Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: 60pW37EieKAEwu7MPEk0om0VwpXbJqtRGTkK0X8KRKc=
Subject key identifier: 20:1F:FC:63:03:81:AD:89:8F:A9:68:5A:B9:55:EF:81:C3:FA:84:D1
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 01974F32F18DE18749879AA8517703B52515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 04BD
Signing time: Sun 08 Jun 2025 11:00:27 +0000
Manifest this update: Sun 08 Jun 2025 11:00:27 +0000
Manifest next update: Mon 09 Jun 2025 11:00:27 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: ur1ZBjCFH61IEoxu8FIGLZ3imaPMN8UtrywLx3Csq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:f1:8d:e1:87:49:87:9a:a8:51:77:03:b5:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Jun 8 11:00:27 2025 GMT
Not After : Jun 9 11:00:27 2025 GMT
Subject: CN=201ffc630381ad898fa9685ab955ef81c3fa84d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:bf:3c:c8:7b:f1:63:48:31:51:55:0c:be:
df:ae:16:ec:d6:8d:21:59:a3:8a:a6:70:33:f5:f4:
d1:9e:1b:26:f6:55:0b:5e:8a:db:70:95:e5:5e:d1:
40:79:9e:7f:6a:59:85:ae:24:a6:dd:06:14:37:e6:
85:73:29:d0:66:16:a7:ee:66:3e:21:7c:63:2f:82:
6d:2d:5d:8b:56:fc:cb:56:14:73:0e:9e:70:27:0a:
56:4f:99:ff:0a:8e:c9:e2:4f:57:66:95:c2:20:37:
57:48:74:18:e8:2d:ad:ca:83:25:c1:5e:48:7f:fc:
34:f3:5a:68:bd:22:ef:68:b2:1f:17:4e:ae:16:aa:
c6:70:4f:82:30:30:dd:de:90:f7:bb:03:9e:6d:3b:
49:c0:aa:f3:a2:b4:56:4c:fd:60:0c:9b:b8:ed:ac:
4e:07:16:c1:53:2e:92:0c:49:c4:cd:dc:3c:76:d7:
81:fa:5a:5b:fd:0a:51:e0:51:7c:e5:e0:da:0c:9c:
6f:fc:a3:27:0f:c9:0a:69:9f:3c:4f:f7:03:ff:1e:
97:6e:8d:18:01:30:07:31:2f:18:58:31:5d:63:5b:
f5:40:44:8c:40:19:54:d5:21:c7:65:43:16:93:b3:
2c:72:1c:d4:0c:9c:e4:fe:82:2c:46:33:1b:5f:14:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:FC:63:03:81:AD:89:8F:A9:68:5A:B9:55:EF:81:C3:FA:84:D1
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:68:0c:6b:85:75:50:7e:4e:ac:55:88:66:c0:cc:cb:41:d1:
e8:b4:ff:64:1c:60:bf:cb:43:eb:5d:71:c3:14:29:dd:27:d0:
d1:e4:14:0d:7d:41:c8:1b:4d:2e:db:8b:f1:10:08:94:f2:61:
14:80:6d:5d:91:40:29:6a:4d:8e:56:4a:52:34:55:15:76:c9:
63:ec:4e:e5:c4:b5:0c:42:41:78:13:b9:b2:63:4f:10:e9:59:
69:88:95:b4:b2:3e:17:13:90:92:65:04:af:f6:7d:e3:10:d7:
c6:ca:7e:5c:46:21:11:76:c0:48:59:ff:36:b6:eb:0e:79:96:
c5:b4:22:5b:ed:6a:78:a7:4c:7c:3d:12:df:26:31:d7:14:9c:
3c:87:d5:5e:de:65:ea:e2:ca:e5:a1:c6:61:47:3c:91:bf:23:
ac:17:cb:5c:50:da:bc:82:d0:d0:a4:d7:ce:b6:ff:84:65:de:
ec:ae:bb:ef:ac:d7:02:ff:ea:7d:b0:93:ba:3f:ff:d4:53:10:
0d:97:33:20:e7:eb:1b:16:a1:75:8b:00:54:12:f7:37:d9:9f:
ad:d8:1b:ed:68:0e:66:56:d6:c6:4e:77:f2:ad:4c:0e:bc:e8:
a4:6f:28:c4:d5:e8:e5:51:94:9b:dd:f9:cd:a1:c3:39:c0:b9:
8b:0e:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:58:12 2025 by rpki-client