Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: FX8Mo/WaGKhKICgMk1NhSN+7tA71di9/ZrJ996x4g10=
Subject key identifier: 99:73:F4:BE:7F:BE:5C:0E:14:14:FB:9A:CB:6E:CF:E7:11:69:AB:F2
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 0197B6A13A5956E0431FCEE124BB26730145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 14E0
Signing time: Sat 28 Jun 2025 13:01:48 +0000
Manifest this update: Sat 28 Jun 2025 13:01:48 +0000
Manifest next update: Sun 29 Jun 2025 13:01:48 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: POVCJFpGv1vUX9Y+hcRDmjB2ZsO7yq8ozfGzx6WlDV0=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3a:59:56:e0:43:1f:ce:e1:24:bb:26:73:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Jun 28 13:01:48 2025 GMT
Not After : Jun 29 13:01:48 2025 GMT
Subject: CN=9973f4be7fbe5c0e1414fb9acb6ecfe71169abf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:27:77:ce:b5:43:67:ee:1a:88:c3:95:b6:
33:a0:f6:03:d2:4f:86:1a:1d:af:f0:3c:9b:ce:33:
1c:32:0d:8a:6c:94:27:6a:e4:ab:cb:4a:3f:ec:39:
7e:28:31:31:b1:b5:e4:85:b3:e6:b5:20:7a:50:6d:
af:0f:8f:bc:da:d2:9d:47:2a:12:cc:85:8c:27:06:
9c:98:bf:19:b9:89:85:46:58:82:39:5c:19:a6:a4:
51:a8:cf:50:4a:db:82:94:11:de:f7:95:b6:5d:74:
7e:fb:0c:30:44:29:9d:e1:1a:e7:4c:81:a8:91:6c:
bc:42:b5:90:d7:14:4c:6b:b8:f1:3f:af:9c:bb:e1:
66:90:9e:6b:2a:38:1c:cd:77:1a:ba:72:d1:10:41:
5b:76:76:72:d1:9f:e7:8d:f1:c8:1d:72:67:a9:38:
81:8c:b4:1d:74:de:4c:eb:09:8f:b9:61:60:21:46:
18:b1:66:b1:48:a0:66:9f:d1:c4:d2:25:c1:41:3c:
1d:07:cd:cf:c6:b2:0b:6e:0b:1a:05:61:26:7a:de:
3b:42:57:2b:c5:57:7f:29:55:be:0d:1d:4e:fd:cb:
8d:5f:42:cb:f0:8f:a1:43:aa:6d:ce:c0:ea:1c:d9:
55:89:8e:57:5b:43:0d:8d:e5:ed:00:d0:82:10:0f:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:73:F4:BE:7F:BE:5C:0E:14:14:FB:9A:CB:6E:CF:E7:11:69:AB:F2
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a9:e0:4d:11:38:d1:38:65:ce:23:e8:25:59:0b:fc:da:b0:
3e:cf:ea:aa:15:16:06:4c:5f:c1:6f:92:b3:e6:fd:6c:24:99:
80:8a:55:e4:96:d1:fd:6c:44:ac:d9:a8:a8:72:6a:01:aa:25:
00:50:89:08:d7:f8:3b:3b:ac:fe:52:0c:52:70:92:4f:cb:1f:
53:09:08:d2:34:ee:98:53:6f:08:86:eb:73:f4:72:cd:8d:2d:
82:38:f1:08:90:95:fc:9f:23:fd:79:3d:aa:8f:68:66:8e:ec:
4c:7e:23:bd:af:d1:d8:30:bb:53:a7:ea:e4:a5:da:0b:a0:8f:
bb:38:bd:0f:7c:43:d6:37:f7:e9:78:72:b0:43:3c:cb:e6:08:
a4:17:6f:0d:89:e3:77:51:12:5c:55:65:d1:8f:9d:94:b9:a7:
93:7d:a5:e5:5e:26:6a:af:11:ca:c7:7d:29:1d:79:0f:7c:10:
a5:07:d3:26:73:24:70:81:05:be:22:64:c1:2e:c2:f9:9e:f5:
1d:a9:f2:ad:c6:45:82:87:30:0c:65:ff:74:2e:6d:e7:99:79:
0e:40:d4:45:fd:c2:b0:0f:9f:95:bc:26:00:51:e7:1b:62:86:
78:6b:de:84:ec:03:8d:77:a1:a7:b3:27:e0:fb:af:62:21:ff:
0e:af:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:54 2025 by rpki-client