Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier: Lx+GGiV/IJ1S2wI+Q6iJUC7BXZFonsY0CC/sNza/a2w=
Subject key identifier: E2:1A:F8:01:BD:F7:D3:3C:AA:A4:23:39:BD:3A:E2:6E:F3:B4:E9:DB
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial: 0197CB39F3ABED4B393B72ABB94D6E445B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number: 15BD
Signing time: Wed 02 Jul 2025 13:01:02 +0000
Manifest this update: Wed 02 Jul 2025 13:01:02 +0000
Manifest next update: Thu 03 Jul 2025 13:01:02 +0000
Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: RT9vxlRXqRz5kRGQHb7mAL8UesWaAd3tSFPKvkYwQNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:f3:ab:ed:4b:39:3b:72:ab:b9:4d:6e:44:5b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Validity
Not Before: Jul 2 13:01:02 2025 GMT
Not After : Jul 3 13:01:02 2025 GMT
Subject: CN=e21af801bdf7d33caaa42339bd3ae26ef3b4e9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:54:90:0c:bf:23:42:54:19:c1:e0:36:6d:
2b:e9:16:33:a6:84:b5:c4:90:88:b1:46:c0:00:1b:
95:ed:f8:e8:67:e2:2b:da:ad:d6:7c:28:5c:51:f5:
c7:e5:05:de:dc:f1:17:6a:2d:2a:d3:7c:88:66:de:
31:72:ac:37:1f:71:f2:ad:8e:b4:fb:5f:a3:c5:56:
b3:25:1c:b5:7c:da:99:20:d2:67:cb:23:1f:a4:e8:
33:70:8f:16:ce:80:2b:58:83:48:a4:6a:c2:d9:f5:
d2:fe:dc:bb:fd:ce:76:9e:74:5e:d4:a4:7b:00:1b:
cc:ad:41:67:01:88:25:df:64:82:57:b2:e4:d2:eb:
8b:b5:f6:4e:23:11:2e:a1:ab:99:03:fd:34:77:b6:
e0:2f:71:97:04:b5:1a:e2:85:6a:04:c5:34:ab:b7:
61:5a:2d:cd:2f:d7:c7:87:3c:82:a6:da:b9:ed:d0:
61:10:47:2c:fd:28:3c:dc:95:44:2e:9f:52:ed:f6:
48:ea:9a:e0:c1:5d:39:47:52:a8:de:fa:7b:ca:72:
d1:06:8d:ac:d2:c4:a1:f8:32:65:47:62:64:8c:bf:
79:f2:d1:e3:7c:52:fc:d3:66:22:de:86:6f:5f:7d:
8c:66:15:2c:d2:62:e7:d5:e6:77:43:a1:e2:fb:4e:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:F8:01:BD:F7:D3:3C:AA:A4:23:39:BD:3A:E2:6E:F3:B4:E9:DB
X509v3 Authority Key Identifier:
keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:81:9d:8a:d8:18:83:30:75:56:6f:d8:ee:10:9a:84:1f:1a:
c1:44:22:48:26:49:7d:78:42:06:f9:76:c2:dc:a4:4b:1a:10:
3a:09:83:38:ee:a0:59:18:e8:02:21:9d:68:0d:cd:dd:c9:6b:
b2:b0:fb:ea:ca:93:a0:51:91:ce:ab:8a:86:e4:cf:ea:fb:85:
4e:9e:d4:b6:fb:73:c6:95:59:fa:4f:d7:a6:ec:bd:2b:8b:ee:
a6:3a:57:e2:af:1c:a8:b6:47:66:94:cd:f7:1a:2e:28:ed:89:
7f:0b:86:07:f4:a1:7f:88:c0:49:65:9d:8a:0a:a4:24:0d:9d:
36:5f:89:2b:fc:36:4f:4b:67:37:b3:cd:56:52:2c:16:ab:d9:
27:4a:14:af:3d:2c:48:5e:ba:64:9b:13:7a:cc:58:7c:25:17:
9a:06:83:d5:84:2b:43:b5:6f:ca:14:e0:3c:38:c9:05:4b:04:
c5:c3:9e:ce:55:ff:c5:0e:fb:43:50:c5:d6:30:24:10:20:2e:
12:6d:ce:74:99:57:d4:5a:ea:2e:9c:7c:8e:63:ab:68:dc:45:
ae:ea:1d:f7:aa:bb:33:8f:7d:fc:2e:fe:64:72:f5:25:f7:70:
22:2d:d4:b1:68:55:b0:31:c6:0c:9c:2e:4e:1d:2b:56:a6:33:
5d:1e:68:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLOfOr7Us5O3KruU1uRFuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YWQ3NTRhYjdjMGE0MDFjMGZmMWQzYzEyN2IyN2Q1M2Zk
Y2M5ODEwHhcNMjUwNzAyMTMwMTAyWhcNMjUwNzAzMTMwMTAyWjAzMTEwLwYDVQQD
EyhlMjFhZjgwMWJkZjdkMzNjYWFhNDIzMzliZDNhZTI2ZWYzYjRlOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsktUkAy/I0JUGcHgNm0r6RYzpoS1
xJCIsUbAABuV7fjoZ+Ir2q3WfChcUfXH5QXe3PEXai0q03yIZt4xcqw3H3HyrY60
+1+jxVazJRy1fNqZINJnyyMfpOgzcI8WzoArWINIpGrC2fXS/ty7/c52nnRe1KR7
ABvMrUFnAYgl32SCV7Lk0uuLtfZOIxEuoauZA/00d7bgL3GXBLUa4oVqBMU0q7dh
Wi3NL9fHhzyCptq57dBhEEcs/Sg83JVELp9S7fZI6prgwV05R1Ko3vp7ynLRBo2s
0sSh+DJlR2JkjL958tHjfFL802Yi3oZvX32MZhUs0mLn1eZ3Q6Hi+05QJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIa+AG999M8qqQjOb064m7ztOnbMB8GA1UdIwQY
MBaAFMatdUq3wKQBwP8dPBJ7J9U/3MmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YzMxMzMtY2I5OC00ZWFlLWFiY2Ut
YmEzM2QzNjc1NWRmLzEveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YzMxMzMtY2I5OC00ZWFlLWFiY2UtYmEzM2QzNjc1NWRm
LzEveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4GditgY
gzB1Vm/Y7hCahB8awUQiSCZJfXhCBvl2wtykSxoQOgmDOO6gWRjoAiGdaA3N3clr
srD76sqToFGRzquKhuTP6vuFTp7UtvtzxpVZ+k/Xpuy9K4vupjpX4q8cqLZHZpTN
9xouKO2JfwuGB/Shf4jASWWdigqkJA2dNl+JK/w2T0tnN7PNVlIsFqvZJ0oUrz0s
SF66ZJsTesxYfCUXmgaD1YQrQ7VvyhTgPDjJBUsExcOezlX/xQ77Q1DF1jAkECAu
Em3OdJlX1FrqLpx8jmOraNxFruod96q7M499/C7+ZHL1JfdwIi3UsWhVsDHGDJwu
Th0rVqYzXR5oqQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:36 2025 by rpki-client