Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: JExlZKRx2cviTKINlH7UIw48yqZoes1rTexJK30afAA=
Subject key identifier: 8A:90:35:10:51:5F:B9:A8:39:2E:BC:49:D5:DC:5E:BD:39:E6:FB:72
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0198499BEDF95CAD2C5BA1014A583D97EC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:12 +0000
Manifest this update: Sun 27 Jul 2025 02:00:12 +0000
Manifest next update: Mon 28 Jul 2025 02:00:12 +0000
Files and hashes: 1: 4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa (hash: j5XN84KyCXet7GlnPNGdyNtsnXeYr9PG2Qmp2UaeoZM=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: 8ZlC9isTcDGKOPxWnXS3YQnHBQTqaJf1ohTKpIIQNX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:ed:f9:5c:ad:2c:5b:a1:01:4a:58:3d:97:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jul 27 02:00:12 2025 GMT
Not After : Jul 28 02:00:12 2025 GMT
Subject: CN=8a903510515fb9a8392ebc49d5dc5ebd39e6fb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:fc:e1:8e:c1:b8:39:80:d8:2e:85:04:6e:
5c:4f:0b:f1:d8:5b:58:dc:3f:6a:45:1b:1c:6a:f1:
73:ef:b4:90:2e:98:6c:7e:11:38:01:06:8f:ce:a9:
6a:cb:72:73:64:03:e1:22:c6:c5:06:29:6b:96:78:
7e:22:93:ac:75:54:12:38:dd:36:60:42:8f:94:3d:
13:f3:45:84:df:fc:87:6b:a1:ad:91:44:da:fe:a4:
c4:cf:e4:55:8d:f1:f1:d1:f3:f6:6f:b2:93:59:25:
3e:dd:b7:7b:56:24:b8:81:e7:ff:b5:5b:75:ab:b9:
7e:99:11:ff:0a:b9:f1:34:03:3c:f3:d8:ce:cc:6b:
1a:02:1f:42:a5:8d:eb:22:09:14:03:23:6e:bc:98:
e1:97:39:5a:86:c5:ed:28:29:4e:3a:1c:c6:75:10:
9c:23:16:ea:55:90:d3:c8:85:4d:ce:41:d7:65:39:
55:12:f4:62:f7:b5:a5:9c:04:63:55:6d:24:f2:4a:
28:62:f3:b5:b7:ea:fa:84:1a:7b:f4:73:76:45:af:
96:1e:3a:bd:7d:da:33:20:7f:62:e8:b8:b7:06:1d:
50:b5:8a:96:c1:0c:1f:cb:90:9a:34:67:06:44:93:
8c:a4:74:72:3b:c7:ca:8c:7e:a1:c0:90:ba:eb:f9:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:35:10:51:5F:B9:A8:39:2E:BC:49:D5:DC:5E:BD:39:E6:FB:72
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0e:dc:0b:87:78:e4:9e:5b:4b:f9:a9:0e:05:d9:9e:be:e1:
87:ed:cc:82:36:4a:88:fc:57:e4:d1:25:db:f3:cf:b3:be:39:
3b:d6:f1:8e:22:ff:39:7e:fd:a8:49:f5:2c:2f:54:88:4d:0f:
45:54:7a:d8:d9:69:33:cc:ef:9a:67:e8:4f:9a:2a:4b:7d:47:
da:b5:f1:15:3e:8c:ef:58:66:a3:7f:0c:1e:4f:50:1c:32:b2:
31:b3:fa:d2:69:90:8a:dd:b4:03:00:fd:62:11:7a:61:f8:d8:
57:ec:00:a5:6c:0a:ee:cc:d8:86:ad:09:f0:2c:5d:39:6b:cb:
9d:30:54:43:2a:e4:07:94:1a:14:3b:86:ba:f9:54:a6:10:b5:
d0:89:be:da:d2:92:a6:70:e9:c5:f3:25:cd:04:a6:5f:8b:d0:
b8:4c:4e:b3:0c:22:94:0d:1a:59:39:9a:67:cf:d4:61:91:5c:
a8:e9:d5:d9:11:3a:b3:77:cc:2e:8b:e3:fa:97:88:10:8e:1b:
54:30:9a:09:4c:37:53:6d:7b:f7:b1:41:76:43:2f:66:58:e7:
0a:61:29:86:b0:ee:c0:95:fb:a5:a1:35:64:60:95:8b:17:c5:
ff:07:32:9f:0d:30:10:f0:65:28:9c:0e:a3:ea:28:d4:5c:75:
5e:a8:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:53 2025 by rpki-client