:f9:fe:c2:35:19:0f:f0:a4:49:af:
e1:3d:fd:cc:75:d7:88:3e:bf:17:90:83:d2:36:e6:78:33:72:
13:d4:4e:16:22:26:76:4d:10:91:c5:ae:42:e5:ef:cb:5c:ac:
8c:9a:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:35 2025 by rpki-client