Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: vD1qlV6PmbzCK/TABVtqGjNCRjt5HW5jUkFnzu2Ti8E=
Subject key identifier: B6:6C:43:6D:D7:8C:04:88:66:B4:59:94:48:2C:D3:4A:6C:99:E2:A4
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019A4F9928DD36ABB07D8C5E0CB65835CFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 03D1
Signing time: Tue 04 Nov 2025 16:00:28 +0000
Manifest this update: Tue 04 Nov 2025 16:00:28 +0000
Manifest next update: Wed 05 Nov 2025 16:00:28 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: sPmpuYczlqGcA7a1SulLY2rKvfuBrm9+DOjDsnJXvjE=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:28:dd:36:ab:b0:7d:8c:5e:0c:b6:58:35:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Nov 4 16:00:28 2025 GMT
Not After : Nov 5 16:00:28 2025 GMT
Subject: CN=b66c436dd78c048866b45994482cd34a6c99e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:2a:8f:68:75:6f:1f:70:f3:32:2c:60:e9:
12:c9:ce:a4:9a:34:67:51:d7:d1:cd:1e:fc:4a:b9:
97:c7:78:8d:aa:fe:84:f3:72:43:04:d6:f7:f8:7d:
9e:f5:98:64:22:e5:ce:a6:59:dc:c8:47:0a:a8:f0:
3e:ed:4d:59:6c:34:87:cb:42:65:9e:9a:8f:c6:04:
5a:8d:55:9d:38:5f:2b:e9:94:8e:72:12:80:c9:0b:
81:a4:48:32:26:6d:e5:f3:54:3a:be:03:8f:2e:a9:
3e:ea:a0:ad:fe:4a:ef:1c:dc:bd:d7:67:65:7f:0e:
79:42:bf:76:50:51:be:c0:b1:1f:60:80:92:79:4d:
86:5f:db:5c:c1:fd:eb:19:ce:2d:c9:e1:0c:d9:d2:
fc:6c:40:18:48:ef:59:8b:33:bc:9f:41:57:97:76:
75:c2:80:71:cb:59:1c:3f:19:79:a0:5c:67:fa:8a:
e8:3e:df:2c:81:c5:5e:d5:ac:fe:99:0a:00:26:78:
3c:9b:12:81:6f:e7:1a:a2:fd:16:da:26:e8:7c:87:
89:65:f4:c6:1a:82:b5:19:d0:44:97:a1:aa:f0:ed:
d0:9e:c7:0e:a5:dd:c5:82:06:51:36:45:87:9a:2b:
f7:fe:ff:4d:a3:98:00:f0:28:01:d4:eb:e8:da:53:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:43:6D:D7:8C:04:88:66:B4:59:94:48:2C:D3:4A:6C:99:E2:A4
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:11:7d:b2:2c:51:63:0e:2b:a4:a8:0c:4e:b5:13:e6:09:45:
fb:88:eb:0a:a1:79:7c:5c:38:7d:16:e3:d5:35:45:7d:d5:da:
b7:9c:5d:04:57:1d:28:5c:98:3b:b7:3f:78:61:c2:59:ac:c2:
43:b4:8b:b0:f8:30:2f:ab:7a:1b:f2:b4:7c:40:d4:f1:d4:12:
83:3c:2f:02:3c:03:e3:5b:82:56:f4:e9:f1:6d:cb:70:ce:bc:
90:50:47:47:9d:0d:e0:70:8e:6e:4c:0b:6d:86:ec:47:7b:f8:
e0:3a:0f:da:21:9c:81:c2:5f:0a:f0:e7:bd:12:c9:54:8a:21:
32:04:b5:62:e3:d8:73:5b:b1:ee:4f:16:44:4b:43:42:1b:15:
f3:24:4c:5e:dc:18:3e:25:79:2d:e1:e0:27:91:ee:7e:8f:85:
2f:1a:6f:c3:c8:e5:0c:2d:ed:49:d3:4b:99:ae:e2:58:dc:cc:
6c:da:2f:e8:24:c8:a6:f2:e5:ea:44:a6:a1:a9:58:e5:22:4a:
76:c3:41:a4:da:da:5a:32:4e:f7:50:7b:6a:bc:6a:af:c2:c5:
b0:f0:de:59:72:07:31:ce:54:85:2e:e2:44:73:34:74:89:17:
09:cd:ca:47:12:4f:bf:ac:bc:2f:83:45:8a:9a:1f:8d:ad:49:
bf:76:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:05 2025 by rpki-client