Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: NguLFq1SqyHKN5QZTyhnOs+h2U7+G38fJuLnzHvwLW4=
Subject key identifier: C8:C7:1E:F9:B5:05:72:1E:FE:E9:67:93:33:CA:FC:7B:2C:12:2A:A5
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019935373C26B9ABCB056F84B4A2D84EC8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 20:00:36 +0000
Manifest this update: Wed 10 Sep 2025 20:00:36 +0000
Manifest next update: Thu 11 Sep 2025 20:00:36 +0000
Files and hashes: 1: 4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa (hash: j5XN84KyCXet7GlnPNGdyNtsnXeYr9PG2Qmp2UaeoZM=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: j4l58UVqDAU1R5XT4f99F09fYypoLfDj2UKCO8Xo8+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:3c:26:b9:ab:cb:05:6f:84:b4:a2:d8:4e:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Sep 10 20:00:36 2025 GMT
Not After : Sep 11 20:00:36 2025 GMT
Subject: CN=c8c71ef9b505721efee9679333cafc7b2c122aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:ce:bd:27:3a:59:05:c1:20:37:31:54:a5:
a1:16:23:b1:12:b0:ff:31:8a:dc:cc:c3:d3:34:b8:
80:e4:10:bb:a4:e1:cf:bf:f8:9c:87:f3:b0:ea:ff:
d3:cd:20:ad:ab:9f:fa:95:bf:c0:fd:b4:9a:b7:1a:
ee:ed:08:db:a2:32:92:c2:27:f9:0e:2c:64:3d:fc:
c6:b0:9d:86:03:b5:a9:a4:f8:fa:00:92:2a:02:92:
90:fb:20:fa:08:4e:ba:7b:14:a7:5e:75:84:a5:8b:
8e:b6:d4:72:41:4c:b9:10:b0:65:c1:30:e2:85:1a:
5f:cf:03:bc:18:99:ca:4a:53:c8:4c:35:a8:cc:33:
41:c9:a8:ce:f6:09:98:a0:e8:ce:13:0c:32:7b:a4:
47:e1:bc:c0:d0:07:4a:72:fd:90:c4:d1:39:69:ba:
2a:3b:97:6e:3c:e3:6a:25:95:92:18:2b:ad:13:81:
60:8d:5f:90:61:16:d5:83:18:9c:ce:38:eb:9e:b8:
36:af:bb:01:ee:8a:66:33:78:20:d5:58:6f:97:5f:
88:30:f6:ad:82:7d:54:74:00:49:53:41:bc:e5:1d:
46:2d:a6:8b:3a:8d:8b:72:51:3d:3f:b5:fe:9e:ad:
4b:6d:92:45:fc:23:d5:7e:6e:db:ca:01:8c:94:83:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:1E:F9:B5:05:72:1E:FE:E9:67:93:33:CA:FC:7B:2C:12:2A:A5
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2d:84:f0:e4:4c:44:a5:a5:ce:20:5b:42:92:d8:69:b1:a0:
b7:19:ca:9a:ea:18:46:24:5b:9a:34:aa:6d:c2:a1:e6:82:89:
0e:1f:1c:58:18:b0:74:1e:1d:17:d3:4d:a9:ea:64:08:bf:97:
d0:4c:de:f6:da:2f:32:56:39:2a:8f:41:12:ff:6f:57:df:b5:
d5:6d:ec:cb:fe:20:c9:41:6a:94:ca:5c:f0:90:67:5a:3d:60:
d5:34:7f:63:0d:62:56:80:93:52:34:0a:39:ab:82:e8:b1:6e:
65:65:d7:61:1a:2b:eb:10:22:ff:d7:4a:a4:d0:48:86:d4:53:
8b:2b:df:90:1f:df:3c:ac:28:79:d0:58:05:06:a2:a9:73:e9:
98:fb:bf:d0:c6:e4:cb:1c:4b:04:c7:21:ef:77:bf:9f:84:ab:
55:bc:00:e1:65:d0:9a:bc:3c:e4:3a:e1:46:d7:24:de:9f:39:
df:8d:a6:60:97:e9:a1:5e:b7:90:0b:03:4a:da:39:06:52:b4:
8e:e1:2e:5d:db:9d:70:d2:be:1e:8c:42:0e:d5:75:7e:af:e6:
fd:9f:c8:78:bc:39:2d:fc:31:82:eb:ca:d1:d0:03:8e:07:90:
8d:a4:f7:e2:ba:7d:8b:46:c4:1e:09:81:07:52:ee:c7:30:57:
e9:2d:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:03:21 2025 by rpki-client