Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: tFFLVisa8eJol7r+et+JQ3Flt3SvpDe1ztjuano3/3A=
Subject key identifier: 8E:D9:50:36:6F:F5:94:C3:21:18:05:78:F2:31:FB:D9:E1:C9:82:B6
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 0197B7450F93F1B11C91BB2BE31DC3B74AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 0279
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: uHQjJRh2MpZ1556gxJn9mG32ly+sWGKRarxReZX60MU=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0f:93:f1:b1:1c:91:bb:2b:e3:1d:c3:b7:4a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=8ed950366ff594c321180578f231fbd9e1c982b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:ac:87:a1:df:04:9a:67:5b:b8:b5:be:4a:
11:7b:35:0c:10:63:8b:01:c6:a4:29:3c:58:44:4a:
0f:d9:17:0a:5c:ac:a5:94:24:30:69:eb:4f:57:33:
be:c3:b8:24:ab:b8:23:29:79:81:50:22:4d:90:bf:
f0:03:79:03:6b:b3:7b:db:a4:71:a5:5c:ea:2c:c2:
ac:89:3a:29:57:98:b8:d8:36:a7:3c:c7:50:88:1c:
8a:57:0a:67:2f:f4:f8:de:af:4c:4e:53:26:9d:f5:
12:80:26:41:9f:0f:6b:d0:a1:7d:10:8a:57:eb:03:
10:8a:65:b4:a7:cc:e0:8b:2d:2a:7f:b7:8e:33:79:
ea:cb:a1:d7:2b:13:a8:3a:a0:12:d6:45:d4:47:c8:
59:b3:b1:46:fa:71:34:49:b6:66:b5:7b:a5:60:53:
cf:83:ce:82:9a:21:f4:cb:af:db:61:81:f1:b7:05:
74:78:06:9d:36:08:ea:41:bc:44:9a:6b:21:8d:af:
9d:8c:3a:50:36:a3:0c:50:6c:8c:9a:77:a0:48:48:
6c:f2:39:1e:bb:da:c1:5f:ce:a8:73:91:cd:7a:ba:
fc:3f:83:a4:c6:d7:fb:34:15:2a:1d:e5:9c:66:58:
f8:c3:b8:a9:27:ae:a2:60:fb:33:4b:72:e7:f7:a7:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D9:50:36:6F:F5:94:C3:21:18:05:78:F2:31:FB:D9:E1:C9:82:B6
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:84:a5:7a:d8:9e:41:98:97:de:6b:7b:79:94:be:81:08:87:
27:05:ac:68:3c:68:47:ec:a6:00:d9:38:14:cc:52:07:79:8a:
55:ac:c9:c3:7b:44:39:ce:ad:f1:99:06:bd:3f:b8:75:26:7d:
d8:64:68:fb:1f:ba:7a:78:d1:49:ba:4b:74:14:4c:b0:61:8b:
09:05:b3:e6:14:82:7e:c3:c2:65:79:a0:b7:02:0f:99:db:3a:
d8:c7:81:62:5f:0b:fd:36:eb:40:00:07:44:67:64:a9:3f:c5:
5c:07:85:db:4e:ba:62:1a:12:62:e9:20:76:d1:7a:3d:77:0d:
d0:f1:22:db:bc:1f:44:19:80:08:15:75:7e:e8:69:94:cb:be:
36:c9:c4:5c:46:90:ff:11:0b:c3:74:c4:67:92:b4:19:77:21:
32:b8:56:bc:07:aa:52:0b:e1:b4:39:8f:2a:ac:6a:cf:f5:9b:
8c:e7:62:c4:4f:fd:8e:f1:b6:90:49:0e:db:30:ef:e2:b9:4a:
77:7b:bb:c2:d7:69:7b:2c:b1:8f:f4:ef:57:64:7e:7c:5c:56:
59:f2:af:61:1e:63:a5:b4:0e:4b:8c:c0:b6:48:ba:32:55:80:
bd:53:0f:29:9d:9d:99:6f:79:25:7e:40:80:20:b6:85:fe:7a:
6f:c1:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:38 2025 by rpki-client