Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: PaVhjF3tY9UBKgKiPJ6CIP1i1mKTUBazodOzNb0680s=
Subject key identifier: C0:90:E8:75:EE:26:BF:D6:46:D9:AD:83:28:FA:28:A6:73:AC:83:5E
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 01964BFD7D3CF657FF93D463EA05F01C6CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 03:00:25 +0000
Manifest this update: Sat 19 Apr 2025 03:00:25 +0000
Manifest next update: Sun 20 Apr 2025 03:00:25 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: J8DX3l5uN7eebovDfLzX4ZHExLJpqD+sqKTVJTrloQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:7d:3c:f6:57:ff:93:d4:63:ea:05:f0:1c:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Apr 19 03:00:25 2025 GMT
Not After : Apr 20 03:00:25 2025 GMT
Subject: CN=c090e875ee26bfd646d9ad8328fa28a673ac835e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:44:86:e1:f5:74:ea:a8:1c:5f:6e:7a:b9:
08:5f:a9:33:77:e5:30:d7:80:34:7d:b7:c4:3a:52:
4e:dd:83:fb:4f:8b:9a:09:3e:39:f1:4f:b9:ec:54:
27:ac:86:f7:71:f3:3c:9c:b2:01:f1:c3:e8:07:ba:
3f:7e:4d:cf:ed:68:75:cf:b4:c5:25:c6:80:18:7e:
f8:3e:01:1c:8e:10:10:73:6d:cc:73:d3:9c:87:cd:
dd:f0:f0:2c:6c:5e:1e:bc:2e:85:69:26:b8:e0:dc:
67:c3:eb:92:2b:d1:c8:44:96:55:10:99:73:7c:c4:
dc:8a:f3:6b:9e:6c:12:df:28:29:1b:fd:e0:70:1a:
12:8b:42:e7:18:e5:41:45:b3:bd:8f:8e:cf:a0:8e:
b1:aa:47:16:99:53:62:35:24:41:94:3d:83:9f:1b:
15:43:fe:71:16:3b:08:a0:5d:78:1f:04:a5:9e:75:
bd:28:33:b7:fa:7e:3d:46:3f:a6:6e:e8:42:e5:e8:
d3:28:f5:a6:3c:51:09:29:4c:8c:9a:3d:55:5a:ee:
96:d4:72:5b:80:a1:99:03:c0:6f:19:ce:5d:ad:86:
af:a6:77:dc:45:63:8b:0d:36:de:c8:e1:59:62:16:
48:36:25:12:c3:8c:35:2c:fd:38:ec:1c:70:24:dd:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:E8:75:EE:26:BF:D6:46:D9:AD:83:28:FA:28:A6:73:AC:83:5E
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:12:7e:7a:7a:db:c0:26:31:bd:44:20:51:8c:c5:68:0e:84:
0b:7a:20:78:46:d4:42:4a:1c:3f:fa:b4:a6:c2:b4:b5:83:86:
53:9a:4e:9e:a4:84:e4:92:e9:5a:1d:e5:33:1b:c9:19:0c:25:
c2:7c:58:5b:9c:52:db:f1:d5:62:bb:ee:40:90:3d:08:4e:f4:
7d:43:23:14:30:4f:f0:93:68:df:a0:d9:ba:80:d0:d0:31:6d:
c4:44:2f:37:b9:52:3a:d8:6e:b9:99:a0:21:0b:76:cf:55:7c:
c7:c2:15:7f:5c:7d:d6:83:da:43:4c:2b:e3:1b:2b:68:e7:da:
a7:d0:0e:cf:a3:fd:0c:0c:15:46:c7:ca:8c:dd:a9:37:18:b8:
a9:1c:64:8a:d2:69:59:56:76:71:db:19:14:28:94:e7:15:19:
75:5c:8b:db:b8:07:9b:b4:e8:a8:d1:b4:1e:21:8b:d6:fd:25:
e0:49:79:c1:9b:a4:8c:84:c3:aa:db:1b:30:d5:7b:74:c2:d9:
de:60:91:a0:80:40:59:5f:45:c7:c8:f4:a7:7e:f9:47:66:ae:
63:08:30:71:37:66:38:2a:34:1d:4a:aa:68:f6:6a:b6:b2:84:
00:71:57:f3:95:17:20:e9:8f:d3:0c:4d:d3:95:b6:ef:24:74:
a2:b8:cf:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/X089lf/k9Rj6gXwHGzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk
ODFiNDgwHhcNMjUwNDE5MDMwMDI1WhcNMjUwNDIwMDMwMDI1WjAzMTEwLwYDVQQD
EyhjMDkwZTg3NWVlMjZiZmQ2NDZkOWFkODMyOGZhMjhhNjczYWM4MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ahEhuH1dOqoHF9uerkIX6kzd+Uw
14A0fbfEOlJO3YP7T4uaCT458U+57FQnrIb3cfM8nLIB8cPoB7o/fk3P7Wh1z7TF
JcaAGH74PgEcjhAQc23Mc9Och83d8PAsbF4evC6FaSa44Nxnw+uSK9HIRJZVEJlz
fMTcivNrnmwS3ygpG/3gcBoSi0LnGOVBRbO9j47PoI6xqkcWmVNiNSRBlD2DnxsV
Q/5xFjsIoF14HwSlnnW9KDO3+n49Rj+mbuhC5ejTKPWmPFEJKUyMmj1VWu6W1HJb
gKGZA8BvGc5drYavpnfcRWOLDTbeyOFZYhZINiUSw4w1LP047BxwJN2iAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCQ6HXuJr/WRtmtgyj6KKZzrINeMB8GA1UdIwQY
MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt
MTYzY2Q4YmJmNDMxLzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx
LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBJ+enrb
wCYxvUQgUYzFaA6EC3ogeEbUQkocP/q0psK0tYOGU5pOnqSE5JLpWh3lMxvJGQwl
wnxYW5xS2/HVYrvuQJA9CE70fUMjFDBP8JNo36DZuoDQ0DFtxEQvN7lSOthuuZmg
IQt2z1V8x8IVf1x91oPaQ0wr4xsraOfap9AOz6P9DAwVRsfKjN2pNxi4qRxkitJp
WVZ2cdsZFCiU5xUZdVyL27gHm7ToqNG0HiGL1v0l4El5wZukjITDqtsbMNV7dMLZ
3mCRoIBAWV9Fx8j0p375R2auYwgwcTdmOCo0HUqqaPZqtrKEAHFX85UXIOmP0wxN
05W27yR0orjPJw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:41:04 2025 by rpki-client