
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: wU23CJkC8645fnTVxoCU03LFYRYZI5R1f4TRDysiip4=
Subject key identifier: 63:13:06:D0:26:42:82:AE:56:F1:D2:C1:8D:38:54:86:D9:51:6D:A6
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 01988BEAA6A105ADC1B0F2ED0F75C6F60E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0561
Signing time: Fri 08 Aug 2025 23:01:07 +0000
Manifest this update: Fri 08 Aug 2025 23:01:07 +0000
Manifest next update: Sat 09 Aug 2025 23:01:07 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: nqgjIfFcmTcffxbiGOGYeOIRyxVubP4y1wik22od+0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:a6:a1:05:ad:c1:b0:f2:ed:0f:75:c6:f6:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Aug 8 23:01:07 2025 GMT
Not After : Aug 9 23:01:07 2025 GMT
Subject: CN=631306d0264282ae56f1d2c18d385486d9516da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:82:eb:97:24:a6:20:7d:1e:9b:b6:3d:45:
32:58:f2:1b:53:3e:ab:ac:3a:e1:1b:f4:64:78:eb:
8d:1d:98:08:6a:38:c4:d0:ac:6a:b4:e4:06:b2:6e:
07:9b:68:48:5f:0a:a0:be:5f:88:58:45:e8:58:a9:
1d:de:5a:29:cb:a6:a9:c0:b4:6c:f8:eb:cc:dc:16:
39:2d:62:b6:6d:74:f3:49:4d:b8:c7:32:6f:e1:58:
19:05:2c:7d:33:80:36:99:18:68:cb:e8:c9:fe:98:
be:a1:1c:20:51:71:f5:d1:d4:5b:6a:4c:f8:0a:dd:
74:7e:27:68:a6:c2:63:4a:0b:cd:55:29:55:3a:22:
b7:60:3c:65:f2:54:a6:25:8d:3e:6f:d7:8c:bd:9a:
c8:58:b9:23:9a:5a:1d:de:3c:0d:58:40:ba:62:99:
ba:09:9c:0d:22:9e:ba:97:d4:50:fe:35:b2:67:be:
ea:6b:7a:4d:f3:1b:1d:9a:7d:1f:75:a0:06:b7:97:
b1:5e:e4:4b:9a:a1:95:b8:ec:1a:89:fa:89:4c:a2:
91:0f:21:df:01:76:f3:fb:a3:0f:e9:fa:88:7e:09:
24:f1:48:99:aa:f4:9d:3b:2c:e2:ea:d8:ca:3a:97:
20:99:7d:40:d1:da:6c:ea:18:28:bc:5b:6c:f1:db:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:06:D0:26:42:82:AE:56:F1:D2:C1:8D:38:54:86:D9:51:6D:A6
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d6:0c:3d:9d:5f:1d:54:48:22:38:24:ac:c3:20:24:84:88:
78:f5:08:10:0e:c3:88:fd:30:80:bb:c9:b2:45:01:ed:1e:9e:
9a:12:17:60:45:f8:56:f8:8a:69:2c:3a:a0:00:7d:31:2a:8e:
33:83:56:4d:c9:d1:47:a9:6b:8c:25:69:b4:6e:38:dd:20:e3:
df:49:52:1f:a8:84:d2:3c:ea:31:ba:0d:d3:1f:e2:c2:9d:49:
9d:4d:12:73:9d:77:fa:23:d0:e2:d4:0d:c7:ef:4b:02:ef:6c:
ac:13:28:dd:35:08:ef:00:cf:ce:f0:0b:be:a4:cd:b1:f0:3a:
d0:3c:48:9b:1d:f3:5f:4f:19:e7:77:85:58:2e:91:15:4a:39:
c8:c1:2c:9e:1a:06:ec:e8:20:fa:45:99:2d:b2:fe:b6:d6:6e:
b1:db:e2:d1:f1:e3:79:58:96:aa:4a:0e:94:01:36:2d:92:20:
1c:9c:71:b9:19:a1:32:5d:6b:de:ee:43:48:82:e1:04:a8:bc:
b0:ce:28:a2:ab:3d:e2:36:32:93:dd:87:24:b1:c5:c7:d9:e5:
5f:88:52:43:7d:e5:bb:83:ce:6f:74:a7:99:a5:0a:10:ed:42:
cb:6d:7e:22:0e:5d:19:ac:34:8a:5c:37:05:c9:ed:9c:ab:85:
ca:1f:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:56 2025 by rpki-client