Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json)
Hash identifier: ouJPOB8KPPigS0cxOYurC9lWEiwpDdjBaH9BGo7AT8A=
Subject key identifier: 10:CF:C9:9B:6D:37:2B:0C:91:14:59:7D:B8:DA:0E:9D:6A:67:3B:3D
Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Certificate serial: 0198D7A905746E6ED5931761E3D9E496259C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 16:00:35 +0000
Manifest this update: Sat 23 Aug 2025 16:00:35 +0000
Manifest next update: Sun 24 Aug 2025 16:00:35 +0000
Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: w12xPWwqC0Rnd2Dp0KqPR64MV73IBjqKctqfl3Mr6bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:05:74:6e:6e:d5:93:17:61:e3:d9:e4:96:25:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981
Validity
Not Before: Aug 23 16:00:35 2025 GMT
Not After : Aug 24 16:00:35 2025 GMT
Subject: CN=10cfc99b6d372b0c9114597db8da0e9d6a673b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:df:31:12:60:1d:4b:5e:7c:26:6d:f3:ac:
0d:e0:0d:68:3d:8e:03:55:85:c2:67:ac:40:60:03:
ef:e5:9e:42:73:42:72:91:94:67:18:6a:0f:96:97:
61:f5:f2:59:10:e2:ec:eb:de:7b:d7:43:38:67:5d:
0e:65:8c:3b:f8:5f:20:3d:7a:99:48:a8:ed:08:2f:
90:41:ef:9c:45:ec:e2:1c:35:6a:f1:a5:21:72:4f:
03:19:d5:ce:88:17:7e:1b:ed:a3:46:1d:cf:d9:aa:
9f:e5:99:cc:9e:6f:8c:f9:06:34:59:f3:5a:4e:34:
94:ba:a3:79:63:d2:b1:06:35:b3:93:61:11:1a:ff:
2d:5f:d6:76:ee:a5:ed:50:7d:3e:3e:2a:38:e7:a2:
d0:7a:f2:36:f5:90:6d:9f:3f:ba:86:49:0c:3e:71:
76:28:26:60:6f:e2:21:ec:24:a9:6c:51:1a:1c:e4:
62:bd:ea:e4:09:25:6b:fd:65:00:70:76:a9:b1:37:
75:99:16:1e:f4:70:a7:cd:e8:04:b0:20:e8:c1:7b:
f6:f0:5a:cc:01:68:ac:3b:18:56:d1:78:07:df:0d:
37:5e:a6:d4:49:44:cd:0d:5a:92:0b:89:c2:02:78:
7e:ea:68:b1:4b:c0:e2:6d:68:f5:97:39:cf:5d:09:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:C9:9B:6D:37:2B:0C:91:14:59:7D:B8:DA:0E:9D:6A:67:3B:3D
X509v3 Authority Key Identifier:
keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:61:1e:3f:ed:a0:2e:52:f1:9f:18:8b:dd:a1:85:2f:79:
73:e5:86:7a:03:9d:d1:c5:20:f5:4c:22:8c:17:64:73:a5:b8:
ac:a1:31:e2:a3:4b:61:7b:6f:18:a2:86:99:4f:86:7f:90:e7:
65:69:a1:46:5d:1e:6f:a9:95:c6:de:04:cd:e3:65:89:46:e5:
a4:fc:f6:f0:e5:d3:68:59:4a:a5:61:f3:d7:17:65:2d:02:24:
ab:b4:f3:78:8e:be:39:dd:9d:6c:4a:48:64:93:d6:30:3a:7f:
35:f8:92:9c:7b:9c:8b:c8:d4:b9:14:f1:ba:de:91:db:69:20:
5c:e3:01:39:dd:ea:28:26:a0:b8:f5:0f:ef:c4:e2:54:3b:99:
41:f0:b6:0d:20:18:8f:bf:27:e5:19:75:67:a7:af:91:f6:4b:
57:8f:75:2e:83:b0:ca:cd:d1:88:f2:16:2e:3a:2b:e9:3c:a5:
ab:ca:05:f8:ff:34:0b:06:2f:02:1e:1e:1e:85:be:9b:b8:51:
62:73:00:e0:e4:18:12:61:bf:4d:26:e3:93:8a:8b:74:bd:66:
7c:f0:11:37:4f:1a:d3:40:20:7a:5f:1a:c4:87:f9:26:1f:06:
63:82:03:82:62:65:13:ce:98:68:3e:72:c9:fa:f8:3c:7f:ca:
82:51:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:53 2025 by rpki-client