Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: eitLM7vQJWxSTUOO95U5AAqiakdb2M9VK4za6iRfxuo=
Subject key identifier: 3D:7F:6D:14:A4:C4:9D:8A:E9:51:A7:56:AC:30:F5:43:4A:7C:72:7E
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 0197CACCC61CD7F679769DA16C9BECC9453C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 04FD
Signing time: Wed 02 Jul 2025 11:01:47 +0000
Manifest this update: Wed 02 Jul 2025 11:01:47 +0000
Manifest next update: Thu 03 Jul 2025 11:01:47 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: /b1YF0yxLJpFVRLVdpFclm5tFpQkqmm+2cPZtuzPNkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:c6:1c:d7:f6:79:76:9d:a1:6c:9b:ec:c9:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Jul 2 11:01:47 2025 GMT
Not After : Jul 3 11:01:47 2025 GMT
Subject: CN=3d7f6d14a4c49d8ae951a756ac30f5434a7c727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:0e:f9:1b:be:7d:17:2c:96:16:0e:aa:9a:
8d:81:34:26:5f:d7:cd:5c:63:f2:6a:bc:6a:99:b0:
00:b3:bd:a7:01:c5:21:cf:47:1d:bf:ba:a7:84:74:
bd:f8:71:01:9a:a7:7e:5c:db:a2:c9:7f:a1:89:41:
0a:97:cb:8c:08:46:57:ac:3b:e9:15:90:73:45:7d:
16:90:26:9d:5f:3b:43:1f:44:5d:7b:da:3f:32:41:
c4:0c:75:60:9d:fb:10:ad:9a:22:80:16:d0:9c:96:
5e:99:d4:84:f3:97:df:97:00:39:48:7e:37:9e:9b:
e6:3b:2f:95:3d:1c:ef:af:1d:87:2e:1a:23:25:ec:
0e:21:2f:d0:cf:c9:bf:2e:b3:6b:6d:99:8e:30:06:
a7:12:33:4e:9c:db:3f:ef:8a:e4:17:05:02:74:77:
41:97:a1:46:97:e4:32:6d:65:e7:a0:75:d4:39:fe:
b8:13:d3:5f:11:46:5a:bd:ed:3e:c1:a1:48:7d:ea:
30:8c:6e:dd:d5:53:7c:4e:fd:8e:89:d9:6e:d8:15:
50:32:39:ab:3b:ae:a5:e8:38:25:4f:de:ae:19:7a:
1f:fb:a9:21:7b:40:03:2a:39:fc:bc:a5:44:40:7b:
dc:8a:96:4f:60:48:ed:a8:c6:5d:7a:db:40:15:dd:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:6D:14:A4:C4:9D:8A:E9:51:A7:56:AC:30:F5:43:4A:7C:72:7E
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5e:88:f4:ef:e9:ea:48:52:fe:ff:cd:9e:6c:18:0e:97:08:
0e:3b:21:11:72:ff:0e:a0:4c:75:62:64:56:b5:0e:8f:9a:69:
09:ee:43:90:0a:94:31:2c:35:37:c9:54:71:ad:7a:88:73:d7:
e4:6b:45:2b:06:24:bf:49:a3:ed:d1:50:9b:8b:bb:76:3a:b3:
80:73:79:ab:d4:cf:66:5f:f3:0f:dd:1c:d7:5b:f5:7f:67:fc:
56:a0:45:e6:fe:83:d8:e5:4b:3a:30:bd:79:b7:b0:91:fb:67:
72:40:9a:35:50:c8:2f:49:ed:81:7d:5d:ac:c9:29:2d:ee:b5:
94:49:a2:94:a1:0b:2a:5e:25:3d:75:d7:45:31:d2:67:fb:bd:
d6:c4:37:7e:b4:73:8d:4d:4c:86:36:c7:d4:51:73:29:76:88:
72:1b:14:49:ed:ea:b5:db:27:4c:21:20:b0:cf:7c:79:88:90:
0d:6a:40:ef:7a:14:bc:b9:97:24:b1:e1:bf:40:c9:40:b8:d6:
08:f4:a0:e8:f4:e7:1a:51:d3:5a:78:a9:5b:7b:5a:ea:72:87:
e3:f6:9b:d1:b6:15:e6:c6:9b:ed:1b:a9:3d:fb:bd:68:8f:aa:
c0:79:18:0e:97:ac:48:9b:ea:0c:f8:46:02:b3:7b:17:d1:23:
40:69:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:37:41 2025 by rpki-client