Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: 2VU93cKfLCmfh6bmhJc3F7zJEOgeyihDxj04aApxqrM=
Subject key identifier: B1:52:B5:FF:67:3B:BE:42:AD:B6:E6:4B:3D:37:54:DE:7E:E0:B1:A4
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 0199FC8F35D7AE7241CD94B62E9A741A1BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 03A6
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: kBxp9JuBhDfs4k/cZ3UMPqc0zRcBlQqW1H/X6Kn20vM=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:35:d7:ae:72:41:cd:94:b6:2e:9a:74:1a:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=b152b5ff673bbe42adb6e64b3d3754de7ee0b1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:ce:a2:2d:c5:79:39:c9:5c:9c:d3:aa:e4:
ee:29:1d:2b:ec:19:ab:b2:eb:f0:04:24:12:52:5d:
2f:3f:c0:5b:30:69:fa:df:61:e8:6e:72:18:4a:71:
7b:41:ad:f2:fa:ad:38:32:2c:fe:1a:91:1d:8a:38:
50:72:aa:8f:2a:50:ef:0a:5f:c2:5c:8b:ca:ae:b8:
53:9f:20:cc:00:43:5b:90:6a:5a:55:e2:2f:7d:33:
b5:e6:9f:48:e4:5e:ad:a6:f7:e9:3d:c4:7c:d2:d0:
45:0b:4a:d3:19:ca:55:6f:8e:ad:62:91:0b:11:12:
fd:a4:fa:58:8b:37:4b:18:85:47:d8:50:79:71:1c:
a5:91:0e:74:35:37:73:1c:aa:50:4d:96:64:ba:9e:
9e:c6:a7:88:a5:66:e6:91:85:39:31:f8:62:b5:e0:
78:18:bc:1f:fb:0e:b6:34:ca:2a:b2:84:2f:70:5e:
2d:40:ab:35:d0:8e:3e:d2:cd:90:d3:36:4d:e5:f6:
c7:00:7e:e0:97:70:1a:db:00:1c:53:c1:a4:33:88:
79:b3:75:89:24:3f:fb:75:13:2b:b7:56:ad:e5:42:
3c:93:08:ef:97:97:ef:e2:7a:44:8c:50:f3:3e:eb:
64:7d:87:f4:36:78:f1:d0:60:e5:53:a5:38:53:c5:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:B5:FF:67:3B:BE:42:AD:B6:E6:4B:3D:37:54:DE:7E:E0:B1:A4
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:49:b7:a0:10:2c:18:f2:18:64:3e:6f:7e:87:e5:dd:52:a7:
bf:76:81:39:d6:31:cb:08:13:47:d9:e8:87:df:9b:28:05:30:
89:32:aa:5d:61:27:dd:2d:ec:55:fe:e3:a7:61:99:52:28:ed:
e5:af:ec:58:38:78:e3:b1:11:7f:84:f1:aa:3e:ec:c2:b5:4d:
99:f7:11:3c:27:65:a9:19:d6:11:14:97:97:22:ed:91:9a:1c:
fc:94:d3:6e:3c:85:86:e8:57:72:d5:29:b7:05:2b:ae:f4:dd:
4a:be:71:88:f9:72:c6:80:f3:10:0e:e9:43:ea:37:02:5e:5f:
90:ad:bb:77:3c:91:a5:05:64:9b:91:18:18:0c:93:e6:1a:6a:
df:d1:67:11:93:32:c0:f3:d2:a0:80:2a:76:52:7a:1a:94:fd:
57:00:16:5a:3b:1a:13:6b:c2:56:b8:03:a6:e7:4c:47:ce:3f:
38:3c:22:18:76:64:66:35:22:a6:c0:e7:3d:5b:cf:0f:7b:ae:
04:43:06:76:90:32:f5:6a:aa:23:1f:e5:d9:ef:36:12:3c:2a:
60:9a:f1:ba:c8:bb:10:19:c1:50:c4:06:78:2d:78:ec:1d:ec:
44:68:76:c0:69:05:fe:96:d4:07:bf:d0:6b:40:86:01:bb:ed:
12:49:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:12 2025 by rpki-client