Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: ApvTpbLJ5w8bJP+13zoEexSisgB4Zq6h9r5lQYZ9TFQ=
Subject key identifier: 34:DE:C2:5E:39:A6:EB:72:F4:EC:71:AF:B9:6E:AC:2E:7E:52:4C:D4
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019877F5CE609F4B15893AB62562EE60176E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 02:00:54 +0000
Manifest this update: Tue 05 Aug 2025 02:00:54 +0000
Manifest next update: Wed 06 Aug 2025 02:00:54 +0000
Files and hashes: 1: 4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa (hash: j5XN84KyCXet7GlnPNGdyNtsnXeYr9PG2Qmp2UaeoZM=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: lIoHyIWZ050rJ9WUZ89TigoIw3gvWzvfQxj2gtTLhQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:f5:ce:60:9f:4b:15:89:3a:b6:25:62:ee:60:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Aug 5 02:00:54 2025 GMT
Not After : Aug 6 02:00:54 2025 GMT
Subject: CN=34dec25e39a6eb72f4ec71afb96eac2e7e524cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:31:96:94:32:2f:e9:13:e8:6d:72:f8:fc:
e3:3d:52:62:c7:05:2c:39:c5:4e:43:98:52:c9:7f:
bc:d3:ae:ca:7b:41:52:84:5a:d4:ed:9a:88:0e:05:
1c:db:e7:d2:67:99:0c:80:86:54:f2:01:ca:57:a9:
de:5c:d2:12:54:d1:e0:39:b4:39:c7:a2:9e:98:ab:
89:8c:ee:06:d3:90:89:c8:bd:13:8c:6c:a3:14:56:
09:c3:cd:2e:e7:5d:9f:8a:3a:d2:ea:bc:4b:0b:65:
7d:8b:c4:32:c8:97:1a:12:64:88:75:24:c0:ee:ef:
cc:61:11:1c:bd:9d:63:88:b8:03:0f:cf:a5:92:11:
e8:71:d6:96:e2:eb:63:19:ca:97:e3:45:45:83:2b:
3a:06:c0:93:12:49:26:b8:2b:8f:55:b8:17:60:6a:
3d:c5:fa:cc:b6:40:20:7f:99:d6:e2:90:a9:ea:5a:
61:f7:77:3e:e6:bf:f8:14:51:ab:7c:07:c0:e2:f7:
9c:b5:06:07:0a:41:f2:82:38:65:99:9d:94:57:05:
4d:16:41:47:2e:be:8f:76:25:36:69:e8:fb:41:d0:
48:b2:65:d9:da:e2:b3:89:f7:8a:6c:62:e3:2d:8a:
f2:4c:e3:19:0e:86:d4:72:cc:f1:31:c7:89:5b:e2:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:C2:5E:39:A6:EB:72:F4:EC:71:AF:B9:6E:AC:2E:7E:52:4C:D4
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:cf:ef:7d:42:db:83:8c:ea:9d:45:04:48:e1:03:a8:35:
e1:26:b1:51:2e:c2:30:57:fe:11:f7:d8:f3:b3:91:8b:5d:80:
fc:ab:34:4a:c9:87:fc:09:55:bf:ee:f1:0a:a9:43:d2:02:da:
b0:ee:7d:29:a0:ab:5e:5b:b4:d0:6c:f3:fa:5e:8f:c4:08:ef:
37:c2:7d:54:9b:8b:65:db:a1:13:1c:d5:9b:6c:89:d3:e5:da:
1f:99:9b:18:d5:50:da:b5:2e:d5:28:03:7b:17:c5:af:03:38:
bb:c9:df:5b:81:94:a7:75:6a:30:c4:57:07:40:58:53:c4:df:
34:2a:ca:80:06:c5:e2:1d:4e:2d:2e:b4:34:4d:11:fb:92:79:
41:ba:35:78:d3:04:94:73:ff:b1:30:8d:3d:7a:67:6d:b8:84:
26:54:f3:e7:7e:96:95:2f:8f:0d:24:3d:87:55:e2:28:f8:11:
c4:64:3b:5b:87:b2:c0:29:82:9c:63:1a:12:bc:2f:15:8a:15:
56:7b:cc:e2:f6:3e:b6:7a:87:1d:f7:be:d9:c8:a6:88:26:3e:
97:21:34:00:e9:3f:32:26:2d:7c:b1:19:ce:12:f3:a1:51:9a:
21:70:05:71:67:19:26:4e:2d:fe:e8:6d:5f:79:5d:43:07:73:
0e:8c:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:15:31 2025 by rpki-client