
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: QdHMe8dFt5dW9y23gMXhnulJBeCaR5TdeSFwO1gI5C4=
Subject key identifier: 86:62:59:DA:05:A7:38:C0:D1:48:1F:AD:CB:8F:88:04:54:A4:66:7E
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 0197B7452EDA925F42D14D19807B4D99C809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 74
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: WZTv8luKzrlDwTOoG7N7uqzsXtbujbWau/jCdLo4mAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2e:da:92:5f:42:d1:4d:19:80:7b:4d:99:c8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=866259da05a738c0d1481fadcb8f880454a4667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:4c:1e:a4:cc:c2:80:7b:79:95:46:eb:1d:
8b:89:91:2e:2e:14:af:c1:39:48:23:7b:a9:1b:2c:
ea:93:c2:a4:ed:7d:0f:cd:f4:3f:36:32:f5:05:25:
23:0a:fe:ea:23:e3:c6:2f:11:82:97:8d:53:b4:8f:
e4:ce:73:02:98:a0:e6:38:f3:37:2c:b5:d5:ce:6d:
8d:a9:7e:87:8d:86:a0:9e:bf:7b:66:07:8d:df:65:
88:0b:ed:ce:20:30:d0:2d:55:10:4b:34:67:0b:33:
6e:34:a8:79:c4:59:82:30:7e:a5:3a:f9:de:8e:ee:
88:a4:69:c7:6d:12:86:d7:0f:8c:79:d0:01:f4:2d:
be:97:dd:f7:6e:35:c5:02:2a:de:94:af:fc:fa:52:
48:a5:b1:2f:54:fc:3c:8d:cb:17:55:a9:43:5a:22:
66:a9:60:29:72:df:f2:8f:62:dc:be:5b:11:8a:51:
4b:30:44:42:3a:c6:d8:c4:f5:89:fa:1f:28:f1:b4:
e2:8b:d0:91:a1:da:32:79:90:40:ef:97:00:90:62:
b4:49:0e:b6:d4:39:91:5d:79:88:bb:12:a4:95:8a:
8f:43:93:9d:b1:72:15:9d:0e:17:e1:8d:3c:17:14:
ab:68:f1:6f:a8:9e:c1:6b:4f:64:aa:f3:b7:56:d5:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:62:59:DA:05:A7:38:C0:D1:48:1F:AD:CB:8F:88:04:54:A4:66:7E
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:07:f7:21:ad:cb:47:dc:3b:35:41:68:98:0a:e1:63:12:
0f:0c:e6:7c:34:b8:b1:96:84:27:84:20:d6:83:94:f4:0d:1b:
fe:f6:e7:58:5c:05:7a:1b:35:69:20:70:db:28:73:ae:ba:ac:
88:91:0c:af:4a:16:2d:07:7f:5c:f3:9d:8b:9b:b6:ab:f4:1b:
67:f9:e4:1c:9d:78:01:d7:95:48:5a:88:10:89:25:45:4c:0e:
62:14:25:0e:72:97:14:63:61:d2:5e:ef:a5:47:c6:96:87:63:
42:82:15:35:bb:ae:63:82:e6:d3:9c:53:17:fb:39:73:99:a7:
a3:e1:dd:15:83:86:f0:26:90:39:93:f1:55:1a:e7:d5:87:5e:
9b:ed:fe:56:fa:1a:9f:c1:e7:1e:05:74:f8:04:80:b1:c1:e9:
ba:46:36:22:fe:72:02:58:aa:14:d9:58:ba:8f:f5:1f:2d:2c:
0a:d2:e7:83:1c:ce:d7:74:66:64:c9:f9:e4:b4:77:a1:cb:d3:
8b:a0:3b:54:eb:52:67:c6:64:f9:e8:5d:06:60:33:14:86:41:
ae:6b:a9:f3:6b:2a:5f:bf:ba:df:98:15:b4:60:dd:2e:e4:9c:
90:14:83:dd:9d:56:65:ba:96:b4:fa:09:03:0a:10:44:37:19:
f4:11:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client