Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: uH+kxcck8QrkqS+PUKXYCPgzdVuGIXsL/wTcs22bdNA=
Subject key identifier: E4:CC:61:A4:48:CF:E8:CD:7C:36:2E:12:B9:C7:36:B0:2F:76:04:76
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 0199FCC6AEF83CAF6B23227E1230004BDAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0620
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: xr784ytQRfVDPpH9CsRKrA+aC7P+r3sDe0k0Vyd7/+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ae:f8:3c:af:6b:23:22:7e:12:30:00:4b:da:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=e4cc61a448cfe8cd7c362e12b9c736b02f760476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:16:2f:08:37:5f:fe:da:3b:35:1f:ad:08:
13:57:d7:bd:a3:55:e2:11:00:6d:e9:3c:8e:0f:78:
f8:b9:43:d7:0b:30:5a:07:6d:c2:94:1b:a7:f9:34:
68:f2:84:28:8c:64:a6:4e:af:fe:92:a6:49:ff:1a:
c3:34:5d:fa:bf:42:26:a1:5f:a4:10:fe:ba:2e:49:
95:71:85:56:d5:65:b0:68:09:42:7b:4d:80:74:5b:
c6:ca:4c:c6:ab:4b:db:8e:dd:d0:8d:9a:e5:a1:9a:
2e:24:88:b2:c2:e9:83:55:ca:d7:0d:b7:f8:60:f7:
4d:bc:65:ba:12:93:53:29:77:1a:f0:02:d8:94:2d:
a6:b7:e8:00:2a:be:ce:76:8e:86:7f:22:69:6e:9a:
a5:50:20:db:53:94:16:1a:95:87:85:8a:d8:33:9f:
f7:22:1c:df:32:7d:90:e9:88:af:56:22:b2:71:50:
7b:2c:ec:08:21:e3:68:98:ba:6f:39:38:e9:ec:40:
62:4d:79:bb:1d:8d:50:58:a3:9b:8b:1f:24:53:57:
42:b2:4f:9e:37:29:cd:67:01:f8:e6:a6:dc:2d:df:
ef:df:f2:fd:d5:55:ff:78:6d:86:36:6b:c5:a4:4b:
7e:10:fe:a3:b1:7d:3f:81:2a:00:4e:3d:ed:5c:7c:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:61:A4:48:CF:E8:CD:7C:36:2E:12:B9:C7:36:B0:2F:76:04:76
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:d2:de:bb:1d:e0:f6:86:4f:78:56:2e:3e:c4:32:59:59:
14:e2:b8:83:6f:b8:08:ca:3b:b5:57:1c:35:38:89:46:d1:40:
7c:2c:81:1b:2b:7a:ae:7d:cc:72:b0:2f:35:85:b6:89:70:78:
0d:29:98:54:be:17:d5:3d:e5:a5:f9:41:49:52:ac:ad:5d:bf:
39:ac:df:ac:da:df:3d:38:ae:ea:f5:e4:c7:fb:2c:d2:2e:ea:
28:15:81:69:3b:79:c9:a5:08:42:67:b5:38:6e:87:09:fb:38:
17:91:fb:b1:e2:5d:ac:08:2e:93:fd:1d:3e:38:31:70:1f:cf:
d7:62:40:f1:00:55:bc:f2:bf:00:b7:24:1b:95:03:06:b4:01:
9f:3b:05:66:ba:67:e3:7b:60:70:5c:66:6e:95:0f:da:72:d5:
f8:4d:ae:79:50:41:d5:42:6e:2f:97:60:84:b4:c7:59:77:f3:
7b:21:c3:f4:2a:b2:95:8d:20:de:ba:92:eb:43:35:0a:a2:28:
33:3b:22:7b:ac:72:da:43:99:95:1b:7c:e6:9c:2b:cc:b2:34:
f1:d7:ca:74:b0:fb:fc:24:d9:0f:4e:fd:3c:41:15:10:b0:bb:
31:9e:ee:f9:50:00:67:c0:08:ae:b7:3d:96:d2:b4:7a:ee:2f:
cd:73:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:53 2025 by rpki-client