Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: N8hXnr6k4SCsrtOmlXAAvhmG4EgljvhqSfaLgmjg958=
Subject key identifier: 53:C2:42:D0:2D:21:B7:EE:16:F7:75:36:E7:1D:E5:E4:F7:61:B0:9A
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 0198D4E0256C115C64993149FAEEAE469874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: 5VdTHGxJ0EqGlwsNFxy0K2jxlO/MvIHgWWKB2Ikbf3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:25:6c:11:5c:64:99:31:49:fa:ee:ae:46:98:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=53c242d02d21b7ee16f77536e71de5e4f761b09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:d2:42:83:ab:ec:9c:be:4b:ce:5c:6b:76:
93:c9:a0:4c:34:ec:cc:4f:cd:ed:dc:6f:a3:4b:07:
3f:d8:0f:c2:cc:65:07:d4:4f:a4:89:1c:7c:fa:2c:
9b:4f:12:2e:43:8d:6a:37:7a:06:46:ec:35:6e:06:
c3:ab:31:67:eb:9d:5e:1a:f3:34:68:4f:7c:bd:68:
ca:89:93:67:a3:3e:99:67:36:cf:f9:1d:1a:16:30:
44:b9:e6:33:d1:89:a7:f9:a4:fb:63:a0:91:0f:ef:
ff:d7:37:27:77:26:c1:19:a5:8b:ca:2f:78:3e:03:
e4:49:4b:4d:c3:fc:92:43:c0:da:7a:d7:ff:e4:79:
4e:36:59:47:3e:e3:68:6d:06:94:46:75:ce:16:b9:
6a:31:c4:08:b0:72:ed:6a:d0:4f:eb:a5:0e:ad:be:
c6:c0:ed:2a:cd:de:0a:6f:09:af:74:3d:4f:32:a8:
09:d4:02:82:bb:05:14:0d:82:bb:cf:30:82:50:9a:
1c:e9:b5:43:42:0f:db:65:ba:6e:59:f5:34:20:ef:
bf:c2:1b:17:c2:52:ed:67:21:fb:60:b0:d0:41:58:
04:a2:59:3b:ac:f9:84:45:ca:25:79:51:04:fb:6d:
d7:5c:fd:57:bf:5f:fd:68:12:f5:e8:c9:2c:f7:c7:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:42:D0:2D:21:B7:EE:16:F7:75:36:E7:1D:E5:E4:F7:61:B0:9A
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:60:d0:56:15:c7:c5:f3:4e:b1:28:be:2c:29:d2:f2:78:2b:
d1:36:13:85:4a:87:c1:e4:a2:59:9c:13:39:6b:67:bc:5a:de:
3e:03:e9:6f:86:57:5a:df:08:34:1e:5a:20:51:d7:7c:70:0d:
0d:7d:c3:1c:73:1c:d3:c8:fa:cd:7d:c3:8e:d6:57:7e:cd:63:
a9:08:27:d1:ce:87:12:69:cd:cd:b5:44:01:3a:b3:4a:ae:1d:
d5:02:16:05:d3:db:30:b2:3a:7e:9a:d8:4a:b8:d0:d5:38:2f:
80:b0:89:94:45:eb:81:40:a2:aa:c6:1a:95:20:0e:76:e4:59:
f5:7a:96:3b:56:fe:eb:14:c1:16:80:03:84:11:64:dc:df:61:
d9:8f:49:55:13:fe:10:2e:bd:6e:60:45:c7:ba:cb:d9:26:9d:
ce:42:30:4a:50:14:3b:8b:d9:6f:0b:a7:7a:f2:86:70:e3:7d:
68:b8:11:bc:0f:ab:e7:e9:bc:e1:f2:e4:7e:97:00:b6:e5:af:
2e:d2:bf:3c:49:a5:7d:a6:3d:96:98:44:05:11:93:ea:9e:b5:
17:69:23:f1:19:98:60:b9:61:80:49:7c:19:8a:77:56:2b:7e:
3a:87:44:dc:76:0e:41:a2:c4:3c:4b:85:bf:52:00:4c:98:2a:
62:18:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:30 2025 by rpki-client