Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: te5qN3txEfOHPgLLMu9sBvyvjXN2ECT1BfVVi6A2N0I=
Subject key identifier: 04:87:B8:D1:0D:29:E4:E4:75:CE:9D:DB:E6:07:B9:32:65:57:DD:12
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 0199FBEAA02531C47179F75D2B029674CD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 160D
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: q7mhAzQGqsB16K7gxNRhGogGwBFkgSpOkEdhqqBjwng=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a0:25:31:c4:71:79:f7:5d:2b:02:96:74:cd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=0487b8d10d29e4e475ce9ddbe607b9326557dd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:04:bd:9a:7f:dd:c6:a7:cf:50:0c:17:8e:cd:
3d:5e:3f:8e:2a:54:e7:8f:1c:2e:1b:c3:21:05:16:
c7:95:74:ef:e3:cb:9f:ae:3e:a8:dc:d6:e6:1f:ef:
51:30:5b:80:e6:12:e9:43:96:84:73:47:8b:c9:5a:
f9:f5:8b:33:2f:00:7a:f6:8e:af:88:53:10:f4:fd:
05:fe:19:4b:0c:83:67:e3:19:73:5c:44:c2:4f:75:
6b:05:1b:1e:a7:ec:c3:34:0b:30:07:55:24:6a:f0:
68:d9:7d:3b:49:f9:d5:ba:ce:ab:64:c1:d1:a8:44:
47:b9:e2:11:60:f4:76:88:65:03:f6:0a:35:bb:1f:
13:d8:45:d9:f4:56:71:0d:71:c9:70:75:e4:f1:84:
78:4c:21:89:db:0f:00:64:b4:72:8d:44:5a:d6:93:
5a:81:2c:06:38:f7:7a:dd:62:5b:8c:2a:81:3d:85:
46:a1:d6:6e:93:03:85:19:ca:17:2f:88:cf:7f:05:
5e:fc:6b:5a:f1:75:cc:df:74:ef:4f:4d:90:ff:21:
3d:98:ab:70:01:2f:a9:9d:5b:8f:40:c8:a9:4e:e1:
17:7f:d2:77:c0:9e:30:d1:d4:89:2f:f3:93:cc:72:
53:a5:9f:85:61:2b:b7:a0:73:c3:01:73:5d:6d:e5:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:B8:D1:0D:29:E4:E4:75:CE:9D:DB:E6:07:B9:32:65:57:DD:12
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3c:fe:7d:01:72:fe:59:0e:99:8c:2d:2a:3f:13:d7:1e:56:
8e:02:e2:e4:24:c4:25:d6:0e:d6:84:7f:41:e5:3a:ff:61:ce:
14:a1:c3:ae:de:e9:70:13:24:df:ad:ae:d7:28:e8:3e:80:3a:
f4:df:f0:5c:73:55:dc:6a:c2:32:a4:4c:21:dc:ac:44:26:25:
bc:d6:04:db:fb:35:bf:62:b3:51:8f:11:df:33:af:11:fb:14:
d5:72:50:58:02:8e:76:5d:76:37:d2:42:3d:93:e4:68:04:c6:
9b:c9:88:0d:ab:95:a7:ae:22:a9:3b:1a:66:5f:52:e2:73:cc:
b5:0e:28:37:3a:aa:72:10:b4:16:74:c2:f0:2e:f9:9f:68:d4:
61:c1:02:16:e7:16:0c:da:11:2f:ab:24:c5:b1:c9:0f:86:a7:
d4:ae:53:d0:4e:4e:b6:87:0c:68:17:41:c5:2a:11:e3:2d:2f:
a0:1e:84:1c:fb:16:05:a0:1d:84:04:94:87:99:03:91:78:02:
51:a9:e8:8f:f5:d3:24:67:0e:7c:4a:d0:1e:4d:1f:32:68:4c:
25:c7:ad:69:9f:16:40:e6:70:98:c8:7e:1c:e0:0f:8b:e3:e7:
21:b6:c1:ce:9d:1e:d6:c1:83:cf:66:4e:9f:74:6c:97:16:b3:
f5:76:a9:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qAlMcRxefddKwKWdM1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy
YmQ4NmEwHhcNMjUxMDE5MTAwMTIxWhcNMjUxMDIwMTAwMTIxWjAzMTEwLwYDVQQD
EygwNDg3YjhkMTBkMjllNGU0NzVjZTlkZGJlNjA3YjkzMjY1NTdkZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gS9mn/dxqfPUAwXjs09Xj+OKlTn
jxwuG8MhBRbHlXTv48ufrj6o3NbmH+9RMFuA5hLpQ5aEc0eLyVr59YszLwB69o6v
iFMQ9P0F/hlLDINn4xlzXETCT3VrBRsep+zDNAswB1UkavBo2X07SfnVus6rZMHR
qERHueIRYPR2iGUD9go1ux8T2EXZ9FZxDXHJcHXk8YR4TCGJ2w8AZLRyjURa1pNa
gSwGOPd63WJbjCqBPYVGodZukwOFGcoXL4jPfwVe/Gta8XXM33TvT02Q/yE9mKtw
AS+pnVuPQMipTuEXf9J3wJ4w0dSJL/OTzHJTpZ+FYSu3oHPDAXNdbeUExwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASHuNENKeTkdc6d2+YHuTJlV90SMB8GA1UdIwQY
MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut
ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl
LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzz+fQFy
/lkOmYwtKj8T1x5WjgLi5CTEJdYO1oR/QeU6/2HOFKHDrt7pcBMk362u1yjoPoA6
9N/wXHNV3GrCMqRMIdysRCYlvNYE2/s1v2KzUY8R3zOvEfsU1XJQWAKOdl12N9JC
PZPkaATGm8mIDauVp64iqTsaZl9S4nPMtQ4oNzqqchC0FnTC8C75n2jUYcECFucW
DNoRL6skxbHJD4an1K5T0E5OtocMaBdBxSoR4y0voB6EHPsWBaAdhASUh5kDkXgC
Uanoj/XTJGcOfErQHk0fMmhMJcetaZ8WQOZwmMh+HOAPi+PnIbbBzp0e1sGDz2ZO
n3Rslxaz9Xapqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:57 2025 by rpki-client