Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: /tAZBzY4rHY480XibCclGy2mXNHiXofBWKPGm6ioXNU=
Subject key identifier: 9B:16:79:4D:9D:39:B0:06:F6:D5:1E:31:25:8C:58:08:6E:C4:79:84
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0199FE1023ACAD5154614359799E9EE8E078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 20:01:34 +0000
Manifest this update: Sun 19 Oct 2025 20:01:34 +0000
Manifest next update: Mon 20 Oct 2025 20:01:34 +0000
Files and hashes: 1: 4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa (hash: j5XN84KyCXet7GlnPNGdyNtsnXeYr9PG2Qmp2UaeoZM=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: Kl2UQbnhE62VLcj4GxqmpGmVSRjg8D7/CBZ+h/5YAXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:23:ac:ad:51:54:61:43:59:79:9e:9e:e8:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Oct 19 20:01:34 2025 GMT
Not After : Oct 20 20:01:34 2025 GMT
Subject: CN=9b16794d9d39b006f6d51e31258c58086ec47984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:f2:66:df:cf:a5:b4:ed:40:d7:02:9b:55:
71:4a:9a:0f:aa:fb:04:30:d9:bd:bb:24:20:af:b7:
74:6d:7c:0d:95:af:5a:4d:6c:e6:78:9e:ee:9d:2e:
a8:e2:a0:0f:b9:6e:97:3e:eb:80:55:06:e9:3e:f6:
a2:f0:49:dc:e9:d4:70:d7:d9:ca:d3:55:f7:62:91:
5e:66:04:a1:07:cf:ac:a9:54:50:0c:67:13:51:fb:
2b:b9:29:fe:cb:55:f5:c6:36:94:0f:55:09:14:20:
da:72:ec:4b:6e:5e:08:9a:55:55:4f:0d:ad:d7:de:
1c:8a:32:60:8d:19:9c:17:f9:ec:81:63:88:bb:20:
af:f7:75:75:2b:b2:80:77:5f:31:2a:fb:be:cc:3b:
02:79:49:43:a4:df:43:26:c2:74:f6:f4:78:d5:57:
f9:31:9d:c0:da:1a:63:5b:dc:44:0c:57:07:70:fe:
10:fb:07:78:cd:7a:c0:53:e8:e6:b9:67:2f:5f:39:
61:aa:0b:87:ae:ae:66:31:cb:17:48:13:95:ba:19:
b7:fe:11:66:6f:31:96:a1:e2:3e:85:9a:27:3d:65:
5d:ad:5a:29:f9:31:30:66:bb:d3:a2:52:87:8e:29:
8b:92:68:33:d7:3f:cb:23:1a:09:56:b8:a9:00:51:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:16:79:4D:9D:39:B0:06:F6:D5:1E:31:25:8C:58:08:6E:C4:79:84
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:be:57:15:69:05:e7:5e:d9:8e:e7:ef:43:f0:9d:13:cf:
76:66:a8:39:fe:ff:0b:8d:b7:5c:2b:ed:57:ab:29:31:53:14:
fd:6d:40:90:a0:3a:6c:8e:0d:24:c1:05:d7:f9:c4:ae:c2:61:
aa:d9:77:69:a1:99:7c:a6:06:08:a0:07:98:ec:d0:2e:fa:29:
7b:c4:21:d7:47:23:e4:a9:96:34:f3:ec:bc:30:c1:14:7a:de:
de:28:ce:b7:b1:5b:e9:f2:04:67:49:3c:b0:85:b5:a8:3e:25:
d8:7f:d6:62:d2:18:f1:d4:9a:3d:d3:2a:96:19:d3:6e:a1:13:
b5:57:cf:08:16:c0:f7:0b:07:d8:4c:04:a7:b8:67:27:bb:9e:
4e:8d:1c:1c:e8:66:be:7d:38:a6:9b:bb:82:ad:f9:62:91:1b:
b9:81:3c:34:ca:91:41:3a:e0:ae:31:77:b7:df:1d:ef:ce:c6:
7c:8c:52:d5:4c:e5:f2:ec:2c:10:38:06:86:17:12:98:77:ec:
78:a5:81:47:22:5a:c2:81:71:ce:bc:5b:6e:a0:dd:5c:49:f7:
5f:12:83:99:44:5b:e9:ab:83:92:a4:7b:9f:a8:be:59:6c:8d:
c1:7a:6d:db:e0:26:e4:85:90:f6:34:ed:e0:e3:3f:86:40:60:
91:da:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:17 2025 by rpki-client