Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: AeEN1NtSpFA8AFOaBOeT7TItk6rYNwIu2g4PWFGev7U=
Subject key identifier: D7:77:91:74:BC:CD:A5:2E:F4:27:CD:24:6F:00:F0:71:C8:B1:5A:67
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 0198936CAF711420509B56E919D1A9B7659B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 02EB
Signing time: Sun 10 Aug 2025 10:00:30 +0000
Manifest this update: Sun 10 Aug 2025 10:00:30 +0000
Manifest next update: Mon 11 Aug 2025 10:00:30 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: h/9861Qxp3P3Fh3S+pDx1V1dtMxFIxFwbeMVxfYn0xo=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:af:71:14:20:50:9b:56:e9:19:d1:a9:b7:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Aug 10 10:00:30 2025 GMT
Not After : Aug 11 10:00:30 2025 GMT
Subject: CN=d7779174bccda52ef427cd246f00f071c8b15a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:42:31:e8:8a:c1:f9:83:12:3e:c1:22:36:
f1:b5:f3:1a:47:d3:47:1d:61:e0:6d:2b:44:65:6e:
01:c3:7f:0c:e8:fe:a2:68:3b:10:3c:50:20:43:6a:
f1:a7:db:b1:96:50:bf:12:fc:88:86:4a:f6:ad:33:
3d:1b:3e:75:42:69:a2:18:81:a4:e4:64:c9:8d:3a:
8d:cc:c8:3e:ba:7c:91:4c:0a:81:00:76:fc:a2:40:
cb:58:91:0e:27:7f:aa:f9:05:0f:90:b7:0c:1a:f2:
b9:8b:e0:62:86:43:32:1a:aa:bf:88:cc:f9:aa:71:
0c:31:01:83:a9:90:e5:0d:52:e9:e2:f7:92:ca:6e:
c4:7b:2d:d7:c0:df:41:54:ba:ef:92:4f:b2:7d:81:
47:78:7f:2a:77:8c:83:d1:20:7f:76:be:cc:d8:fb:
af:5e:a0:11:5f:b5:62:9c:6f:e0:35:c3:7e:ee:cf:
29:24:b4:de:2c:df:07:d2:d2:d6:4e:65:06:c4:44:
bb:68:8c:c8:11:b7:22:eb:b2:c3:af:69:63:e6:9f:
a4:65:a5:38:0c:e2:ce:6b:2e:51:7f:04:c0:7e:03:
71:65:5f:32:cf:a9:f0:b5:25:dc:51:d5:53:7f:1e:
b4:00:4e:9b:fb:90:bb:f2:5c:08:45:36:71:46:f2:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:91:74:BC:CD:A5:2E:F4:27:CD:24:6F:00:F0:71:C8:B1:5A:67
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8f:1e:30:8c:31:b6:d1:cf:dd:48:29:4f:71:e4:7f:a8:8a:
02:aa:69:5c:27:32:72:e6:5e:30:04:2b:50:77:22:5f:b6:3c:
6e:cc:66:f8:2f:d5:6d:01:d0:39:c0:a7:e5:e2:7b:5b:55:18:
49:dd:3c:69:16:d6:48:cc:6b:a5:70:ea:cf:ba:c0:79:6e:cf:
71:30:f7:c7:2a:fc:8e:dc:bb:16:c2:fd:4f:1c:30:64:03:47:
e2:20:07:a2:ca:df:de:af:df:25:34:f6:a5:41:9c:2a:9b:2b:
5a:7a:31:6b:63:2c:04:62:17:41:22:88:ae:29:50:27:17:99:
55:08:1e:06:40:d3:c1:e2:82:1d:13:23:d8:bf:4d:d9:28:95:
24:6f:0e:7d:bb:2e:90:df:5c:b0:8f:61:a8:80:2a:aa:fd:d7:
02:f0:2d:0e:26:17:2c:ac:32:aa:5a:22:d0:65:7c:b9:4a:6d:
27:27:43:72:4e:53:1d:d2:7e:b4:37:81:d6:bf:c4:f3:24:66:
00:9d:4f:4c:98:ee:a1:fd:80:19:06:0c:d4:74:69:94:56:17:
20:16:02:90:6b:c8:18:92:99:fe:61:e9:22:a9:2c:e5:5a:ab:
ad:be:cb:cb:25:13:65:c3:1f:ee:fc:b3:68:84:63:79:92:86:
3e:f3:a5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbK9xFCBQm1bpGdGpt2WbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTlmZmZhZjA5MjQ5YjIwY2Y3ZjU2N2MzY2NiOTk1OGI0
ZjMxMTAwHhcNMjUwODEwMTAwMDMwWhcNMjUwODExMTAwMDMwWjAzMTEwLwYDVQQD
EyhkNzc3OTE3NGJjY2RhNTJlZjQyN2NkMjQ2ZjAwZjA3MWM4YjE1YTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/5CMeiKwfmDEj7BIjbxtfMaR9NH
HWHgbStEZW4Bw38M6P6iaDsQPFAgQ2rxp9uxllC/EvyIhkr2rTM9Gz51QmmiGIGk
5GTJjTqNzMg+unyRTAqBAHb8okDLWJEOJ3+q+QUPkLcMGvK5i+BihkMyGqq/iMz5
qnEMMQGDqZDlDVLp4veSym7Eey3XwN9BVLrvkk+yfYFHeH8qd4yD0SB/dr7M2Puv
XqARX7VinG/gNcN+7s8pJLTeLN8H0tLWTmUGxES7aIzIEbci67LDr2lj5p+kZaU4
DOLOay5RfwTAfgNxZV8yz6nwtSXcUdVTfx60AE6b+5C78lwIRTZxRvKJTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd3kXS8zaUu9CfNJG8A8HHIsVpnMB8GA1UdIwQY
MBaAFF6p//rwkkmyDPf1Z8PMuZWLTzEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODkt
YjU0OWZmYTA0MDQ2LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODktYjU0OWZmYTA0MDQ2
LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzI8eMIwx
ttHP3UgpT3Hkf6iKAqppXCcycuZeMAQrUHciX7Y8bsxm+C/VbQHQOcCn5eJ7W1UY
Sd08aRbWSMxrpXDqz7rAeW7PcTD3xyr8jty7FsL9TxwwZANH4iAHosrf3q/fJTT2
pUGcKpsrWnoxa2MsBGIXQSKIrilQJxeZVQgeBkDTweKCHRMj2L9N2SiVJG8Ofbsu
kN9csI9hqIAqqv3XAvAtDiYXLKwyqloi0GV8uUptJydDck5THdJ+tDeB1r/E8yRm
AJ1PTJjuof2AGQYM1HRplFYXIBYCkGvIGJKZ/mHpIqks5Vqrrb7LyyUTZcMf7vyz
aIRjeZKGPvOlbg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:19 2025 by rpki-client