Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: X29br45Lu/Md+aUJa62RO7WUDVy0pJaPPvBLnZ0s6dU=
Subject key identifier: 42:D5:09:AE:10:B7:A8:5F:A5:B1:22:23:88:04:54:FA:AD:C8:E1:C3
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 0198D515DE7B4550056525CFB88CB2618772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 030D
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: bm8/TA5z2SYNuq/gBuSNumD2vQ56sDJ2/ZT+PLzj+Co=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:de:7b:45:50:05:65:25:cf:b8:8c:b2:61:87:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=42d509ae10b7a85fa5b12223880454faadc8e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:1e:25:46:75:7e:f2:9a:89:cc:d3:fd:9b:
4c:c4:e2:6b:4c:1d:b8:ef:e7:5a:ae:95:f6:10:c6:
76:6a:90:bd:37:f4:9c:9b:2d:27:aa:5d:52:34:4b:
0e:26:9d:13:c9:7a:d4:4a:24:0b:d5:38:5a:c9:2f:
45:19:47:4b:a2:d8:8a:98:98:3c:95:76:20:b2:b5:
d2:21:7b:50:61:a0:5a:0f:10:7c:62:cb:cf:15:db:
e3:23:26:ca:7a:1e:d1:e3:75:26:ac:b4:69:57:05:
45:e0:4b:4a:1b:b4:4a:08:81:39:26:34:7d:fb:4b:
20:88:31:76:cf:bd:8c:df:aa:9b:25:1d:ab:14:eb:
2c:de:11:87:85:cf:30:41:a8:9f:f7:0e:1e:d5:01:
9d:d2:a8:7f:49:c6:99:b1:57:b3:ad:da:af:e1:e9:
83:b3:41:ce:3b:6c:66:10:00:83:a1:b3:64:ba:35:
f8:cc:c8:3a:d9:c4:f8:76:e2:4f:33:93:00:54:c8:
cc:5b:4d:5f:77:d8:c8:b3:d8:85:00:a9:7e:61:c8:
6a:5d:ad:da:f9:81:3b:79:c4:4f:20:a6:25:13:04:
a4:32:45:6c:1f:aa:7b:b2:6d:a0:42:5e:9d:79:97:
b5:59:9a:bb:f9:09:c6:17:4d:da:f0:a7:86:1d:99:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D5:09:AE:10:B7:A8:5F:A5:B1:22:23:88:04:54:FA:AD:C8:E1:C3
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:54:48:cf:ef:6b:fb:59:83:50:5c:65:d0:62:87:46:f4:
f3:bb:6e:fa:35:e0:12:45:1f:e6:36:d2:9d:e5:dc:86:50:ca:
9c:5b:ca:42:c6:15:e6:2f:f1:44:6f:75:5c:3a:0e:7c:21:e7:
f1:b7:82:08:86:2d:5c:da:f0:75:7d:1e:ef:6b:da:2a:1a:65:
81:9e:96:a7:e8:1b:bb:41:c5:31:c7:42:fe:37:fb:52:9a:63:
71:d6:e2:93:d3:2f:28:18:1d:f2:49:1d:5b:03:63:d7:65:21:
15:0d:c7:e1:67:2a:b3:44:7e:b5:7a:bb:09:d4:12:e5:df:16:
13:8f:93:5e:3b:19:a3:ca:6e:ee:d4:c9:86:cd:db:2c:d5:e6:
d7:7d:c8:87:92:1f:73:e7:f5:d0:d1:3c:83:0a:81:c9:74:ba:
ed:8d:70:9e:6a:3b:27:8a:8a:6c:bd:a6:25:0e:22:09:3a:34:
8a:34:1e:fb:72:ff:bc:36:36:6b:c9:5b:f4:24:4f:5f:fc:50:
ef:24:51:d1:95:f0:ad:83:46:d3:66:75:77:72:e9:6e:69:a3:
49:25:76:3c:4e:24:e0:14:06:a4:09:e2:09:b7:e6:62:00:76:
de:ee:57:ed:4d:98:7d:98:df:ba:c3:2b:8e:b4:d8:ca:dc:fd:
5d:28:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:14 2025 by rpki-client