Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: +rilZLHHNDI3IVvdLIQHz17ByOo0ygpzZkeIVfgJuAU=
Subject key identifier: E5:35:86:13:6F:E0:3E:71:E3:E6:1F:5A:F4:E2:CC:B6:37:0E:3D:25
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0197499ED95A2CB3EE3E63DE020239016F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (hash: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=)
2: VcpLmnndha8Y-vfgXC2dpkPqHYo.roa (hash: LeB85j8HcdjYpxaE0+430+0+/Pe7eOGrdSERq3WAn0k=)
3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: IvUkLkbtz+/0RQM1VKIjw1fDJHv6BeYv1xpBvDzO02w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d9:5a:2c:b3:ee:3e:63:de:02:02:39:01:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=e53586136fe03e71e3e61f5af4e2ccb6370e3d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:80:46:44:11:90:17:b0:a2:17:63:db:8f:
28:59:99:05:30:48:e8:ae:f2:14:b2:e8:b1:2b:bc:
00:25:9e:59:7e:f3:37:2c:84:1f:27:85:f8:1c:df:
a5:1c:f5:ff:9a:77:4a:32:a1:a8:0b:c7:5c:3d:e4:
53:8f:52:be:eb:2d:e3:1c:d2:83:77:37:0f:1f:9a:
4d:14:1a:7d:fa:90:b9:68:a9:fd:25:03:55:2a:be:
78:41:c8:51:33:df:75:a2:f3:6f:2f:2c:ea:81:98:
03:b0:b1:36:a3:76:ef:40:07:21:95:fc:82:64:a6:
44:42:ce:e0:3d:84:db:c6:15:8d:32:f5:f2:95:e9:
2d:58:39:9f:f6:74:d8:54:3f:7e:1d:fa:e9:3e:84:
24:05:0a:ca:69:44:5a:0d:00:0f:4f:e6:52:2a:f0:
32:63:17:0b:ef:ff:d9:bb:9d:c6:a2:53:d5:d9:34:
36:5f:73:dc:e4:30:ec:cf:07:de:a0:41:ef:ef:6e:
51:94:dc:6f:ee:33:2b:a8:02:70:36:8f:f6:db:f0:
62:33:68:d5:c2:c7:96:bd:4c:8e:c2:bc:40:24:39:
9e:e5:88:71:b0:c0:9c:41:17:42:21:a8:b3:6f:89:
0d:c7:5f:ef:e0:76:d7:83:79:81:db:e3:45:b1:30:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:86:13:6F:E0:3E:71:E3:E6:1F:5A:F4:E2:CC:B6:37:0E:3D:25
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:42:19:7e:99:c9:48:65:c7:6b:a7:f1:57:c9:bf:46:62:16:
7a:89:44:bf:c8:be:0f:48:51:a4:68:8f:2e:3e:5b:aa:1e:c7:
bb:f3:b2:7e:39:4d:b9:e9:2c:7b:25:69:87:c3:5c:23:55:51:
66:0d:cf:4b:cf:d6:5a:d6:30:91:73:01:43:d6:39:70:f0:1c:
64:f7:73:64:d1:df:dd:1e:46:ff:d1:17:b6:e8:f0:eb:7d:71:
99:b6:59:64:a7:5f:17:82:c6:95:89:29:d8:c2:4a:09:aa:f1:
57:07:57:50:13:f8:e8:b2:30:c4:e1:a8:56:83:54:ba:85:fd:
2f:ea:b0:f4:1d:ec:19:6d:00:3b:eb:24:5f:64:c1:fe:8b:63:
8c:cc:2f:da:2a:bd:7f:65:0b:53:c9:89:06:00:0d:a9:bb:02:
9b:6d:53:ca:ca:50:72:3c:6b:aa:43:d2:1b:c1:f7:30:ca:2c:
64:c6:d3:5a:a0:10:8f:6a:7b:a1:35:90:a4:b6:9d:ae:2c:7c:
2c:6f:19:a3:e9:93:68:28:75:5f:1d:35:9f:1f:a2:31:fe:84:
5d:e6:3e:f5:d5:24:3a:eb:05:d5:e0:f8:db:48:fa:da:27:88:
e6:e3:c8:9b:50:15:fe:4c:86:e0:af:f9:5c:5c:a2:cb:da:d6:
a7:8b:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:14 2025 by rpki-client