Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: Rkgl/GkdVP5/RRAUT+K/XmBz2BN9e5w+r8dUv2f37VY=
Subject key identifier: 1C:69:54:E2:E4:8C:96:2B:86:AB:FB:57:DF:DA:E1:AE:0E:8E:7E:73
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 01974CD6E4027DC58562AE4D1760476A4817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 00:00:40 +0000
Manifest this update: Sun 08 Jun 2025 00:00:40 +0000
Manifest next update: Mon 09 Jun 2025 00:00:40 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: ivxQDg6jRgtt75nMLM8CWSpGtfjaY05qRvJXE9wg2Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:e4:02:7d:c5:85:62:ae:4d:17:60:47:6a:48:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Jun 8 00:00:40 2025 GMT
Not After : Jun 9 00:00:40 2025 GMT
Subject: CN=1c6954e2e48c962b86abfb57dfdae1ae0e8e7e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:6c:fb:3b:14:c3:19:89:3d:5c:f0:38:36:
9e:24:ac:b4:92:e9:60:3a:76:a2:09:dc:14:6b:0d:
94:82:7c:6c:a3:59:1a:bd:e5:47:55:21:fd:2c:ed:
ef:f1:99:ce:e6:a3:58:16:cd:86:4d:91:1e:8d:b7:
2d:fb:d8:cd:65:1c:44:59:e0:f7:7c:34:c9:cb:05:
0b:94:0e:79:3c:02:4a:0a:cb:44:11:30:6e:19:47:
00:ea:68:64:82:b4:e2:bc:9c:09:39:ce:f3:07:24:
51:f8:67:ce:c8:a5:14:c9:11:a0:3c:f0:6d:3a:60:
34:74:60:93:e9:26:73:4e:f3:ac:8a:3f:80:7f:42:
87:0e:b7:d2:7c:85:49:48:72:71:fd:af:1e:fd:63:
71:1c:81:0a:db:96:17:d6:8c:2d:03:c2:b6:95:40:
d7:4f:ff:8b:80:2b:1d:29:bd:54:de:a1:65:4c:90:
b3:c4:67:0a:44:01:9f:6c:9e:25:e1:87:b5:db:1f:
33:36:95:d3:59:39:60:55:44:4c:91:ea:44:7b:c6:
b0:ca:86:a1:74:df:28:01:3f:cd:f9:bb:d4:0f:89:
f7:ef:10:45:25:c3:44:ad:c5:7f:db:79:73:a9:92:
05:99:fe:e7:5f:f4:f3:f9:a1:4f:9b:ac:2a:73:94:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:69:54:E2:E4:8C:96:2B:86:AB:FB:57:DF:DA:E1:AE:0E:8E:7E:73
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ad:44:04:60:69:ba:02:77:1e:4e:46:26:ec:8d:0d:d4:c1:
59:57:3d:48:e8:d1:72:bb:40:90:00:ab:7d:ca:08:39:fa:7c:
ba:ed:23:ba:6d:df:4d:14:3e:5f:97:41:a4:c9:7f:96:ee:f4:
ce:61:4a:9d:25:ef:d5:2f:68:ed:fe:5e:3d:41:37:6b:9b:d8:
a4:4a:2c:87:22:5f:95:74:59:79:cd:74:27:27:89:4f:fa:d5:
9a:57:70:62:b8:bc:5d:38:79:49:b9:15:fb:04:e8:31:46:d1:
4d:5f:94:19:78:c3:a1:04:5d:65:f0:c4:3e:3c:a4:d0:09:9f:
62:6b:3e:23:03:83:be:88:40:5e:41:9d:5c:e2:fe:5e:a5:6a:
0c:e8:ab:4b:5d:7a:60:b4:a2:20:3d:ce:2c:57:9f:a5:2b:3f:
dc:84:56:c7:aa:c6:61:aa:12:c0:8a:c5:8c:e9:32:c8:20:da:
bf:07:da:25:d4:fc:c2:87:63:2a:0f:8e:61:21:e7:d6:a5:18:
55:24:ac:2d:38:15:86:14:e0:53:0c:02:51:53:d3:66:f2:23:
74:a9:db:79:67:36:cb:09:e1:cb:04:d8:ca:18:fa:dd:a4:05:
12:df:75:0c:0e:1a:a7:64:4a:87:16:fa:c4:ea:91:38:50:9d:
d0:66:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:56:32 2025 by rpki-client