Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: E0n3k16J97S4ZRNEntRHrgoyHlKuI/4oxWN/25NSjcA=
Subject key identifier: 55:A4:F6:71:3E:DE:88:84:C2:97:A8:9E:05:0B:CE:1D:BD:82:6F:0E
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 0199FC58DA8342A7A6AABF0BE1A85A57127D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: +/zO6qShl0AJJwGJ+kJP2nh3qQ9VdMjfFUd7YJ/5D9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:da:83:42:a7:a6:aa:bf:0b:e1:a8:5a:57:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=55a4f6713ede8884c297a89e050bce1dbd826f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:3c:b2:fe:02:d3:aa:85:ec:e0:ff:8d:0d:
4c:f7:f6:9f:5d:07:09:0e:90:a3:f3:78:f4:8d:72:
66:68:68:f8:f7:6e:4e:a5:51:cd:d8:51:84:b7:73:
ea:2e:81:53:07:fe:6a:f7:31:ae:cd:55:b0:55:46:
f8:0a:46:e5:3a:a1:36:b0:dc:b9:ba:93:59:d0:f0:
e9:e9:a6:2f:1b:db:d4:5e:fa:d5:8b:1d:8a:6b:cc:
6d:f3:0a:53:c2:cf:12:01:ef:21:65:96:f1:24:d6:
64:66:af:f5:47:5e:6a:53:0e:5c:b6:af:f2:da:41:
14:09:07:3e:17:ce:ce:db:2e:44:bd:bf:5c:d3:75:
33:70:72:7e:ea:96:15:5f:a0:df:0c:c2:97:b0:79:
78:e1:2e:ac:87:59:f3:44:6e:20:f1:87:61:79:f0:
d4:c0:98:41:32:88:a1:08:d8:fd:3d:24:4a:a2:07:
b4:41:30:be:0a:cc:2c:28:35:83:71:6e:b5:80:39:
e0:b2:5d:92:bc:c2:a4:80:1b:f4:7a:88:f4:4f:1d:
3b:32:fd:eb:05:ad:03:76:d1:bb:bb:fd:dd:0c:1b:
b8:2c:a1:dc:17:10:4f:26:dd:a3:28:df:36:9e:d2:
e8:ed:d1:94:63:93:22:12:8f:a1:7c:68:0e:94:5a:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:F6:71:3E:DE:88:84:C2:97:A8:9E:05:0B:CE:1D:BD:82:6F:0E
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:7c:a0:7c:ee:91:9a:bb:c7:f7:a4:85:89:e6:1f:29:45:
24:bc:ee:17:33:24:d2:b7:8c:4d:c3:90:50:b9:69:b5:6f:9f:
68:6c:f2:81:0c:f4:5e:2f:94:bc:de:b4:3e:59:31:13:71:14:
00:d7:4b:0c:99:f3:79:9d:da:a8:0b:3d:06:4b:f2:39:c8:7a:
bf:42:67:72:04:fe:2e:c2:8a:52:bf:1f:05:aa:3d:64:c1:f1:
17:cb:b4:82:67:32:ce:1a:ed:9a:c1:83:62:ae:fd:b8:d4:31:
06:fa:de:09:aa:1a:cb:cb:64:6a:9b:10:4b:c7:d1:62:f8:12:
ec:6f:4a:f0:91:a8:78:ea:5c:87:9f:1f:d8:5e:c1:ad:e1:78:
ba:fb:f4:63:7d:ff:e5:94:f3:b4:0f:c1:9c:93:63:fb:dc:8d:
0b:f1:86:8a:44:b5:b7:72:3a:d9:bd:b2:55:36:3b:40:ac:6e:
55:13:4e:fc:ea:8e:ad:1a:08:87:be:91:00:25:4e:e5:2e:3a:
b5:1d:b5:5f:75:a2:be:bc:fd:83:a6:c0:af:83:e6:bf:4e:32:
3d:3c:0c:43:5a:d2:55:18:b0:ef:97:d3:e6:21:a5:4c:ec:93:
fb:b3:78:43:23:9a:91:51:53:46:67:e0:78:86:1a:45:b3:fc:
11:d5:f1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:38 2025 by rpki-client