Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: AzS9NDhh6Drv1tXJ/gROrDz/7EaP6QuPAbsCpRbiq80=
Subject key identifier: F2:34:C9:49:8A:78:2B:DB:74:63:8E:9C:E2:34:6B:ED:15:BD:BC:D2
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 0198D472EE0016A405C0473E731E2731E8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 1574
Signing time: Sat 23 Aug 2025 01:02:38 +0000
Manifest this update: Sat 23 Aug 2025 01:02:38 +0000
Manifest next update: Sun 24 Aug 2025 01:02:38 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: cw8CjdH7xdCDacv7Z7BpptCupXau5bM6mh2d17DX+FY=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ee:00:16:a4:05:c0:47:3e:73:1e:27:31:e8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Aug 23 01:02:38 2025 GMT
Not After : Aug 24 01:02:38 2025 GMT
Subject: CN=f234c9498a782bdb74638e9ce2346bed15bdbcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:44:b6:5d:69:ba:cf:c7:48:27:68:f8:da:
a3:23:bc:26:54:bb:d0:a9:b3:bf:b7:22:04:81:5c:
be:7e:92:b9:24:71:19:1c:2d:3e:87:99:66:8a:0c:
e5:2a:94:04:ff:54:4a:6c:20:53:9a:88:5c:ea:9c:
ec:4b:a1:a4:94:46:96:9a:11:39:3b:38:95:79:93:
e9:3e:ae:d3:c1:e3:ad:6b:d7:c7:a1:40:d5:6d:f4:
44:56:cd:e4:e2:f6:86:00:d2:a7:7d:6a:65:4d:89:
8d:d9:19:1e:39:19:13:2c:67:e2:a3:19:65:57:df:
2a:b7:de:73:63:a1:ad:08:9c:4c:f6:12:3a:57:07:
9b:98:6a:d4:01:11:bf:68:f8:0a:2b:e6:61:e5:9e:
f3:e2:fb:9e:13:63:c8:b5:99:6b:98:4e:ae:f6:99:
5b:20:ea:14:7b:77:b7:c3:1d:9f:38:da:09:e4:d5:
5a:27:e1:f0:5a:3b:8c:8d:5f:29:dd:6c:ea:41:f9:
ef:78:ed:3a:16:11:25:ce:a6:c7:e7:2f:b5:44:d3:
eb:a5:d0:3c:7a:3d:60:a1:0f:a9:1c:a6:c1:b5:09:
0e:e8:c1:f7:42:ac:8e:21:4b:7a:62:92:5c:c9:85:
5c:30:c9:2a:2d:51:8d:75:30:97:f7:b7:ec:d9:1a:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:C9:49:8A:78:2B:DB:74:63:8E:9C:E2:34:6B:ED:15:BD:BC:D2
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:7b:fe:aa:26:68:7c:a5:1e:14:dd:69:97:b9:ac:ed:ac:
10:2c:7a:13:8a:48:e7:f4:cb:c3:c4:05:bb:29:87:1d:20:f7:
98:32:b6:7e:e1:84:e0:63:90:d1:93:1b:eb:27:14:ab:d2:b9:
25:eb:2f:32:b9:e1:2d:f1:2d:e1:a0:61:d3:9b:40:6c:67:30:
6b:81:63:32:d8:8c:a8:0b:a2:31:6f:15:c8:68:3f:2e:d5:c7:
17:30:c8:0b:02:0e:5f:75:65:b6:93:9f:26:06:0e:e9:57:67:
11:74:9b:70:37:90:eb:46:c7:c8:f5:56:dd:79:f8:2d:62:4b:
0d:74:38:40:1f:c4:62:c2:d8:fe:d1:e4:59:34:fb:a2:18:3b:
f4:47:bd:c1:ea:e2:97:59:9d:a3:16:e4:d2:66:f6:cf:f4:cb:
49:a4:7b:a7:d1:62:cb:04:44:5b:e7:c8:06:60:a1:7c:73:ec:
92:b8:56:76:7c:f1:89:b1:30:3f:5c:e6:24:45:c9:9d:8d:06:
2a:f3:6f:a6:a3:30:97:bc:92:52:86:53:92:d2:1a:bd:50:6a:
cb:e1:07:72:70:71:2c:f3:fd:75:54:c8:91:ee:e3:d4:cc:1c:
f4:50:b0:b4:79:d8:a3:4f:32:2e:39:d1:76:b7:ac:55:27:56:
7c:9b:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:06 2025 by rpki-client