Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: poLUoMfFb7pwBn6n41JvapS1bSKrZk+xmDD9kn9HrFU=
Subject key identifier: AC:FC:CB:87:65:AC:CA:E9:86:F5:2A:EF:1B:4A:63:89:44:B2:40:D8
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 0197B70F0F2F7D4C644B78666A457D3632B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: GIehqJHCKVAXiLEkcHiBxDxrnkdRvICj/CmChMaFKGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0f:2f:7d:4c:64:4b:78:66:6a:45:7d:36:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=acfccb8765accae986f52aef1b4a638944b240d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:5f:b7:cd:a1:95:4b:fd:49:5d:bf:54:61:
75:90:5b:0e:ac:ea:8b:d3:7d:20:62:e9:5d:be:96:
f6:6d:1a:5e:56:96:82:c6:7c:a0:4a:38:df:52:01:
47:af:36:14:68:82:38:c4:bc:65:2a:a9:8d:77:09:
e8:a6:84:3b:db:b9:28:63:e6:95:16:1e:91:22:a4:
40:32:b6:ef:35:55:cd:f1:85:ac:1e:b3:61:c2:58:
46:d7:b1:98:87:94:45:40:91:6d:ff:99:a5:81:7c:
ba:5b:a5:33:47:06:a9:75:e9:f8:36:f1:4a:00:ca:
64:17:c8:5e:3e:4b:c7:2c:b5:ea:7d:6e:ad:e4:53:
8a:94:84:c1:d0:47:88:9c:81:27:79:ae:5e:75:4a:
90:18:63:60:d1:3d:b8:23:6a:f5:79:3d:a8:7a:04:
5d:68:62:f2:69:21:95:e2:c4:6a:40:cb:35:bb:33:
fa:5b:ce:52:27:3d:ec:0d:67:7f:0a:de:19:b8:9a:
51:31:77:13:57:92:6f:31:b8:4f:ee:12:a4:76:d7:
a4:3f:33:ab:ba:93:52:a5:16:8d:3a:a8:97:ae:87:
9a:8b:83:4c:8a:98:6a:2c:2e:e9:59:07:64:13:df:
bc:7b:05:97:55:9b:94:3a:02:a0:7c:db:b9:d3:2f:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:CB:87:65:AC:CA:E9:86:F5:2A:EF:1B:4A:63:89:44:B2:40:D8
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:59:6f:dc:3c:9a:24:f3:13:b8:40:59:f7:d8:22:fd:23:1f:
1f:fc:2a:a4:27:93:a2:4e:50:06:70:a0:3e:10:01:cd:36:f4:
6a:9d:71:51:e4:5e:e9:45:49:76:f2:22:31:0a:e4:23:70:e2:
f7:b5:b6:14:71:2d:9a:08:45:5c:24:78:5d:24:19:78:fd:cf:
03:79:6d:26:f6:e1:a0:a0:8f:ba:63:14:64:93:b8:30:3b:79:
48:b7:9c:3a:a4:65:7a:bb:c5:0e:dc:dd:fe:17:d3:e2:24:43:
25:97:13:ea:0e:e3:49:40:06:c5:55:0b:ac:a0:a7:2d:44:b2:
33:a3:74:c8:0e:0b:9a:fe:b3:d4:3f:71:9a:a5:ef:ab:18:52:
f2:9a:77:b1:b4:75:3f:44:af:e3:21:fb:76:92:12:6c:73:69:
16:59:c8:81:dd:e6:3c:5f:88:8f:b7:34:c7:5d:10:a0:f8:c9:
f2:ef:77:da:b0:da:19:6b:f1:59:88:7f:b9:54:9a:28:eb:28:
80:11:5d:fe:c6:9c:b4:f3:32:46:e0:d9:ce:60:e9:61:0f:a1:
3e:17:be:d4:1f:a7:93:ce:78:b6:1a:80:2d:fd:67:08:fa:fa:
2a:d3:3f:35:52:a6:2a:1a:b8:98:30:b8:0f:c2:15:79:42:28:
e9:97:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:11 2025 by rpki-client