Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: mxW3ps7KFYHsEozoAL5G2mhhWoWNmmXZ6LSG7Aliq0c=
Subject key identifier: 82:7D:88:62:B7:79:7C:62:31:9A:85:74:B3:0F:66:66:C2:FB:4E:81
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 019750461B411768AD60BAEF31A01B05E472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 14AB
Signing time: Sun 08 Jun 2025 16:01:01 +0000
Manifest this update: Sun 08 Jun 2025 16:01:01 +0000
Manifest next update: Mon 09 Jun 2025 16:01:01 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: hy01KDvPkaTe2plKxat0jK0cvCjyxF+VHW/P47XXqLE=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:1b:41:17:68:ad:60:ba:ef:31:a0:1b:05:e4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Jun 8 16:01:01 2025 GMT
Not After : Jun 9 16:01:01 2025 GMT
Subject: CN=827d8862b7797c62319a8574b30f6666c2fb4e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:87:46:d5:cf:9b:d1:96:61:be:a9:29:34:
e6:d8:2d:9f:ef:16:0b:4e:6c:a7:ed:50:62:ac:b7:
42:7f:34:a8:67:35:c8:ab:7f:cc:8d:d2:9a:94:72:
f3:03:4e:40:ae:45:39:f0:35:2d:05:2f:18:c6:be:
36:c2:57:23:44:2b:a7:32:7c:f8:32:a6:ef:0f:3e:
c8:b0:0b:93:fd:07:89:ea:53:0b:cd:c1:b8:7d:87:
eb:4e:d1:f5:73:07:ae:a4:ab:fb:f7:99:23:52:89:
29:f3:8f:cb:93:4b:9e:6c:c8:be:30:ae:03:b9:08:
d0:82:e4:83:12:43:2a:86:c7:9a:e7:56:71:98:b8:
15:63:84:53:ac:12:1b:9b:aa:59:fd:ff:7d:5c:87:
57:64:33:bd:e8:cc:80:51:fe:8c:3a:fd:48:01:2d:
ed:f7:8d:f2:c0:a2:cc:95:58:27:86:ca:08:07:4f:
4e:49:a7:3b:64:18:6f:b1:df:46:fa:30:ad:20:5d:
18:74:8f:be:b5:a5:aa:b4:35:ae:6c:c9:77:51:9a:
a2:92:e7:04:ad:6d:70:cb:41:e3:28:7e:d9:f9:52:
55:1d:9a:11:f6:1c:c2:be:b6:60:d1:78:f9:1f:7b:
7f:df:40:aa:c1:c8:51:5d:dc:40:ac:70:24:4e:91:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:88:62:B7:79:7C:62:31:9A:85:74:B3:0F:66:66:C2:FB:4E:81
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:62:90:a0:89:cb:0d:87:2b:96:34:43:8c:05:05:3b:b6:
e3:62:95:c6:b6:cb:52:cb:af:e3:38:ae:f9:ec:6d:f7:a0:0d:
4a:01:1a:c3:f9:c8:94:b8:59:6f:d3:cf:4f:85:17:e0:4f:c0:
93:08:e2:a5:df:cd:25:aa:4a:1f:73:4d:51:d8:08:2d:2d:92:
ec:e9:78:de:4e:76:a2:19:16:0d:26:ad:f0:ea:dd:e3:ee:95:
a1:c9:52:b8:76:c5:be:b8:e4:61:5c:3f:96:d0:ef:4a:df:f6:
e7:65:10:f4:62:b1:b5:fe:54:a3:38:23:6e:60:14:71:50:40:
b0:9a:4b:01:74:59:e6:5f:da:b7:e4:1d:fa:4b:0d:6d:c2:d4:
e4:67:43:2d:f2:aa:7c:b6:0d:32:e1:5b:ad:bd:93:bb:ca:06:
57:65:c8:be:88:df:51:c4:34:64:37:19:70:5a:2e:b5:f2:03:
a8:f6:2d:1d:b9:95:8b:48:d5:4c:11:bc:0b:bc:8f:df:e4:13:
22:b2:85:ce:a1:63:30:a8:21:5f:52:e8:bd:31:70:ee:cc:80:
69:a2:32:35:c7:eb:c5:25:e8:39:8a:99:60:39:3a:fb:9e:f1:
2c:c0:15:d2:4d:d7:d7:c8:4b:69:36:e7:64:8a:c4:d4:b2:1b:
b7:3a:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:18 2025 by rpki-client