Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier: 5F2HrL9CPHuGYzFS/efGjtFLrQ4hUcb9+i4/izGtKMc=
Subject key identifier: 81:C3:02:76:AE:F3:39:4C:98:EE:67:1F:1D:65:7E:9C:97:6C:B2:26
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial: 019764DEE197D6F968010EE5B51FA15A7E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 16:00:17 +0000
Manifest this update: Thu 12 Jun 2025 16:00:17 +0000
Manifest next update: Fri 13 Jun 2025 16:00:17 +0000
Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: Sj64ajE0G7iXoAx9QJhm7bqEkY+iTdFH4qdImWoI0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:de:e1:97:d6:f9:68:01:0e:e5:b5:1f:a1:5a:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Validity
Not Before: Jun 12 16:00:17 2025 GMT
Not After : Jun 13 16:00:17 2025 GMT
Subject: CN=81c30276aef3394c98ee671f1d657e9c976cb226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:f5:19:f9:a3:1d:d2:76:f6:e4:d0:c7:1d:
af:e5:68:d6:7c:f6:79:fd:4d:14:22:2d:6e:54:db:
d6:5a:a5:6c:98:4c:88:2b:16:49:73:a2:0b:eb:25:
14:7f:6d:2d:09:87:67:08:cb:68:a0:f3:a6:1d:85:
11:86:ef:9d:ac:03:b0:7f:47:7f:ec:bb:07:64:7a:
13:47:e4:9d:b8:cb:8d:2a:48:f2:88:24:ac:8d:ce:
20:e6:35:e0:ee:4e:8d:ae:76:06:91:ec:0e:e2:e8:
d5:db:27:8a:f6:cf:8b:41:ce:df:f5:dd:09:99:74:
4c:38:30:56:f6:1d:da:75:6f:6b:2d:11:29:79:11:
ab:0b:af:ff:ef:23:a0:a7:8d:b0:9a:3c:2e:72:f9:
5c:e8:ec:7e:56:b6:c6:63:69:b9:19:7c:2e:9e:8e:
f0:6f:c6:78:12:28:df:ba:9e:f4:2d:c2:0a:57:42:
85:c7:5a:b7:f5:c0:6f:16:bb:cf:99:10:38:e8:de:
a8:32:12:28:3f:9b:be:a8:91:45:83:ae:0f:c3:4e:
ed:e5:75:4d:c0:19:a6:b5:dc:5b:65:c9:74:b9:e2:
96:e9:05:07:c6:d7:ed:2e:63:bb:97:37:ba:6b:13:
ef:71:d2:16:f6:a5:1c:09:fc:bd:c3:a4:27:7d:63:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:02:76:AE:F3:39:4C:98:EE:67:1F:1D:65:7E:9C:97:6C:B2:26
X509v3 Authority Key Identifier:
keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8c:87:99:f8:4f:09:c0:eb:ea:9a:67:08:32:69:58:f1:88:
a9:c9:d2:61:bd:05:e3:61:7c:05:b1:40:67:0d:06:84:4e:1f:
ff:7b:3c:f8:05:55:2b:a2:d7:27:c5:d3:5f:83:b7:24:2d:f2:
67:b8:6e:de:f0:2c:01:62:73:53:00:86:92:3d:f3:1a:4a:08:
2b:27:80:73:9f:6d:ab:00:ba:e0:81:73:dd:97:cc:fd:55:6d:
5c:c1:b8:3b:82:66:35:7a:49:73:60:10:85:65:9f:06:23:81:
69:04:88:fb:b9:fb:9d:37:76:95:0e:52:30:6c:06:2c:d9:3c:
2a:f1:d3:2b:02:20:43:a2:6c:d5:99:71:77:8c:89:a2:aa:32:
e1:df:2c:3d:56:c6:63:08:96:d8:34:b1:83:02:d5:d8:03:ad:
b6:1e:d5:09:d0:c1:3e:32:74:f1:30:41:50:14:86:5b:18:86:
7a:f4:14:9e:0b:45:f9:ce:68:da:f9:7d:9f:64:f9:53:1c:5b:
3e:22:8e:6a:35:95:c5:8e:ca:3c:db:39:4a:0a:15:9d:e6:65:
fe:ae:f6:75:1b:0a:e7:de:1c:51:75:ac:16:c1:a8:f1:2c:3e:
6b:d3:c1:d2:6b:47:5e:e2:50:37:f8:25:31:33:82:fc:b6:2a:
a8:73:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:41:23 2025 by rpki-client