Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: jYKnwqIlvd1+m/Jofd+XfjkE6Wp5X0BZt2oIqBTapIQ=
Subject key identifier: 21:E0:BF:57:26:A3:B8:24:45:A6:03:E1:96:C4:5D:BA:A2:16:CC:DA
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 0197711A282C6D820608A9D467E135005012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 14BC
Signing time: Sun 15 Jun 2025 01:00:29 +0000
Manifest this update: Sun 15 Jun 2025 01:00:29 +0000
Manifest next update: Mon 16 Jun 2025 01:00:29 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: 0qqz0paoc3cvS1PZ6MCDYwv0uMSxkycmiIGbQNuGNsk=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:28:2c:6d:82:06:08:a9:d4:67:e1:35:00:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Jun 15 01:00:29 2025 GMT
Not After : Jun 16 01:00:29 2025 GMT
Subject: CN=21e0bf5726a3b82445a603e196c45dbaa216ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:a3:2c:7d:8e:81:c1:99:49:8f:4d:5f:85:
56:93:4a:21:ad:04:46:e9:4f:f4:fd:8d:b6:18:3e:
8e:1e:6d:76:25:c9:d3:d3:90:1b:7d:c2:23:0d:fb:
f4:a0:e5:21:5a:23:b4:18:72:ad:01:fb:de:ee:28:
15:41:d9:d7:26:86:26:55:56:23:1e:d4:41:78:e7:
e1:3f:04:6e:f8:2c:a7:5d:ad:7a:f7:94:2d:2a:4a:
e1:6f:17:a6:a9:f9:a0:ab:cf:ab:01:8c:e3:80:d5:
ad:1f:8a:21:71:cb:7c:0d:ec:f3:d6:de:f3:a5:1c:
d0:9e:9b:eb:9c:1b:77:61:27:c2:0d:d2:f0:5f:04:
31:6c:a2:18:88:04:53:a6:c2:f8:bd:dc:5a:6f:53:
68:9f:14:74:87:ba:a1:db:9c:87:35:88:d2:8d:50:
79:5c:e7:ab:ec:f3:49:96:c6:c6:fa:32:a2:ff:e4:
a5:27:e6:e6:42:ea:e8:09:5b:f1:1e:6b:8b:04:9e:
fa:cd:23:16:19:26:d0:33:ac:26:65:10:87:29:6c:
0f:9e:2a:5e:cb:7e:d0:b2:17:3e:68:1f:43:36:8e:
61:ba:6c:fc:9f:65:fa:0f:9c:b8:0e:8f:ec:a1:b8:
89:27:92:d1:bb:7a:bf:eb:a2:7c:97:b0:4e:ff:c6:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:BF:57:26:A3:B8:24:45:A6:03:E1:96:C4:5D:BA:A2:16:CC:DA
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:26:47:47:5c:af:bf:01:58:32:7a:98:7c:67:d9:a8:3d:5f:
63:ff:13:5d:67:6e:d4:b9:e9:de:16:bb:60:d8:16:44:51:3c:
fc:ae:f6:4a:3f:73:ad:f9:17:ec:14:26:69:1e:43:b3:6c:a8:
60:2e:47:74:73:b7:b6:54:23:68:e6:81:6e:0c:80:85:60:f8:
93:ec:b7:64:a7:2e:c2:6d:49:53:c2:df:31:ce:90:55:f6:43:
58:86:bc:b1:8c:11:02:d9:f6:75:64:b5:12:ed:42:81:52:ae:
e8:9f:fe:d3:ee:8f:e4:eb:53:ee:50:69:55:45:66:39:4a:f6:
de:4f:b5:3f:e5:c1:12:82:0c:2b:b3:b1:26:c9:52:1d:6f:d4:
90:4e:98:fa:dd:d9:bc:29:57:7c:f6:89:af:e0:10:40:d6:51:
f9:72:c8:e5:7b:70:af:a0:59:59:01:33:44:35:43:9b:d3:9d:
65:23:5f:45:a1:0f:84:f9:3f:ee:d7:e1:ee:fd:01:d9:54:ec:
e2:21:69:44:96:92:9a:e8:eb:78:0a:ef:54:46:6c:0f:b4:b6:
36:bc:45:77:9d:ea:3b:ff:ed:24:54:1a:a9:4e:39:7e:e9:09:
e9:b9:ca:fe:ea:d6:cf:8c:24:a0:5f:3a:63:ca:dc:a0:04:bc:
f6:74:68:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGigsbYIGCKnUZ+E1AFASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy
YmQ4NmEwHhcNMjUwNjE1MDEwMDI5WhcNMjUwNjE2MDEwMDI5WjAzMTEwLwYDVQQD
EygyMWUwYmY1NzI2YTNiODI0NDVhNjAzZTE5NmM0NWRiYWEyMTZjY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/ejLH2OgcGZSY9NX4VWk0ohrQRG
6U/0/Y22GD6OHm12JcnT05AbfcIjDfv0oOUhWiO0GHKtAfve7igVQdnXJoYmVVYj
HtRBeOfhPwRu+CynXa1695QtKkrhbxemqfmgq8+rAYzjgNWtH4ohcct8Dezz1t7z
pRzQnpvrnBt3YSfCDdLwXwQxbKIYiARTpsL4vdxab1NonxR0h7qh25yHNYjSjVB5
XOer7PNJlsbG+jKi/+SlJ+bmQuroCVvxHmuLBJ76zSMWGSbQM6wmZRCHKWwPnipe
y37Qshc+aB9DNo5humz8n2X6D5y4Do/sobiJJ5LRu3q/66J8l7BO/8bx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHgv1cmo7gkRaYD4ZbEXbqiFszaMB8GA1UdIwQY
MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut
ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl
LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCZHR1yv
vwFYMnqYfGfZqD1fY/8TXWdu1Lnp3ha7YNgWRFE8/K72Sj9zrfkX7BQmaR5Ds2yo
YC5HdHO3tlQjaOaBbgyAhWD4k+y3ZKcuwm1JU8LfMc6QVfZDWIa8sYwRAtn2dWS1
Eu1CgVKu6J/+0+6P5OtT7lBpVUVmOUr23k+1P+XBEoIMK7OxJslSHW/UkE6Y+t3Z
vClXfPaJr+AQQNZR+XLI5Xtwr6BZWQEzRDVDm9OdZSNfRaEPhPk/7tfh7v0B2VTs
4iFpRJaSmujreArvVEZsD7S2NrxFd53qO//tJFQaqU45fukJ6bnK/urWz4wkoF86
Y8rcoAS89nRo4w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:57 2025 by rpki-client