Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: n5f/NN6JPB1FXzNgz+Kz2nFyKfvFoKJQf5MjKrW342Y=
Subject key identifier: F8:D4:D1:00:5A:A6:7E:33:C9:8C:A6:21:F8:30:18:80:71:E5:38:E8
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 01968F9506CD21F9D520D45860E4B2592915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 14AF
Signing time: Fri 02 May 2025 06:00:30 +0000
Manifest this update: Fri 02 May 2025 06:00:30 +0000
Manifest next update: Sat 03 May 2025 06:00:30 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: FD/C0JbrE+aAS/DG05ciglPERSYoRjkYA6pPYqkqM0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:06:cd:21:f9:d5:20:d4:58:60:e4:b2:59:29:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: May 2 06:00:30 2025 GMT
Not After : May 3 06:00:30 2025 GMT
Subject: CN=f8d4d1005aa67e33c98ca621f830188071e538e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:23:92:49:d0:04:9a:2d:06:0a:bb:b4:72:
e9:f1:e5:26:4f:0e:2a:e1:16:6d:0a:e6:34:08:29:
ad:2a:d8:f9:df:e7:1b:bb:4b:3d:97:e1:08:6b:d9:
a7:e0:cf:8b:85:de:06:c5:ab:87:d8:4e:c8:2f:34:
76:74:18:1c:a0:98:62:ae:61:9d:be:9b:44:2c:2d:
c7:cb:51:fd:58:59:4d:64:f8:d8:4a:51:7a:05:fc:
50:d3:74:1b:a1:2d:0d:ed:7c:f6:0b:9d:91:e1:3f:
2b:0b:7b:ef:4a:d7:1a:84:20:3e:27:1e:1d:a9:ac:
9b:94:6c:51:fa:3d:52:e8:df:2c:9a:a3:a6:20:93:
dc:a4:32:95:d9:4e:09:68:77:9f:9c:55:83:2f:2d:
cc:30:8e:cc:75:0a:4a:62:4c:a4:97:cf:76:d9:60:
1a:6e:d2:d9:bf:97:4c:df:79:34:98:e7:bb:4d:b2:
1c:54:44:98:b3:a8:fb:ba:c4:ea:34:3d:fa:42:93:
d9:89:2b:89:d0:03:a0:98:fb:db:dd:d2:74:f1:62:
ff:20:1b:76:5e:d1:38:89:31:35:0a:68:b8:98:59:
4c:de:e3:d2:21:8b:af:c3:07:16:91:42:3c:cb:12:
c0:e9:92:67:b3:3f:b5:1b:85:00:ba:01:de:e7:6d:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:D1:00:5A:A6:7E:33:C9:8C:A6:21:F8:30:18:80:71:E5:38:E8
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:05:7b:4a:41:e1:8c:bd:63:c3:3f:d6:65:2f:b8:76:81:17:
c5:ed:7d:d0:4c:71:59:64:74:30:c9:78:f2:93:e0:3a:d2:05:
f4:d3:9a:31:93:7f:cf:6c:a5:0c:99:46:06:84:16:16:ee:6c:
d8:3a:77:5e:83:2e:cf:c0:c2:67:f2:b5:bd:43:59:41:1e:b2:
7e:7c:2c:43:e9:84:bd:81:dd:88:ab:58:a7:22:0f:3a:15:79:
42:f2:98:39:a6:d7:df:37:a4:0f:b3:c8:5a:44:2f:77:aa:55:
59:87:9c:ee:e5:73:2c:fc:5b:c1:84:13:bd:30:b0:cd:1b:17:
08:f6:70:10:5d:75:52:c5:bb:a3:67:06:83:51:81:5c:35:5b:
bd:16:f4:ff:7b:f2:76:03:de:ab:e3:64:7b:dd:73:94:16:50:
12:ae:9c:41:90:39:f4:2d:c0:f1:2c:42:c5:da:c5:9d:c5:84:
64:ac:ca:76:96:0d:32:98:54:3e:15:0d:e9:fe:78:1b:87:b4:
c8:b0:40:22:25:13:17:af:48:55:5d:b9:2a:4e:e8:40:f8:24:
bd:2a:f8:ce:48:b5:19:f2:17:f2:57:29:dd:c2:33:be:97:de:
1c:e7:1b:31:54:c8:74:4b:87:4c:b9:b8:e4:13:e9:b0:8a:7a:
6f:c5:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:06:52 2025 by rpki-client