Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: 7dggoZaS5CQiq778xQhfTuRqn6KrkLhFFMQQ7BJvo+o=
Subject key identifier: F0:5A:23:DE:77:A5:D8:F9:98:47:90:B9:6A:63:6C:22:46:72:C6:76
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 0196515B63BBEE2CDA0A18878A1684B5FD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 1427
Signing time: Sun 20 Apr 2025 04:01:05 +0000
Manifest this update: Sun 20 Apr 2025 04:01:05 +0000
Manifest next update: Mon 21 Apr 2025 04:01:05 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: fKaCyLEJo9rJViqAc7WbbY4AXTfw1SzrO2TFbr4zZTM=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:63:bb:ee:2c:da:0a:18:87:8a:16:84:b5:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Apr 20 04:01:05 2025 GMT
Not After : Apr 21 04:01:05 2025 GMT
Subject: CN=f05a23de77a5d8f9984790b96a636c224672c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:7e:dc:45:26:6e:24:0e:25:bd:06:80:93:
93:92:b6:73:44:e1:c1:9b:46:12:f8:a5:de:8f:0f:
f8:62:e0:e5:2a:96:25:ec:53:57:c4:4a:f1:38:d4:
70:58:7a:58:a5:22:70:4d:1c:d6:c7:75:54:9f:6f:
77:55:6d:f2:bc:e5:c8:28:f6:7a:84:9b:4b:88:00:
08:d7:fb:01:b2:10:92:01:19:b5:d8:09:e6:59:28:
b0:05:99:da:cc:3c:b3:b8:3d:83:4a:00:dd:56:35:
b5:98:c9:0b:ca:f9:fb:d3:71:8c:1a:b1:06:4a:09:
bf:16:8f:da:a1:7d:e0:27:21:ca:6a:58:79:d0:55:
76:c9:3d:4f:cc:25:73:56:10:10:4d:9f:a7:6b:ca:
48:3f:7d:46:e8:3c:98:66:0b:00:2e:a8:cf:a5:eb:
fe:02:85:f3:9a:10:42:3b:da:e3:3a:04:83:60:ab:
bd:d3:39:e8:ed:25:2b:67:4b:cf:b4:87:96:cb:51:
48:ed:1d:36:15:b1:86:34:09:76:77:a1:57:8c:8e:
bc:ce:20:c7:58:5c:68:59:41:54:45:c9:b5:25:db:
f1:8b:e5:fa:38:d3:a0:d1:bd:2b:f2:1b:52:9e:1a:
08:67:23:91:52:51:1a:aa:86:f2:ba:ab:40:83:5b:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:23:DE:77:A5:D8:F9:98:47:90:B9:6A:63:6C:22:46:72:C6:76
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:1e:c0:a3:d2:b6:9d:e5:84:d8:cc:8a:05:8c:36:d2:2f:
d1:4f:cc:88:c3:fe:05:19:94:dc:42:c9:fb:ad:b4:ba:56:a4:
de:9a:e0:ea:44:9f:3d:ab:8b:58:f0:1c:64:ae:36:a6:de:40:
b5:00:7e:93:e1:a8:de:17:f7:1a:bd:a6:35:5c:f7:f4:17:58:
a3:40:ee:67:61:71:fe:b0:2b:11:a8:7b:34:97:d4:75:da:ca:
fa:60:1b:42:d4:d2:71:cb:19:d7:29:77:a1:70:8f:de:f7:d4:
e8:76:16:9e:70:46:53:77:f0:43:dc:bf:ea:53:bb:c2:64:02:
07:c0:58:d8:74:37:3d:71:c4:ad:e5:21:11:f7:08:27:10:19:
0f:3e:ec:b6:e3:c0:bb:2d:32:3d:34:4e:47:79:88:2f:76:03:
eb:33:99:68:7b:48:50:1f:ea:f6:e2:1b:f1:8f:df:a5:d4:d3:
d7:1d:6e:87:f3:64:4a:b3:cf:c8:13:9c:73:17:2c:16:d0:44:
f6:77:e0:44:01:a2:54:04:db:db:cd:e7:52:e5:cb:07:0d:bc:
d9:2c:a3:6c:62:0b:e6:3d:2d:0f:98:b1:31:cb:92:72:0e:8c:
c0:29:56:75:6b:67:f9:6a:b9:5f:65:e4:54:dd:a9:27:c6:92:
2a:ea:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:35 2025 by rpki-client