Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: /QMN818yiHIYH6hohSA2B7QAYWG8NevsaY4mYdBz/uw=
Subject key identifier: 72:4A:F6:FE:2D:FB:4A:C4:29:04:78:15:05:92:8E:2D:C3:11:C7:62
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 01984D41BEB821D4A7EE6A73F35F53DE9C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 152E
Signing time: Sun 27 Jul 2025 19:00:10 +0000
Manifest this update: Sun 27 Jul 2025 19:00:10 +0000
Manifest next update: Mon 28 Jul 2025 19:00:10 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: br2KyKh7xm+77cycP6614ELuxsXrHaAQwmuN9M7G6Ko=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:41:be:b8:21:d4:a7:ee:6a:73:f3:5f:53:de:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Jul 27 19:00:10 2025 GMT
Not After : Jul 28 19:00:10 2025 GMT
Subject: CN=724af6fe2dfb4ac42904781505928e2dc311c762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:e9:ff:3d:a7:2d:d8:5d:08:c0:31:f7:aa:
e4:6f:43:8e:35:59:00:10:8d:3d:93:f9:ef:ba:16:
0d:a8:52:9e:3e:44:c3:1a:30:a2:1a:ad:b7:c5:62:
2e:d9:98:3e:78:d7:96:01:b4:7e:96:8f:92:15:82:
be:13:34:09:b1:f0:24:32:ef:d0:a9:80:97:be:d1:
ca:a7:a8:f6:1b:69:76:05:bf:31:5f:c5:4c:77:9c:
b7:57:01:1a:bd:9e:33:c2:a0:e4:da:60:d2:1d:16:
14:ea:30:4d:2d:92:b7:bc:2a:03:e7:cf:62:a0:c5:
8e:e0:b9:99:80:b7:22:4d:b3:09:d7:48:6f:1f:71:
a1:6a:9a:c7:35:12:3f:b7:12:cf:8a:06:45:ae:37:
66:05:3d:b4:62:9f:46:3a:a0:04:5c:01:88:d0:a1:
9a:0b:39:b8:11:db:99:e9:60:8c:63:68:91:a2:51:
fc:61:23:3a:9f:b9:3a:f8:b7:86:5c:51:4a:54:57:
ea:b5:05:1a:9b:61:ab:9f:75:4e:f1:9b:7f:f2:af:
b2:19:c3:3a:b9:7c:d9:82:45:4a:44:45:de:a2:8f:
60:ed:37:eb:d7:10:1e:87:98:a1:25:b1:98:49:b9:
7e:43:3d:69:4d:79:66:5d:69:1a:da:79:38:32:d8:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:F6:FE:2D:FB:4A:C4:29:04:78:15:05:92:8E:2D:C3:11:C7:62
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:04:19:c0:49:93:b5:50:b8:12:50:b8:e6:d6:cb:9e:c6:
fd:78:be:9d:b7:ea:8b:80:ef:6a:5b:d0:95:05:db:ff:f5:9a:
88:27:2f:ed:85:25:56:23:13:87:9b:a7:fc:93:07:8a:b5:00:
42:90:ff:1d:90:8c:02:56:84:80:24:ab:54:de:cd:55:11:f4:
9a:8f:4e:79:4d:e6:a8:f5:4f:f7:20:a9:bd:40:0d:2c:9a:23:
7d:be:b1:f9:6a:3e:a0:e2:ee:21:ff:2f:5f:a0:b1:3a:19:91:
0d:b5:9e:56:02:86:66:84:1a:d3:bc:17:b0:b8:5b:f6:90:a6:
77:05:02:94:2c:b4:8d:49:4d:ba:51:8d:73:fe:5e:ba:ac:27:
d4:d0:ae:c8:9b:aa:bc:76:cf:71:b6:13:38:a8:7a:f4:fb:48:
b7:50:0b:d4:9c:6c:26:f1:6b:34:41:d3:f9:6b:1e:51:13:78:
cd:ed:b9:61:b9:5e:bb:88:14:8a:52:77:3e:4f:2a:a8:1b:b4:
c1:f1:87:4c:1b:3c:2a:d3:1b:ff:fc:ea:2b:03:34:f2:5f:9f:
46:d7:0a:0e:c1:80:30:98:c7:e3:f9:6b:8c:01:6b:58:f0:b6:
64:40:b5:cc:fe:7c:8b:36:59:98:e1:2f:3d:5e:1f:03:52:29:
cf:57:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:11:13 2025 by rpki-client