Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: 1uGMNezasy+T2pD+eAGum8XvMai6bqQvm6fcFsfzbXQ=
Subject key identifier: D7:33:BF:38:56:13:0B:AF:DE:A3:4C:49:F2:A9:6E:C6:0D:74:AC:18
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 019A71B795C70019F392B0C4DDDE78B8164A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 164A
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: CcpyAfY9du/fdUH8q62b8utE3N15bbubs0e3vKkfiQ0=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:c7:00:19:f3:92:b0:c4:dd:de:78:b8:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=d733bf3856130bafdea34c49f2a96ec60d74ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:19:0e:7a:84:ad:55:f5:02:56:17:79:0d:
62:2d:57:49:a1:49:67:e9:d8:53:72:3d:65:d5:10:
5a:64:d6:a1:38:2f:9d:be:ac:3f:63:ad:99:83:93:
fd:56:f6:7c:52:c6:4a:74:1f:a0:c0:74:ec:98:b5:
8c:a2:4f:47:5f:1d:eb:71:ec:60:9b:a0:3c:ae:1b:
c7:5a:b6:eb:bb:51:20:a1:c7:e7:c5:de:82:18:e9:
df:bd:b8:d9:18:20:f0:48:10:8b:96:9c:33:ed:7f:
1a:db:9f:ad:2c:e8:d5:d1:f1:d2:b7:90:e1:e3:b4:
8e:37:0c:50:9d:27:39:bf:1d:d9:80:af:21:bf:66:
f3:02:ac:55:75:6f:7f:c4:84:8d:b7:f8:3f:6e:05:
c4:be:ba:67:1f:48:ab:8c:50:1f:70:ef:84:5f:6b:
0f:5e:12:8e:fe:a1:ae:49:c4:21:76:88:bb:05:d5:
70:a2:af:49:27:02:74:8f:c5:e0:5d:2d:88:cb:15:
f7:54:f3:8d:ca:f9:a9:ea:e3:0a:e0:5f:01:d9:cd:
42:ea:9f:c7:ac:6b:cc:fd:0b:b7:4a:74:bf:bd:0c:
40:b0:62:ff:5d:57:00:bb:3b:76:c5:66:ba:0b:fd:
c1:fc:4b:50:6d:e4:2b:c2:b5:11:1d:aa:28:43:98:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:BF:38:56:13:0B:AF:DE:A3:4C:49:F2:A9:6E:C6:0D:74:AC:18
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b2:36:cd:5d:d3:cf:a8:13:16:b3:d1:05:a0:3c:64:13:38:
30:9f:24:a3:28:f7:e8:58:11:99:e2:e9:52:83:5f:7a:9c:d0:
88:f5:78:68:48:86:ca:7f:03:28:c1:a3:34:e1:d4:33:a6:6f:
fe:12:ed:1d:25:ec:e6:de:9f:5b:2b:64:10:cf:ee:42:5d:e4:
26:a6:ca:48:6f:aa:89:60:54:d8:28:0f:f1:0e:11:26:9f:e5:
87:79:a5:fb:bd:9f:fe:96:1e:0b:9b:19:97:60:ff:b7:4b:1d:
b7:38:83:55:84:52:fa:ea:bb:d7:34:e3:e5:8d:68:02:da:c0:
f8:0e:19:91:b7:9f:99:a2:8f:e9:2a:9a:9f:0a:55:f3:06:ea:
5b:72:1a:05:18:79:84:64:07:f6:f3:13:27:65:e9:ae:2f:d5:
dd:2f:f1:ba:56:ea:48:9f:88:92:0e:53:fc:9e:e0:d0:50:e2:
61:7a:52:06:e5:77:59:7e:09:60:85:ff:34:17:e1:3c:d2:f5:
2d:97:fb:a9:9c:29:86:89:5e:ae:bc:53:d5:4f:ab:1f:6d:a7:
72:ca:62:4b:16:64:31:17:68:3c:a3:57:31:b9:1b:c7:f6:10:
fe:eb:3f:62:31:61:31:de:e9:e4:d3:ec:eb:9e:e2:fe:e3:93:
a2:c6:f0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5XHABnzkrDE3d54uBZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy
YmQ4NmEwHhcNMjUxMTExMDcwMDQ4WhcNMjUxMTEyMDcwMDQ4WjAzMTEwLwYDVQQD
EyhkNzMzYmYzODU2MTMwYmFmZGVhMzRjNDlmMmE5NmVjNjBkNzRhYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PYZDnqErVX1AlYXeQ1iLVdJoUln
6dhTcj1l1RBaZNahOC+dvqw/Y62Zg5P9VvZ8UsZKdB+gwHTsmLWMok9HXx3rcexg
m6A8rhvHWrbru1Egocfnxd6CGOnfvbjZGCDwSBCLlpwz7X8a25+tLOjV0fHSt5Dh
47SONwxQnSc5vx3ZgK8hv2bzAqxVdW9/xISNt/g/bgXEvrpnH0irjFAfcO+EX2sP
XhKO/qGuScQhdoi7BdVwoq9JJwJ0j8XgXS2IyxX3VPONyvmp6uMK4F8B2c1C6p/H
rGvM/Qu3SnS/vQxAsGL/XVcAuzt2xWa6C/3B/EtQbeQrwrURHaooQ5g65wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNczvzhWEwuv3qNMSfKpbsYNdKwYMB8GA1UdIwQY
MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut
ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl
LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobI2zV3T
z6gTFrPRBaA8ZBM4MJ8koyj36FgRmeLpUoNfepzQiPV4aEiGyn8DKMGjNOHUM6Zv
/hLtHSXs5t6fWytkEM/uQl3kJqbKSG+qiWBU2CgP8Q4RJp/lh3ml+72f/pYeC5sZ
l2D/t0sdtziDVYRS+uq71zTj5Y1oAtrA+A4ZkbefmaKP6SqanwpV8wbqW3IaBRh5
hGQH9vMTJ2Xpri/V3S/xulbqSJ+Ikg5T/J7g0FDiYXpSBuV3WX4JYIX/NBfhPNL1
LZf7qZwpholerrxT1U+rH22ncspiSxZkMRdoPKNXMbkbx/YQ/us/YjFhMd7p5NPs
657i/uOTosbwEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client