Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: Xm1QdRkP86zj62kpobZ376PavUTlyJGL/7XTKCAoWW8=
Subject key identifier: 36:4B:61:41:92:68:EE:F2:76:1B:C6:77:CD:31:9E:10:E7:99:E3:20
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019922C3A6DB1736E95AE9168B981ABBDFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 02D7
Signing time: Sun 07 Sep 2025 06:01:11 +0000
Manifest this update: Sun 07 Sep 2025 06:01:11 +0000
Manifest next update: Mon 08 Sep 2025 06:01:11 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: dsvUekho6VxjGpiD59dnpQ548Mm0rQJlGN6qWJF6Q44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a6:db:17:36:e9:5a:e9:16:8b:98:1a:bb:df:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Sep 7 06:01:11 2025 GMT
Not After : Sep 8 06:01:11 2025 GMT
Subject: CN=364b61419268eef2761bc677cd319e10e799e320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:82:cb:94:02:ab:82:cc:4f:24:3d:66:72:
27:94:24:32:10:e7:80:78:05:ab:3b:f9:52:63:e3:
ed:87:30:21:af:32:7c:0e:50:dd:1f:c8:50:f2:e3:
8e:b6:de:ea:58:2b:a1:ae:13:a8:ad:b2:be:59:8a:
6b:58:e6:4e:46:df:76:d1:88:9c:df:98:a8:69:c6:
7f:ab:e2:0a:16:40:ce:6a:f4:d6:b4:cb:1a:45:f7:
a4:1f:a9:bc:d0:40:1a:29:c1:8e:b2:7a:79:4e:19:
b9:2b:61:c1:e4:7a:c9:99:db:96:a3:d7:4c:78:4b:
6d:f4:c8:3f:60:d7:1e:00:38:04:10:8a:2b:6f:6a:
eb:d1:52:c2:ad:45:59:de:fa:2f:de:67:1c:35:b3:
c8:88:4d:fa:e7:fc:d1:15:36:c6:2b:a3:1d:c3:75:
61:54:dc:ef:38:44:19:03:50:bf:22:03:b6:dd:2f:
a6:b1:c4:2f:b3:09:75:60:45:b3:02:b5:2d:81:96:
07:a1:b3:18:6c:91:bb:57:ec:dd:e1:b3:b6:36:2f:
97:b4:1f:97:4f:59:92:65:32:e5:cd:26:99:9f:e3:
a5:1c:b7:cd:4a:da:29:78:a0:40:73:7d:9b:1b:d2:
c1:e4:ff:22:f3:1c:d3:17:67:ed:ea:cd:bc:0d:c2:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:61:41:92:68:EE:F2:76:1B:C6:77:CD:31:9E:10:E7:99:E3:20
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:38:5e:75:2d:49:ba:b0:17:dc:49:12:11:1d:b3:22:23:
5e:6d:ff:cd:fe:4e:85:a7:ad:39:06:02:1d:89:6f:3d:8e:7f:
36:ed:cb:51:86:f7:9b:84:b3:48:64:7e:a0:11:f5:cc:ed:f0:
15:c4:e0:a7:f7:c2:1b:7f:92:6f:02:28:be:48:1f:9b:87:2d:
20:a6:2c:3c:27:fd:d4:03:1b:51:0a:5a:59:fb:55:20:7d:22:
18:c3:6a:7e:b8:cc:b1:ac:78:a4:3d:51:90:d0:62:3a:5f:1c:
35:63:53:64:ba:00:09:19:28:23:cb:01:c2:e9:96:dd:e2:be:
48:b4:4e:df:b9:33:9b:14:ae:58:02:6a:fb:35:b2:0b:e6:52:
15:e1:8e:c2:f5:2f:0b:b5:bc:7d:98:bf:75:84:b7:2b:b7:59:
42:9c:d0:20:41:52:a9:4e:4e:96:de:ae:ca:81:4c:de:73:51:
61:a7:53:18:66:2b:ea:5c:94:3d:e3:88:b9:5a:d3:d9:b3:d4:
2a:84:26:45:2c:46:1b:ad:f5:6e:86:e8:d3:29:83:ad:bc:d2:
9b:98:e9:2c:af:06:a3:88:17:91:af:88:19:a5:33:ca:95:45:
ab:3b:5e:12:eb:1a:ed:05:47:27:5b:a0:68:35:64:9c:d9:01:
ef:e3:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:35 2025 by rpki-client