Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: PY7Fl9BCvevxs3IRsyMenBTigNwysZDyQzPi49kCsQA=
Subject key identifier: D6:09:7C:3D:58:23:1D:F1:A4:1A:DC:C6:5B:47:D8:AE:7B:C4:BD:C5
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 01988356A66C7047C35FD38835B4CB94002D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 154A
Signing time: Thu 07 Aug 2025 07:02:30 +0000
Manifest this update: Thu 07 Aug 2025 07:02:30 +0000
Manifest next update: Fri 08 Aug 2025 07:02:30 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: jyA2UGZ1yEtSIB+BGEIzmoTBAp3yzNAm0pYBDV2A9Cc=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:a6:6c:70:47:c3:5f:d3:88:35:b4:cb:94:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Aug 7 07:02:30 2025 GMT
Not After : Aug 8 07:02:30 2025 GMT
Subject: CN=d6097c3d58231df1a41adcc65b47d8ae7bc4bdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:af:5f:6c:25:f0:a7:53:94:0a:03:3e:ef:
a7:52:22:5d:16:bd:d9:a7:aa:42:52:1d:7f:d5:57:
7c:04:b8:4a:e7:55:54:86:f3:12:cf:ff:e3:40:08:
6d:84:d1:05:35:95:b9:4e:45:5b:ce:29:78:19:e3:
61:3e:24:a0:fa:26:96:a4:df:3e:a1:3f:bc:53:74:
e7:74:d8:dc:e4:6f:49:12:e5:7f:19:f9:68:4f:30:
61:77:a4:8c:db:ed:bf:38:93:87:f2:87:b3:c3:83:
37:31:e4:6d:09:2d:12:0b:38:47:f5:49:ab:74:6a:
a6:ec:85:e9:52:45:dc:db:09:90:2b:cb:7e:b3:b9:
20:30:73:f9:45:98:1e:cd:20:75:84:55:a2:4e:95:
0f:74:26:46:62:86:05:33:d2:a7:ab:60:5e:78:e1:
47:f0:09:7a:3a:e8:8e:ce:72:22:e5:e1:91:d6:6b:
97:e4:4c:2d:03:04:71:ff:b9:ed:65:3a:d1:11:cb:
1b:13:6f:ef:9f:e9:73:bc:24:b6:f8:1a:ce:d7:7f:
7b:94:0c:6b:08:47:49:1f:06:e4:96:34:21:52:bb:
2e:3e:ae:f0:cf:c0:3d:d6:39:02:9c:63:11:e5:10:
b3:91:ab:08:c1:7c:4b:c0:28:eb:fb:a6:c0:8b:52:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:7C:3D:58:23:1D:F1:A4:1A:DC:C6:5B:47:D8:AE:7B:C4:BD:C5
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:d8:cf:c2:8c:3a:dc:79:8d:39:6b:3a:ef:31:32:51:bd:
db:52:9b:1c:69:e5:11:9b:37:f3:c4:78:31:18:87:27:1f:26:
74:7b:57:00:71:3e:14:c3:28:8e:ec:f8:50:e9:99:8a:65:93:
dd:03:fd:0a:27:8e:2e:f2:29:aa:c4:7c:6d:75:6b:d7:66:0e:
cd:6b:9b:58:39:8d:ce:a0:24:e8:10:35:e6:37:ec:f0:fe:59:
7b:e2:08:e3:13:81:21:b3:eb:bb:92:5b:90:0d:90:d3:f0:b7:
8a:40:bc:84:e0:bc:d4:20:74:26:32:f3:b6:b8:03:fe:16:86:
62:18:e4:5f:e3:cd:4e:81:ae:74:88:2c:30:fc:0c:d3:c3:1d:
ec:93:b4:1b:95:06:d1:a6:e8:44:63:ab:bb:92:06:c7:56:da:
6e:18:5c:49:0d:55:4a:d6:95:fa:49:d1:ae:e6:a3:37:e3:b6:
1b:a4:12:41:cf:83:6b:84:86:fc:20:c2:f7:ef:16:c7:fc:9a:
59:c9:3c:ed:71:3e:97:14:f8:0e:69:66:0a:9d:b7:7e:2e:2f:
82:17:30:62:fa:56:32:0a:64:4f:a7:ee:ca:88:ca:9f:10:41:
a7:d4:d1:0d:4b:54:ef:ad:94:c7:7d:bc:48:40:52:80:cc:eb:
c1:f4:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:53 2025 by rpki-client