Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: 5JxMo50jfmL6pFteY/eT+WhKfr7BKBRK+krh8HG1RdM=
Subject key identifier: 69:0A:75:85:78:D4:68:55:66:23:6D:16:1D:BE:F2:E5:15:B2:3E:86
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 01976A3D02FBBA5332DCE175683C1EAFDEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 04CB
Signing time: Fri 13 Jun 2025 17:01:12 +0000
Manifest this update: Fri 13 Jun 2025 17:01:12 +0000
Manifest next update: Sat 14 Jun 2025 17:01:12 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: Ntw3DaHI/TAjDNNmwYvUtz2D+yopaMu6Q5zN5vQPVZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3d:02:fb:ba:53:32:dc:e1:75:68:3c:1e:af:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Jun 13 17:01:12 2025 GMT
Not After : Jun 14 17:01:12 2025 GMT
Subject: CN=690a758578d4685566236d161dbef2e515b23e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:a9:0e:c4:c0:37:48:8b:ac:58:3e:1e:78:
29:fa:b9:72:b6:26:bc:f6:be:c8:26:24:16:b1:84:
a5:4c:f0:64:fb:a2:8a:a8:88:94:b3:dd:db:0f:9e:
a1:61:e2:93:5e:77:94:9d:e5:d5:bf:e8:63:40:57:
29:a2:59:19:9e:62:a6:d5:95:75:5a:9c:60:ce:58:
d8:07:4b:ae:62:5c:7a:2c:2c:97:70:15:0a:1f:82:
7a:e2:6c:d8:f3:dc:11:01:4a:60:be:83:c8:17:a5:
76:c9:5d:52:a8:fe:4b:d6:0c:cb:db:83:09:7f:79:
75:aa:5c:ce:1e:f7:be:7b:ed:2b:58:fc:98:c1:ba:
14:83:81:81:55:12:2d:51:34:70:f5:84:d9:a6:85:
d5:18:79:db:a4:ac:5e:a3:b2:69:91:c9:bd:ab:c9:
c3:31:26:96:9f:8d:fd:d1:4e:9c:02:f0:bc:3b:1d:
d6:98:17:fd:ce:43:b5:20:94:99:67:43:fc:97:3a:
ce:1a:8d:c6:47:16:7b:fa:df:8a:67:53:f8:72:36:
2f:d4:07:df:2e:90:23:e2:05:b4:f7:9c:d9:69:e1:
23:dc:c9:7d:68:86:e3:6b:6f:50:2c:1a:2a:d7:2c:
00:56:5f:6c:e5:ca:31:3e:d4:86:75:f2:39:47:fc:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:75:85:78:D4:68:55:66:23:6D:16:1D:BE:F2:E5:15:B2:3E:86
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ee:da:01:af:aa:f9:85:ee:55:21:1e:30:66:c4:95:5f:ed:
8d:5d:28:56:88:85:e8:cd:3a:23:ab:65:4d:c5:ce:68:30:88:
fa:85:18:fb:25:4d:69:e1:2f:d6:96:05:b9:10:b5:49:13:b4:
f3:14:78:91:1f:c0:03:0a:d0:4b:da:94:fc:1e:0c:1c:18:f2:
8d:b8:74:70:b9:d9:66:59:d8:d5:3b:1b:e9:39:b9:7c:fc:e8:
e5:d8:da:14:74:9b:78:fa:40:76:2d:26:a4:d5:e3:b2:8f:ee:
4b:85:02:91:98:67:a7:2a:6a:c5:09:1f:33:44:72:fc:38:51:
db:c8:80:17:bb:4d:3b:d4:ad:85:08:99:94:d9:1e:3c:2d:71:
0f:07:62:81:f7:6e:df:0f:bf:cd:c5:89:99:eb:8a:ce:e4:e2:
39:54:8c:1d:2e:a1:fe:71:a8:15:50:31:6d:50:69:a6:4e:e9:
d4:62:dc:2b:91:ba:22:5e:4e:12:bd:ae:a7:96:e5:9f:85:4c:
fe:11:77:27:ed:e8:95:24:de:ed:be:cc:d3:67:61:c9:67:3f:
d0:de:99:a0:aa:32:f4:d2:33:98:fc:7c:be:7b:7f:25:c4:31:
d0:12:fe:e2:85:54:05:20:06:f8:49:c1:bf:6e:9c:d2:d5:97:
33:c8:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:56:56 2025 by rpki-client