Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: H2BHiGV1a/26NlG+c8T9o8spuWH+8Z7AS3xE/2IHP+4=
Subject key identifier: B8:BF:FF:DA:50:FB:C5:95:4F:73:E0:67:56:F7:FA:3B:BA:81:C5:01
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019935DC88FF998348C5F72B9EE67A2A4B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 05B9
Signing time: Wed 10 Sep 2025 23:01:09 +0000
Manifest this update: Wed 10 Sep 2025 23:01:09 +0000
Manifest next update: Thu 11 Sep 2025 23:01:09 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: 0FzloQIHcLGMpICUmJzUjzQrm6Gf+l5gkyB/EAnV9ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:88:ff:99:83:48:c5:f7:2b:9e:e6:7a:2a:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Sep 10 23:01:09 2025 GMT
Not After : Sep 11 23:01:09 2025 GMT
Subject: CN=b8bfffda50fbc5954f73e06756f7fa3bba81c501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:e2:29:77:f3:c3:d5:ce:fa:75:b0:15:fe:
0f:3f:95:15:e4:c5:24:37:54:69:dd:17:1d:11:65:
40:ad:02:6c:5c:1e:96:da:8c:d8:c4:5e:c8:6e:e0:
5b:37:2a:ea:31:65:29:88:69:25:d1:7f:ca:ec:ee:
04:49:2d:43:bb:74:53:2f:95:2d:d2:c4:a8:4f:a2:
c6:d8:02:dd:6f:cc:ad:49:33:a7:41:a0:f6:04:02:
85:f9:65:f1:ff:bf:e3:d3:15:a3:15:f1:b8:c2:f6:
41:db:26:38:3e:16:e9:22:55:68:c5:82:af:7a:09:
12:c2:02:59:b5:1a:26:bf:06:ce:f5:81:7a:59:22:
6a:d4:e5:0d:49:99:7a:f7:31:84:29:13:16:99:07:
f6:6a:56:cc:0b:83:10:62:b5:57:02:f8:72:9d:b6:
73:28:80:3a:d9:92:8f:d0:b9:c8:ff:e8:62:c8:d0:
a4:0a:af:ba:49:09:45:e7:f7:26:1d:d3:9f:aa:f0:
ce:9b:6d:5e:97:11:2a:22:5e:af:72:86:34:58:6a:
56:18:1a:62:a0:73:54:97:1f:64:a9:1e:08:33:4c:
04:04:fa:2c:a3:c2:0d:e1:07:8c:00:61:e0:d4:5a:
fe:ee:30:0a:13:0a:0d:12:9a:25:e0:40:15:c8:2a:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:FF:DA:50:FB:C5:95:4F:73:E0:67:56:F7:FA:3B:BA:81:C5:01
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1f:63:0d:0c:81:4e:db:03:92:2e:2e:8b:d2:b1:6c:25:12:
a3:f8:32:9d:d5:e4:cd:2d:e2:cc:31:3a:4e:33:f4:4e:62:c2:
60:34:96:dd:cf:a3:16:fb:ca:03:7f:10:03:96:39:36:71:5f:
26:ec:60:63:8a:f2:9e:e7:f2:9d:c4:23:3d:95:eb:10:c4:2d:
5b:46:ea:07:62:45:e1:0f:a0:e8:b7:81:5f:2b:b1:ab:8b:a8:
7e:c4:b4:f2:91:7e:76:59:61:a5:3e:28:b1:b3:6f:19:e9:f2:
9b:0f:45:b8:27:6c:60:4c:f9:d0:79:3b:89:50:6d:4f:79:ad:
8a:48:5e:84:a4:f8:f0:d4:85:fe:3a:a5:c2:9e:37:b5:6e:91:
a3:04:ea:0a:03:b6:e8:19:bc:9a:03:bf:fa:3b:3d:ce:5e:db:
c3:0a:c5:cb:29:6e:86:b6:d4:0d:00:1e:0f:70:42:15:7c:e4:
a6:84:8b:64:f7:90:58:7a:5a:74:b1:16:50:dc:47:3f:d4:5c:
55:c5:35:79:e9:58:95:5f:e4:5e:e5:27:5c:fc:ce:03:af:24:
33:2d:ba:a6:79:9f:58:66:ef:94:63:0e:49:74:d6:e4:1d:48:
f7:7a:02:a5:8d:3f:af:b9:28:7a:7e:de:01:e6:c8:aa:79:b7:
e3:a5:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:13:03 2025 by rpki-client