Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: KSrRA/kNtJsqn4n+wQrnITxGshb0WX6E+79oeacH6Hc=
Subject key identifier: BF:22:14:CD:5F:4D:C7:CD:A2:DA:81:E7:F4:10:7C:41:73:8B:37:4D
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 0198D54E67AE396F2EFE388D1D98FDF2A87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0587
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: jV3OrtMHk/dDJ/QYQDivpj2HZL8f01kwRQnxo1o2fAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:67:ae:39:6f:2e:fe:38:8d:1d:98:fd:f2:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=bf2214cd5f4dc7cda2da81e7f4107c41738b374d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:fe:9a:ba:2b:4b:0e:ef:ba:67:7e:a3:c8:
6d:b2:d5:46:cd:b3:17:2d:c5:d1:29:52:bb:d5:b4:
47:28:22:d1:45:67:86:91:e1:e9:80:6e:b1:4d:ff:
30:43:c3:9d:f6:e8:c3:22:f8:c9:2b:48:9f:8b:77:
10:42:b1:1f:22:ad:f3:83:9a:79:9a:43:6b:44:1e:
95:34:9a:86:d8:e2:7c:d9:91:eb:1d:6c:71:50:7a:
7c:cc:8e:c8:89:23:18:e4:b3:23:ee:69:1a:cd:45:
2c:87:42:3e:b5:e7:ef:f9:96:db:9a:1e:71:32:ef:
b4:cf:a6:62:4a:c9:da:de:bf:a2:36:e4:ff:09:52:
c9:98:18:a5:c9:25:20:fc:dc:58:b5:04:f3:aa:59:
8e:66:c5:f9:df:f8:61:bf:6c:cb:00:bf:33:6d:8e:
4c:b7:e4:a6:eb:ad:71:1c:c6:df:38:7a:08:b4:d2:
f6:fa:75:40:fc:bc:15:e8:01:d5:67:da:d4:25:20:
ea:7d:f1:c6:af:95:14:25:90:c8:d9:ba:2e:56:1c:
23:7d:44:d0:17:c0:fc:4a:4c:f0:73:a7:ee:fa:83:
a3:93:f2:0f:9d:ea:ea:5c:74:cc:6e:1a:13:29:0f:
ad:d0:e2:2c:0c:dc:43:95:62:0a:c2:70:7a:e6:6b:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:14:CD:5F:4D:C7:CD:A2:DA:81:E7:F4:10:7C:41:73:8B:37:4D
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:ac:c4:b8:e8:e6:72:fd:07:4b:16:38:69:f8:cd:f3:c8:
13:57:c5:83:b7:b3:a4:e4:09:bd:8a:b8:af:f7:2c:0b:58:9d:
13:6c:b0:0f:00:40:ad:cf:44:32:b8:cd:83:9e:af:38:ad:e9:
df:5f:8e:84:75:0b:cb:ca:4c:ea:ce:ad:5e:06:47:d9:80:28:
1d:88:e6:cc:24:74:ec:60:2d:cb:c3:6b:e7:f1:e1:f7:9c:14:
ff:a2:e1:fa:fd:8a:dc:c3:d2:44:13:73:6d:91:b5:06:ec:e5:
3a:09:54:f8:fb:1a:d4:97:44:01:3f:ee:32:b9:64:52:14:28:
42:82:32:79:9a:d1:74:89:45:04:d4:42:52:ca:bd:15:81:35:
38:24:6e:65:af:cf:19:75:20:01:b9:83:36:f8:4e:12:ad:ea:
8a:64:2d:e7:b7:dd:43:bc:91:e3:c7:41:5e:5e:c4:eb:2f:bd:
24:52:1e:ff:ad:21:33:a7:2c:d4:8e:8b:49:db:d3:ec:89:84:
9a:6b:17:df:cf:dc:2a:ee:c0:de:22:0c:5a:01:c8:86:83:10:
55:cd:d0:2d:a8:b5:d4:25:c5:01:0e:1a:88:d9:5c:02:1e:c4:
0e:3a:9b:04:04:36:b3:e3:8f:8c:21:88:21:43:9b:5a:a1:ff:
50:43:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:56 2025 by rpki-client