Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: tMPz9bQNcRUlQuZtPI1wOrvV57hCyq+eWhuYztME00Y=
Subject key identifier: 8F:52:03:FA:3D:67:95:69:C5:7D:82:8A:FD:98:E1:18:C1:12:E9:4E
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0197B7B388AB1431D6B1967C7DB5ED7A835B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:25 +0000
Manifest this update: Sat 28 Jun 2025 18:01:25 +0000
Manifest next update: Sun 29 Jun 2025 18:01:25 +0000
Files and hashes: 1: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (hash: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=)
2: VcpLmnndha8Y-vfgXC2dpkPqHYo.roa (hash: LeB85j8HcdjYpxaE0+430+0+/Pe7eOGrdSERq3WAn0k=)
3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: OlxrPQjgx2SxZZ538lwugaRGWtkxYvZmWK7JS9ceht0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:88:ab:14:31:d6:b1:96:7c:7d:b5:ed:7a:83:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jun 28 18:01:25 2025 GMT
Not After : Jun 29 18:01:25 2025 GMT
Subject: CN=8f5203fa3d679569c57d828afd98e118c112e94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:02:10:3d:9a:1c:42:ed:2e:1c:f1:d9:80:
09:3e:13:f0:5b:aa:1d:cd:b3:11:a8:fe:f3:78:df:
99:c1:c9:26:16:3b:97:af:97:27:7c:ff:e4:26:87:
bd:c9:d2:91:af:65:28:02:0a:1a:53:b1:9c:09:f3:
72:dd:7d:46:de:10:46:06:ec:5c:ef:b6:1a:dd:c0:
f9:36:c3:4c:c2:e7:01:4c:17:f3:97:f3:2c:2b:77:
e6:6e:8d:2e:3a:8d:68:81:18:32:04:e8:16:9a:7a:
b4:04:2e:5c:61:35:71:56:33:e1:88:18:04:43:d0:
60:74:8e:9b:2e:10:94:98:36:fe:aa:13:e0:cb:55:
ce:a1:80:e0:7c:f8:59:c6:fd:78:0f:14:19:e4:ba:
87:56:56:b5:a5:c7:5b:6e:ea:fc:c8:31:d4:9f:cc:
9a:19:2f:60:76:74:af:e9:80:05:ec:23:00:8f:0b:
ec:c9:7b:2a:9e:96:7f:f3:9e:60:64:48:2b:1b:45:
ab:7b:27:0f:ad:94:7c:27:dc:c6:28:72:08:dc:ec:
16:46:5e:fc:ea:53:6c:bd:18:ce:1a:06:1d:9f:68:
88:65:cc:5e:14:dc:62:a4:11:84:1a:d2:19:10:20:
f3:fb:c5:89:cf:ff:be:9e:62:25:f2:9c:e5:19:73:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:03:FA:3D:67:95:69:C5:7D:82:8A:FD:98:E1:18:C1:12:E9:4E
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:23:b4:1d:ce:04:c3:c4:cb:69:be:00:a1:85:6c:89:8a:92:
3d:6b:33:c7:9a:46:8e:c1:55:a9:f3:c0:27:04:4b:81:0f:7e:
46:d6:60:c1:03:03:e2:23:fd:b1:6b:c4:b2:f3:74:bd:8a:ee:
08:74:a2:aa:5d:bd:7f:4d:0c:bd:80:26:0f:ae:5e:a1:66:9c:
19:bb:d1:ae:0d:fa:ce:d3:e0:bb:4f:ba:a3:d0:f2:71:7c:d2:
92:3f:d9:b9:ad:90:05:32:3e:ee:37:fe:e1:33:ec:4f:e0:97:
1f:68:8e:48:90:ed:63:6b:24:05:31:e7:2d:52:54:75:71:e5:
42:02:8e:21:ab:00:29:45:b5:e9:c3:79:23:85:e2:1d:f6:ef:
5b:e6:53:59:41:38:40:19:51:00:2d:a4:65:d5:fb:56:3e:df:
ab:c1:14:fc:d1:18:25:4c:92:41:e6:72:79:d8:e1:73:ec:0a:
9a:b1:a1:8f:0e:d5:90:c8:3a:93:ea:31:10:7a:fa:fd:ff:a2:
08:73:a2:c7:11:1a:e7:6a:80:aa:e3:ee:4a:28:1f:e5:5c:83:
23:88:f2:ee:cc:fa:60:b2:3b:8a:d6:c3:bb:6a:b5:93:c4:32:
9b:eb:92:6f:9e:5d:5d:27:23:d3:85:da:a1:22:f1:c6:eb:c9:
9a:1f:26:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:19 2025 by rpki-client