Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: zFAabhRbr2/zUrnY7TqBFUKv6pk3KFYUA7LSSygwxhQ=
Subject key identifier: 2C:43:8A:92:11:9B:69:AF:18:8A:A8:B7:88:6D:6B:14:83:5D:7D:6C
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019629E04DCD6E381E03991CAAA93F82BB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 12:01:27 +0000
Manifest this update: Sat 12 Apr 2025 12:01:27 +0000
Manifest next update: Sun 13 Apr 2025 12:01:27 +0000
Files and hashes: 1: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (hash: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=)
2: VcpLmnndha8Y-vfgXC2dpkPqHYo.roa (hash: LeB85j8HcdjYpxaE0+430+0+/Pe7eOGrdSERq3WAn0k=)
3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: djgJ1bv9yqj3DZMLo+Zj2qTEYT/bC2xJHKjI7fMPO+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:4d:cd:6e:38:1e:03:99:1c:aa:a9:3f:82:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Apr 12 12:01:27 2025 GMT
Not After : Apr 13 12:01:27 2025 GMT
Subject: CN=2c438a92119b69af188aa8b7886d6b14835d7d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:0e:0f:93:49:00:ec:09:dc:9e:99:24:8e:
60:d2:80:c6:82:9c:d4:32:53:f9:b0:5e:a5:82:96:
1e:ff:8f:44:a9:41:71:1c:37:0a:e3:de:86:13:be:
95:fe:1f:b7:1a:4a:0e:cd:53:f6:56:09:7d:69:c7:
03:89:af:4c:68:11:a6:78:bb:c7:48:be:cd:42:cc:
d3:fb:9e:27:52:0f:bf:be:48:dc:81:ca:50:fa:6f:
ab:ac:7e:e3:b0:da:d3:39:72:0e:8a:73:5c:5a:9f:
b9:c7:43:a7:1c:71:5f:d1:45:24:e9:06:85:8b:4d:
8d:fc:9c:fe:5b:e7:c5:11:0c:ca:4b:4b:d3:ea:de:
51:00:a2:9b:1d:ec:59:62:fa:0a:1a:86:1f:3b:d0:
63:0a:0d:ee:7b:b1:52:0f:3b:37:78:a3:94:57:7b:
20:09:87:54:97:91:e4:b6:23:d9:46:72:f4:63:08:
50:38:20:2a:ad:5c:8f:b2:aa:b9:ef:fc:46:d5:f3:
16:cb:5e:b2:ba:45:4e:ac:66:4f:89:f3:06:66:75:
e3:6f:84:25:b8:83:1c:72:db:a7:b5:be:40:a8:86:
19:25:8e:10:ff:c2:78:73:da:ec:15:2f:25:cc:44:
b8:5c:80:86:87:35:0c:bc:a4:e2:5f:3e:9f:9a:d9:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:8A:92:11:9B:69:AF:18:8A:A8:B7:88:6D:6B:14:83:5D:7D:6C
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:22:68:2c:1e:3a:eb:a9:54:78:8e:d7:15:17:72:14:f7:
3a:ef:b4:ba:4a:dd:73:fb:87:8b:80:4c:2b:4f:a6:c4:bb:32:
06:fc:4c:4a:67:e6:dd:68:32:d2:14:63:5a:6e:19:a5:07:88:
b4:e7:35:45:e7:da:77:19:46:dd:4a:02:c2:56:9e:a1:88:8a:
e5:65:f3:a1:98:bb:4c:6a:0a:d9:4a:be:bc:be:94:c4:67:ef:
89:a1:63:cc:42:e6:1b:fd:df:23:81:e9:04:3d:c4:46:f7:b4:
b2:59:8e:02:13:29:1b:40:10:71:76:3b:2a:3c:6a:b7:70:4c:
5c:b5:ab:df:b7:d8:b0:b5:29:50:d2:11:fe:4b:b1:3a:c8:2b:
bd:c9:46:c0:c1:63:2e:28:5c:6a:e3:d0:f9:5b:2c:a9:e1:91:
c1:b6:d2:dc:83:10:d4:30:e9:34:98:21:cb:7d:e9:2a:cd:fb:
be:eb:99:ec:e2:99:12:a9:9a:53:a5:9d:1b:92:90:73:23:a8:
32:3e:6a:1e:f0:fe:e9:90:5d:97:4b:c3:d6:8d:ac:20:67:74:
2d:6b:d0:3c:6b:f3:ad:4a:38:fe:af:83:dc:99:32:7b:09:24:
e7:16:a8:5d:f8:ef:71:6a:dd:74:79:44:65:b3:56:15:23:d6:
b9:d6:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:26:28 2025 by rpki-client