
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier: 3+wm9IEgCcoRw85APdydWkuXXi67LRqSaeAsLvv/4wo=
Subject key identifier: C0:72:B6:BE:94:25:01:95:8B:1C:F6:93:57:45:8E:59:AE:56:63:F1
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial: 019A7112BC7AF8EF99593ECA7B2F6CD2688D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: oc/b0SKPFFctL1Oy9lyEWR1WJl9YSgVu+2HpuEJTmHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bc:7a:f8:ef:99:59:3e:ca:7b:2f:6c:d2:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=c072b6be942501958b1cf69357458e59ae5663f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:26:f8:b0:aa:05:55:d3:0b:e7:86:95:e5:
4d:a2:85:d3:1c:e4:8f:87:61:06:49:9f:10:51:40:
4d:c1:53:23:75:ba:6a:77:56:13:a1:c4:09:fb:2b:
df:4c:86:d5:6c:ce:8e:a2:97:e2:fb:a1:64:b0:dc:
a8:37:96:14:bc:e1:38:75:cf:a0:2a:22:4e:7f:73:
fe:cf:cc:2d:df:97:c6:e4:6b:8d:d0:e5:91:93:e6:
84:29:7f:86:75:7a:14:d9:93:06:6d:b2:3f:fc:2c:
f7:84:0a:74:07:e7:9e:48:b8:6c:c4:d7:9c:c2:7c:
e0:ed:3f:bf:66:31:70:98:a9:c6:28:f4:99:0b:36:
bc:9d:e7:4c:84:cd:60:62:54:69:7a:f6:5b:57:00:
e6:b2:e7:a6:21:a9:d1:63:e5:84:34:53:85:84:f4:
e4:f6:a2:94:c4:47:71:d2:30:f2:05:a1:5d:7a:be:
4d:ec:d8:71:90:24:b7:e1:58:0f:d5:4b:90:24:f6:
81:49:a7:32:77:ac:63:ba:95:28:80:35:da:3c:66:
56:ba:1e:25:22:7f:80:72:a5:92:e8:b8:ea:54:41:
50:5c:b8:5c:f9:3b:38:d5:8d:4b:9c:d6:63:47:40:
78:4c:8b:40:f3:59:14:9b:30:fb:6c:69:c2:0d:b4:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:B6:BE:94:25:01:95:8B:1C:F6:93:57:45:8E:59:AE:56:63:F1
X509v3 Authority Key Identifier:
keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5a:46:c2:5d:97:c9:1a:0a:1f:4f:d3:18:79:9a:b0:04:7d:
6a:8b:f6:38:97:d3:ac:cc:39:3f:eb:d6:aa:e6:f3:25:3b:62:
5e:23:d2:b9:87:f0:ef:e6:bb:5e:29:33:2d:15:0a:bf:68:8f:
a5:22:c9:69:e3:dd:55:93:cc:46:8a:52:45:61:cf:3e:e2:1a:
3b:48:a4:bb:5d:e0:01:c4:5f:78:de:39:4d:36:7e:e2:62:2d:
5c:1b:16:fc:9b:dd:a3:e4:13:f3:06:e4:61:a3:a5:f0:79:5c:
25:83:d2:c0:cc:74:13:36:23:00:b9:3d:4d:34:fa:92:9f:fe:
a9:62:29:95:99:d2:d2:5b:33:23:28:b4:f5:a8:cf:fd:ff:15:
7b:bf:0b:18:bb:c9:c0:89:73:1d:a3:5e:6b:2b:50:69:5f:1a:
30:45:a8:57:57:3a:f7:b7:63:3e:85:4b:7b:18:d3:3a:f6:cf:
33:78:b5:b9:fd:94:11:69:e9:a8:c7:f5:b2:58:c8:9f:54:0b:
8a:05:c7:3a:02:4a:a8:47:80:a4:05:20:76:39:41:c7:a3:99:
9d:db:e8:06:83:e1:77:f6:38:00:a2:c0:65:99:2b:4b:28:0c:
bb:3f:45:d9:c1:dc:f4:94:11:06:eb:a8:26:b9:b8:4b:81:22:
11:52:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:40 2025 by rpki-client