Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: +gItcLgYp/jQo65IVupXdWK8mCZWUazoTOUiFGkhXDU=
Subject key identifier: A7:08:64:7C:F4:76:D1:A4:FF:FB:A8:06:39:89:1E:8F:F8:10:FF:64
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 019845F688416C2597A0A9580C8EBFD3CA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 09:00:41 +0000
Manifest this update: Sat 26 Jul 2025 09:00:41 +0000
Manifest next update: Sun 27 Jul 2025 09:00:41 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: exAu6Ss5IW1ZDiPd7XRAckI1MtWopyuFgh6qE0a9QTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:88:41:6c:25:97:a0:a9:58:0c:8e:bf:d3:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Jul 26 09:00:41 2025 GMT
Not After : Jul 27 09:00:41 2025 GMT
Subject: CN=a708647cf476d1a4fffba80639891e8ff810ff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:56:b9:00:53:01:cb:1c:d5:45:19:4d:d2:
d4:59:76:d5:ea:dd:f7:49:a0:95:4e:86:14:59:49:
c1:b2:d0:ea:23:f7:39:36:6c:2b:2e:68:96:1c:40:
68:90:32:ba:21:31:e6:68:64:d9:92:9e:25:76:40:
ba:8e:d6:21:ac:79:d4:08:9a:ac:a7:78:4e:fe:a1:
11:a1:24:0d:5a:bb:a2:1d:1f:19:be:d3:b8:2e:24:
92:28:99:da:ba:47:07:c1:08:b4:00:85:09:72:fb:
85:10:16:34:d1:9c:6c:6e:88:90:d8:d9:2f:f1:a9:
c3:53:31:62:8c:36:00:ee:da:f9:59:e6:40:85:e8:
76:97:2f:0f:12:bf:09:ae:bb:f0:67:fe:9f:ca:b0:
09:90:d5:65:6f:e0:ec:ef:d7:9b:97:f3:c1:0f:0d:
b2:a2:6f:63:a2:8b:b2:af:67:85:d4:54:31:bc:56:
ae:f3:ba:b9:45:57:08:a9:02:e7:99:00:75:f6:da:
eb:c0:b2:fe:52:74:6b:6a:99:50:dc:fb:0e:51:4b:
d6:5c:6a:56:0e:aa:5f:0f:2d:4b:8a:60:9d:0f:41:
a8:74:46:db:cd:8d:5e:14:d9:be:0e:14:58:74:f0:
27:3d:d1:ff:3c:b8:1f:67:f4:05:0f:42:51:ee:10:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:64:7C:F4:76:D1:A4:FF:FB:A8:06:39:89:1E:8F:F8:10:FF:64
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c6:a9:04:a3:f5:27:fb:72:27:2b:c6:40:f1:f0:c3:79:5d:
aa:b0:e4:fd:ee:2e:a2:2a:a6:30:dc:4a:62:0f:e5:7a:a2:57:
f5:62:3a:e3:4e:63:c9:8b:e4:7b:eb:7a:9f:41:de:e6:15:00:
ac:ec:7e:e4:d5:f9:6b:bd:d2:34:f1:e7:6a:be:6a:ea:3b:0f:
69:de:60:b6:a9:38:12:f9:d0:57:49:67:ab:89:31:b1:e9:b0:
9f:41:b9:17:42:8c:64:dd:79:4b:49:0b:6f:7b:53:aa:a9:71:
b8:f9:cc:d8:d8:e1:e6:2f:c4:53:1d:df:8b:11:80:bd:34:55:
75:b8:97:8f:f2:d3:ae:3f:19:fb:de:cc:0a:ec:a0:69:f7:d4:
89:fe:d7:07:1a:5b:a5:e9:d4:11:0a:1a:06:5e:a3:3e:1e:fd:
98:f4:fa:71:4f:2a:f5:73:90:0e:d6:0b:dc:3a:7a:f4:b5:57:
d1:af:cf:6f:ed:10:59:a2:2a:ef:34:5b:fa:03:73:6a:09:68:
a1:cb:50:aa:80:03:c2:b5:c9:d8:76:ca:c3:fa:ee:68:3f:31:
11:22:bb:fc:4a:97:76:0f:8b:a4:17:9d:15:9b:ca:f4:29:74:
3f:0b:56:e9:32:39:40:ee:f1:ab:3c:ef:00:32:cf:c3:35:0b:
87:30:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:35 2025 by rpki-client