Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: SnmhoqeedW9Jcz1A9vq/17R2+u01QY5OWf+5/S73aDw=
Subject key identifier: 4A:2E:1D:AA:96:C7:AB:5D:23:17:7F:EA:0B:F7:A8:EE:AA:C1:A4:06
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0196A38A25FF9D0FB22DE5219C6D857317A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 03:01:01 +0000
Manifest this update: Tue 06 May 2025 03:01:01 +0000
Manifest next update: Wed 07 May 2025 03:01:01 +0000
Files and hashes: 1: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (hash: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=)
2: VcpLmnndha8Y-vfgXC2dpkPqHYo.roa (hash: LeB85j8HcdjYpxaE0+430+0+/Pe7eOGrdSERq3WAn0k=)
3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: s4OZsEPPtHCC1LhhhLsBM8v9xzGOnpRMX/sHxOAHJzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:25:ff:9d:0f:b2:2d:e5:21:9c:6d:85:73:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: May 6 03:01:01 2025 GMT
Not After : May 7 03:01:01 2025 GMT
Subject: CN=4a2e1daa96c7ab5d23177fea0bf7a8eeaac1a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:15:93:c4:ce:89:c0:98:18:e0:90:5b:79:
95:79:12:b3:5b:a7:7d:ab:75:41:8f:1f:ab:c0:41:
8e:6b:7f:ae:35:b2:bc:3b:d7:a0:8f:f7:3f:b3:59:
d4:08:2c:34:52:76:7d:85:9b:a7:1d:84:04:b7:47:
74:3a:9a:24:73:55:21:99:08:b1:b0:97:c4:76:06:
35:aa:d6:51:83:07:c2:9f:5d:62:57:24:31:ae:55:
70:32:4f:4a:c8:55:b7:b4:d5:5e:b7:25:6a:33:61:
33:fe:a8:e2:1c:40:90:77:d4:43:25:33:e6:0e:f6:
5b:4a:f6:90:1b:2f:74:99:b6:b6:eb:05:2d:a6:d5:
a0:8c:f6:9f:cf:bb:ef:79:b8:64:49:d3:f6:31:19:
a1:77:4b:ce:56:f0:b9:ce:22:05:c7:7f:d7:d9:4c:
c5:a3:da:7d:6b:3a:b7:9c:4b:54:85:29:73:14:6a:
25:ea:44:a8:cc:ac:92:81:26:25:68:31:15:16:38:
2e:64:c2:1b:08:25:c6:84:6c:a9:5e:fe:2d:95:95:
c1:c5:3a:42:b7:c2:91:dd:d6:a6:eb:e4:5b:7e:94:
aa:17:c6:d8:be:72:b7:4e:14:7e:0b:72:08:77:1b:
da:97:36:43:7a:45:1c:3c:94:91:da:b7:86:7f:e5:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:1D:AA:96:C7:AB:5D:23:17:7F:EA:0B:F7:A8:EE:AA:C1:A4:06
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:97:68:2f:4b:86:e6:55:e6:d9:44:19:5e:b3:e3:5d:97:4e:
d0:17:a5:b8:76:79:74:a9:d3:ed:49:ac:46:1c:be:34:5b:3e:
8b:0e:d5:73:02:9c:ba:45:41:02:41:58:61:c6:9e:da:a3:0e:
7d:b6:92:4c:60:fc:bf:30:1e:af:d9:9e:9c:fd:a1:16:cf:68:
3d:a3:4d:a7:73:23:6d:03:be:63:7b:0d:51:d0:9d:2a:ca:dc:
a7:a3:45:9f:45:0c:07:9a:4e:e3:7c:db:b7:f9:c2:be:68:4c:
fd:cc:4e:b5:46:94:ca:e5:98:a5:1e:16:87:01:d1:1f:7a:96:
11:6a:3b:ae:14:54:71:7e:7e:2d:60:9a:19:d6:ff:cd:c7:30:
8d:33:b4:b0:87:a3:13:4a:33:e3:a6:c8:39:1a:f8:8f:b4:e7:
c8:86:df:1e:59:c4:43:83:34:25:58:62:38:0a:42:59:3e:1b:
6b:e2:68:bf:96:bf:37:3b:d5:a0:ca:f2:87:eb:be:27:aa:a6:
c1:ab:81:f7:58:5d:53:50:41:16:03:16:ab:01:af:21:96:db:
2b:22:0f:1c:f1:b2:85:8c:1b:8d:e6:e1:dc:be:e3:87:cb:ed:
2c:f8:73:e5:c6:f9:83:54:c7:d3:a7:5e:9e:af:83:af:5f:9b:
aa:90:f3:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajiiX/nQ+yLeUhnG2FcxemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2
Y2U3NDgwHhcNMjUwNTA2MDMwMTAxWhcNMjUwNTA3MDMwMTAxWjAzMTEwLwYDVQQD
Eyg0YTJlMWRhYTk2YzdhYjVkMjMxNzdmZWEwYmY3YThlZWFhYzFhNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNwVk8TOicCYGOCQW3mVeRKzW6d9
q3VBjx+rwEGOa3+uNbK8O9egj/c/s1nUCCw0UnZ9hZunHYQEt0d0Opokc1UhmQix
sJfEdgY1qtZRgwfCn11iVyQxrlVwMk9KyFW3tNVetyVqM2Ez/qjiHECQd9RDJTPm
DvZbSvaQGy90mba26wUtptWgjPafz7vvebhkSdP2MRmhd0vOVvC5ziIFx3/X2UzF
o9p9azq3nEtUhSlzFGol6kSozKySgSYlaDEVFjguZMIbCCXGhGypXv4tlZXBxTpC
t8KR3dam6+RbfpSqF8bYvnK3ThR+C3IIdxvalzZDekUcPJSR2reGf+WjNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEouHaqWx6tdIxd/6gv3qO6qwaQGMB8GA1UdIwQY
MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt
ODBjM2VhNGZkMDAwLzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw
LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5doL0uG
5lXm2UQZXrPjXZdO0BeluHZ5dKnT7UmsRhy+NFs+iw7VcwKcukVBAkFYYcae2qMO
fbaSTGD8vzAer9menP2hFs9oPaNNp3MjbQO+Y3sNUdCdKsrcp6NFn0UMB5pO43zb
t/nCvmhM/cxOtUaUyuWYpR4WhwHRH3qWEWo7rhRUcX5+LWCaGdb/zccwjTO0sIej
E0oz46bIORr4j7TnyIbfHlnEQ4M0JVhiOApCWT4ba+Jov5a/NzvVoMryh+u+J6qm
wauB91hdU1BBFgMWqwGvIZbbKyIPHPGyhYwbjebh3L7jh8vtLPhz5cb5g1TH06de
nq+Dr1+bqpDzMA==
-----END CERTIFICATE-----
Generated at Tue May 6 05:14:34 2025 by rpki-client