Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: uN72SX5G+bsRIVVO/1S5Ggoyq3xOXse8tseNQAX1ndo=
Subject key identifier: C5:B5:FA:70:57:D9:D1:7D:DC:7A:51:21:8F:B6:F1:C7:A7:C7:12:48
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 019A533F26FB4A5BBBF8F516111D900DB024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 09:00:38 +0000
Manifest this update: Wed 05 Nov 2025 09:00:38 +0000
Manifest next update: Thu 06 Nov 2025 09:00:38 +0000
Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: 32pCwvfodYcffiEGIDkBOWQErHNABIsGyx2l4rBzIaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:26:fb:4a:5b:bb:f8:f5:16:11:1d:90:0d:b0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Nov 5 09:00:38 2025 GMT
Not After : Nov 6 09:00:38 2025 GMT
Subject: CN=c5b5fa7057d9d17ddc7a51218fb6f1c7a7c71248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:b7:53:d5:ec:79:12:14:3b:f7:1f:e6:0a:
0d:25:e7:21:8e:3d:4f:c6:b1:8f:ba:2f:23:0c:da:
de:71:7a:91:f4:8f:9b:ed:b7:2f:70:41:5b:db:5b:
8d:5c:f3:83:f7:bc:60:f4:8d:f1:fd:b8:c2:a4:49:
51:76:bf:29:cd:f6:33:30:f4:2a:3b:4c:92:8c:f0:
04:55:ea:ae:df:05:8a:56:4d:dd:2c:5c:f6:8d:2b:
1c:f6:c8:ec:33:bf:13:ce:ac:db:95:4b:eb:39:a0:
8e:e8:32:26:52:15:b0:12:82:9c:e3:a8:27:d2:b8:
75:87:32:f1:cf:3d:de:4e:3b:b6:c6:d7:21:c2:5d:
66:14:e4:f8:3d:a1:2f:eb:2f:a8:d7:38:70:23:c3:
cb:d4:ca:57:e0:a7:54:27:49:e9:88:11:fb:4b:35:
ae:fd:cb:01:95:7a:10:c5:95:70:c3:e1:d1:d1:31:
89:59:8f:ce:df:13:b2:f3:9c:98:14:7b:3a:aa:9e:
dd:d6:28:af:59:db:c6:08:28:4c:a5:ac:62:7e:9a:
2b:4d:6c:84:4d:70:bd:4f:da:62:8a:ce:e5:44:b8:
de:5b:b7:03:9a:c8:f9:13:51:8d:44:c3:61:e5:7e:
b2:af:05:37:2b:57:e3:8e:b0:bc:17:bb:e8:55:0e:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:FA:70:57:D9:D1:7D:DC:7A:51:21:8F:B6:F1:C7:A7:C7:12:48
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:08:af:6a:f6:ad:a3:b2:8a:c4:70:62:67:5c:04:c4:7a:8f:
85:9e:dc:63:ff:0b:17:db:83:32:16:b3:26:d6:26:f9:93:4d:
87:c9:c1:7c:01:c7:86:33:e4:ae:10:0d:73:21:eb:b8:46:30:
e3:0e:38:9f:a9:09:7f:21:80:60:b9:3a:c4:39:1a:ac:32:05:
a1:b2:f0:59:96:88:bc:2c:b5:28:9d:4b:33:4d:c4:8e:79:41:
b3:f0:d5:3e:40:b9:ef:22:df:8c:94:d7:81:aa:72:71:41:91:
49:1c:7c:ad:c0:d4:77:54:59:9e:dc:8b:5e:1d:cb:af:03:5c:
79:a7:4c:45:b4:75:f7:5b:25:92:28:d5:74:2c:ef:67:88:e7:
d0:a5:e7:25:7f:3a:3f:17:b9:98:0d:6e:b4:6a:1c:88:88:0d:
84:b8:3d:66:a0:53:f5:56:bc:cb:82:be:39:f5:6e:0a:49:be:
e4:fa:c4:02:a9:2d:6b:b8:bd:ad:3f:75:2d:5e:94:8c:ba:27:
6e:1e:4f:7a:5e:2d:3c:ad:82:ae:af:e5:18:a7:20:f4:33:d4:
e6:a4:d6:b7:cf:e8:a2:2f:6f:f7:76:76:d6:94:e9:9f:60:96:
c7:07:89:ae:00:3e:3e:86:e3:14:6e:6f:a6:22:74:76:0f:53:
ba:ab:35:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:15 2025 by rpki-client