Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: SRWQXjN3pvdn12ml060DbTJbi6MlhQFVJ3dI/bkDnR0=
Subject key identifier: FD:81:8A:A8:2F:19:16:D4:CC:4A:D9:7C:59:B9:E4:60:50:D7:EF:6A
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019A30EA0E2788095D4CB19AD1E43A9D292B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 063B
Signing time: Wed 29 Oct 2025 17:00:36 +0000
Manifest this update: Wed 29 Oct 2025 17:00:36 +0000
Manifest next update: Thu 30 Oct 2025 17:00:36 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: 1HiwHcLjmP9LUyPE4PpP5W3taaFGhKye1bZgYczW1h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:ea:0e:27:88:09:5d:4c:b1:9a:d1:e4:3a:9d:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Oct 29 17:00:36 2025 GMT
Not After : Oct 30 17:00:36 2025 GMT
Subject: CN=fd818aa82f1916d4cc4ad97c59b9e46050d7ef6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:d8:44:8a:53:9a:4a:e6:84:05:42:0a:4d:
68:45:36:09:d5:f9:30:d8:38:e3:46:80:c1:b9:45:
29:91:1c:4c:e8:bd:31:1d:e4:b9:b0:fe:00:11:c3:
55:a8:dd:15:98:98:e7:62:5c:e6:a9:fb:bf:4d:a8:
7e:24:f5:c0:30:4d:40:56:55:87:05:7c:f6:ef:b6:
13:d8:1c:1b:9a:06:b9:75:cf:17:7c:f4:6c:40:11:
7b:d2:34:28:4a:44:62:69:1c:66:45:31:f4:a7:64:
a2:43:5e:67:48:55:cf:ac:23:5c:38:2e:eb:c6:f4:
e6:67:20:e6:84:eb:5c:48:49:a2:91:bd:54:72:63:
fa:9d:09:45:43:d9:1c:29:61:f5:ad:e9:cb:36:9f:
6b:39:61:f2:56:fe:d2:a6:0d:6e:e2:5b:1c:73:34:
72:2e:d4:11:33:91:41:3f:1c:95:de:b7:59:5d:46:
84:74:bd:b8:d1:43:a8:63:98:be:71:24:4f:40:a0:
1b:d6:34:11:06:d6:e6:66:13:4b:52:eb:cf:ae:12:
6b:35:25:cc:25:44:e4:1c:7b:cb:96:bb:c6:c5:f6:
eb:70:ee:d6:c0:60:76:d0:13:cf:4e:63:0e:4d:84:
66:6f:d8:49:c4:a2:42:5e:f2:ae:67:c0:1c:b4:99:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:8A:A8:2F:19:16:D4:CC:4A:D9:7C:59:B9:E4:60:50:D7:EF:6A
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:39:28:7f:35:c0:c0:4b:31:67:b0:13:a9:21:71:41:88:05:
27:ef:1d:6e:3b:10:2e:ca:b0:f4:c8:bc:7f:aa:ee:47:0b:5e:
a2:86:df:93:77:9a:2b:8f:87:6d:60:d5:54:ff:b6:ce:41:41:
79:c1:ac:33:13:b3:71:2a:fe:d0:56:57:30:9c:5b:f7:ab:b9:
ec:b2:7e:aa:34:3d:3d:eb:99:28:ce:b7:64:a7:5d:76:5f:fa:
2e:f7:61:d4:68:16:4a:88:13:bc:8e:68:4e:21:a6:fe:a0:aa:
1f:6a:0a:f4:80:00:47:02:ca:38:97:3c:e7:d7:17:6a:ce:ca:
48:19:22:6c:0d:14:ed:31:56:60:28:de:2d:66:8a:73:24:b9:
96:ab:dc:ef:ba:57:e8:5a:e6:ff:dd:9d:90:20:ac:91:c7:6b:
86:c5:ee:fd:f2:c7:9a:c1:46:d9:c8:f7:7f:cf:1b:f9:fa:cb:
cb:10:85:45:d0:e4:50:6e:7d:bb:21:23:fa:51:98:1e:0e:52:
bf:e1:fc:1d:02:60:36:c8:e2:41:b3:b1:6a:d7:e3:d4:14:d7:
48:99:96:d9:c3:02:d1:84:cd:af:ba:f3:80:55:f7:7d:34:c3:
1a:a8:cd:0b:ef:52:0c:9e:fb:ae:6b:6c:28:86:f1:0f:2e:f3:
a4:3d:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:33:59 2025 by rpki-client