Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier: +YbvHWRhix2OJVSAchMxBJgkTyYJfRMpjLZdScsWF3g=
Subject key identifier: 71:F4:9E:AE:FA:95:DB:9F:89:44:87:1C:14:6C:D1:FC:60:AB:EF:39
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial: 0197556C6791FA0DCDE317793A616CCC5D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 16:00:56 +0000
Manifest this update: Mon 09 Jun 2025 16:00:56 +0000
Manifest next update: Tue 10 Jun 2025 16:00:56 +0000
Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: dxaUgP//BV/G0HOn15DePeuYiP+/eW/jiTBsd1OABj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:67:91:fa:0d:cd:e3:17:79:3a:61:6c:cc:5d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Validity
Not Before: Jun 9 16:00:56 2025 GMT
Not After : Jun 10 16:00:56 2025 GMT
Subject: CN=71f49eaefa95db9f8944871c146cd1fc60abef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bf:df:6e:93:86:5f:ba:85:06:b0:ce:6d:da:
ee:63:c0:5d:93:aa:ee:20:f5:90:b4:3e:60:64:2b:
58:da:5a:45:22:a7:99:dd:75:ee:92:e4:40:6f:a4:
11:2b:58:16:ca:7c:38:7a:1b:fb:25:f6:d5:75:7c:
39:4a:57:f7:90:0f:7b:8e:7f:fd:17:c5:8c:3c:e2:
1f:02:be:61:2f:0e:60:e4:9e:49:5c:4f:ae:01:07:
76:5e:d4:10:b3:d9:2c:97:77:73:81:72:f7:18:4e:
19:9e:d8:a5:1c:b7:cf:8a:f1:ae:07:41:f5:89:9a:
1f:1e:d2:4a:28:af:6b:f7:49:a5:a2:24:ea:f3:1b:
d6:91:e3:02:32:f1:df:b7:cf:65:36:61:60:4e:fd:
41:5f:b4:77:4f:ac:c4:7c:8c:ec:1e:a0:43:f3:b6:
03:bf:d3:b6:df:71:7a:e0:37:97:2c:2e:64:d0:e8:
c8:ec:0f:f6:91:f9:cc:a3:de:a0:c0:5f:58:7a:12:
b6:9f:0f:60:b8:8b:67:9a:9c:c4:77:78:d6:2e:89:
42:f4:6b:e2:25:64:37:bb:30:3a:d2:ed:d5:2d:dd:
e4:87:19:f8:76:95:62:53:54:24:6b:63:d9:a5:95:
4d:a9:d6:27:2c:b5:65:52:56:01:56:de:45:c1:04:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:9E:AE:FA:95:DB:9F:89:44:87:1C:14:6C:D1:FC:60:AB:EF:39
X509v3 Authority Key Identifier:
keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:53:dc:63:85:ce:dc:f8:1b:7d:8e:b4:fe:c4:94:eb:87:25:
01:27:3c:aa:1c:7f:21:6d:52:b6:21:d6:cb:a3:13:39:a2:4d:
53:e7:aa:09:33:e5:fd:74:51:60:60:c0:5f:b9:04:65:26:1c:
9e:36:d8:a1:31:f1:67:0c:09:d9:9d:32:a8:0b:48:69:b3:17:
07:34:27:b7:74:e3:92:6d:87:ba:bb:4b:3e:95:cd:9b:98:97:
a1:74:32:57:4c:59:b8:87:17:18:68:85:7b:ec:64:c3:5c:4b:
d1:89:b7:c9:e6:16:2f:b9:57:8a:8f:79:fa:b3:18:80:4e:96:
62:e3:43:00:15:0b:65:14:70:97:28:ca:2e:3c:0c:3e:e2:b7:
07:ea:e4:0c:a9:a9:78:73:7b:99:92:8f:0b:db:e7:2c:63:f1:
c8:f0:ce:78:de:ad:d3:8e:fa:a5:7c:9e:5e:72:91:32:44:99:
53:93:7f:87:d4:d7:6b:05:a2:cb:8a:12:e6:7f:0f:8a:87:8b:
64:0a:d3:6e:d7:e2:24:9a:ab:8d:27:a2:9a:f7:24:ea:ec:d5:
d8:e0:03:61:b5:50:18:d9:0a:67:2a:9b:33:e6:d2:86:c3:2d:
ee:69:6d:0c:b5:bb:f1:40:08:2e:cd:81:55:6f:3a:ff:66:5d:
57:f1:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:41:08 2025 by rpki-client