Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: b+86OhYkRVHWstfDFpXPZWvL9NGYSy8sg0MZyrZx86w=
Subject key identifier: 6F:E7:F3:9E:26:DC:58:DC:40:0B:E1:77:14:EB:43:49:2F:CF:62:98
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 019A50E3F61A6B62AAAB7D97E2F23CCAB7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 1639
Signing time: Tue 04 Nov 2025 22:01:48 +0000
Manifest this update: Tue 04 Nov 2025 22:01:48 +0000
Manifest next update: Wed 05 Nov 2025 22:01:48 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: eKrOwOLZjaFfxXhgr2Yrhekb+Vgv4MFkB69JYRM9DFU=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:f6:1a:6b:62:aa:ab:7d:97:e2:f2:3c:ca:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Nov 4 22:01:48 2025 GMT
Not After : Nov 5 22:01:48 2025 GMT
Subject: CN=6fe7f39e26dc58dc400be17714eb43492fcf6298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:35:ee:af:d3:bf:ec:c2:6c:d2:a7:71:5b:
e1:da:6b:9e:97:9e:88:cf:a2:85:6e:a7:7e:5b:51:
89:c1:71:72:70:3b:e5:12:53:01:20:70:4c:79:89:
3b:3c:dc:23:a7:cd:1e:72:83:43:87:2f:32:ae:0b:
bd:3d:6c:12:e1:72:85:8d:64:72:58:60:4f:9b:98:
d6:e9:18:3a:e4:28:40:98:e9:04:b5:0a:e3:fa:b7:
f1:90:f8:a3:68:64:23:f5:9c:54:f8:71:b1:76:f2:
e9:d6:00:72:7a:b8:bf:39:1d:3b:af:79:4c:c2:c7:
fd:0b:ed:65:e4:f5:1c:97:d3:05:58:67:b6:1e:e4:
2f:32:41:97:48:6e:4a:9d:35:42:c0:a4:f8:0e:55:
63:3d:75:c0:70:5d:2e:14:68:97:93:30:9b:96:80:
24:0b:0b:7f:6d:3a:ae:3e:2b:52:01:e8:4f:60:ad:
e4:3e:8c:2d:43:9d:21:5a:c2:ba:02:3f:a3:a7:2d:
b1:4d:fa:31:51:d3:13:7c:e8:aa:4d:8c:8d:d2:b2:
a1:9a:b7:b0:fe:54:8e:8f:a9:6e:37:13:b3:00:12:
17:6f:9f:9c:53:f5:fe:b5:18:07:a6:21:11:5e:67:
f9:36:21:71:02:87:cd:11:8d:ea:2f:70:d0:8f:f5:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:F3:9E:26:DC:58:DC:40:0B:E1:77:14:EB:43:49:2F:CF:62:98
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:69:5b:ec:24:b7:65:55:9d:2d:9c:8a:c6:56:44:50:b9:
c8:11:6a:5a:ad:ea:99:15:ae:ec:92:8c:2a:05:32:15:d8:07:
5a:d7:51:0f:bf:60:89:27:9e:96:95:0c:f6:49:ca:17:de:31:
45:49:bf:a2:47:fe:fe:8e:71:16:ff:53:e8:ee:03:a8:7f:13:
88:97:bc:26:6f:ce:9d:31:76:75:28:0e:ec:9c:75:93:7b:62:
92:d6:f2:bb:25:55:4c:14:af:63:3f:b6:be:97:27:de:a0:9c:
34:44:ba:7c:30:f7:7d:0f:13:05:25:0a:39:7f:84:72:be:ac:
25:ef:b3:16:e2:f4:ec:f5:bf:76:d2:cd:cb:cb:38:da:92:97:
06:dd:6e:27:24:86:cb:09:35:6c:18:eb:7b:c3:96:aa:19:e5:
dc:30:9b:b5:9d:1d:f0:19:78:4a:86:d7:fe:98:2f:f1:8e:03:
dd:b4:85:7e:c7:90:f4:ed:a6:79:14:fc:b6:39:2c:2d:98:ec:
69:7f:73:e5:39:a0:d4:f4:09:90:3e:91:11:84:d5:a4:31:df:
2a:02:84:59:16:ae:90:fc:d2:bd:5e:6c:b3:02:e5:3f:e6:5d:
39:8c:25:97:b2:30:62:b0:1b:e8:5a:16:74:aa:ca:bb:d5:62:
9c:0b:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:25 2025 by rpki-client