Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: 6e1MxnW2VCBcNb119fQik5YtQQ/bOrlPBADuVvdm5mI=
Subject key identifier: C6:C2:8F:BF:D5:A5:75:66:2F:06:F4:82:6A:41:41:D8:33:5F:CE:29
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019935A4D9CA1526481FAD046A0CF1F7A9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 033F
Signing time: Wed 10 Sep 2025 22:00:20 +0000
Manifest this update: Wed 10 Sep 2025 22:00:20 +0000
Manifest next update: Thu 11 Sep 2025 22:00:20 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: cwJIEh0qnSQ1dCOAuTf7Jb+6Rz0gBhNVIJc2mI01ufA=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a4:d9:ca:15:26:48:1f:ad:04:6a:0c:f1:f7:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Sep 10 22:00:20 2025 GMT
Not After : Sep 11 22:00:20 2025 GMT
Subject: CN=c6c28fbfd5a575662f06f4826a4141d8335fce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:63:0a:8e:87:4b:f2:a7:f8:4d:c0:a2:92:
b1:83:0f:d1:fe:0b:1e:91:91:57:69:83:49:cc:c8:
4e:13:29:9e:c8:1e:c4:27:01:43:20:19:fb:0b:3a:
0a:5a:80:59:25:5b:9f:4b:2b:0b:8d:33:5c:2b:79:
37:9a:35:0f:8c:a1:12:72:46:ae:35:47:ed:af:d8:
f5:26:ce:92:a5:55:cc:e9:fe:02:8a:e0:b5:c5:1c:
03:08:85:17:1e:d3:20:b0:9d:7c:6e:5d:d2:f0:9f:
40:4c:7c:97:58:66:09:0d:b4:af:3e:db:e7:58:bd:
00:3d:8f:ac:7d:f3:90:34:82:e3:c7:e6:ed:40:82:
3d:67:25:06:86:04:5b:1c:33:9a:28:0d:7c:d2:4c:
f5:2c:c2:6c:7e:19:ba:e6:f0:a0:43:f0:18:66:e8:
52:ac:04:8b:8a:ff:f5:ad:9d:b4:f1:0c:8e:27:90:
02:1d:8c:de:1c:58:57:85:ce:c7:81:26:3e:80:2e:
14:77:af:62:74:9c:50:12:a8:7c:4f:cb:ce:90:e0:
7d:d2:69:73:1d:e3:bb:74:f6:82:bd:19:96:b3:94:
92:d2:be:09:b6:b6:3e:cf:53:12:7b:68:14:63:28:
b6:87:b9:40:5c:96:da:04:4b:5c:45:83:45:a9:63:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:8F:BF:D5:A5:75:66:2F:06:F4:82:6A:41:41:D8:33:5F:CE:29
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:ae:0a:a6:f3:b3:4d:fe:52:71:79:46:d4:9e:ff:b6:34:
56:d6:53:b1:c2:f3:be:33:13:17:99:3d:e7:14:10:04:bf:63:
52:b6:be:a0:84:f6:32:4d:b3:c0:a0:df:9c:2d:38:31:e5:46:
bb:bd:a0:80:d0:58:10:2e:c0:40:92:05:49:75:d7:7f:32:77:
33:f3:ab:62:b6:d6:2d:45:b6:f7:0f:2b:81:64:9f:a3:2e:e9:
14:47:12:90:f8:34:ff:b4:17:a6:f5:a1:bd:14:a3:58:5f:ba:
86:d7:89:63:40:18:aa:e1:27:54:c7:8b:b7:44:a1:e7:6c:86:
96:e3:b6:f7:6b:84:ec:d0:84:0a:90:b7:49:30:39:46:41:19:
5d:6c:38:ec:e6:64:f4:96:21:37:52:a7:78:ad:df:9f:fa:63:
f1:6b:5e:55:74:d8:c7:cf:c3:11:00:8e:ba:e8:49:6d:0c:5d:
24:a3:27:68:b0:54:1a:73:4b:a0:68:e4:6d:61:60:41:59:d7:
e3:39:23:3c:42:de:2e:30:64:f2:50:19:3b:cd:f0:6e:25:a5:
f6:3a:77:31:87:94:57:94:71:01:44:52:8f:2b:1f:f6:fa:83:
6a:c0:31:e5:7a:74:47:d7:67:9e:4f:13:ea:07:58:be:33:87:
98:00:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:09:05 2025 by rpki-client