Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: iWIhRMPWv46PBmP3f5FSxBnptcHKRDkJCcmCR7tIXdM=
Subject key identifier: 66:15:83:97:B4:11:4C:49:1A:D3:E4:C6:E9:CC:15:D8:D4:09:98:AA
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019747B083D58DE54005BF14030AC561C910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 01E1
Signing time: Sat 07 Jun 2025 00:00:39 +0000
Manifest this update: Sat 07 Jun 2025 00:00:39 +0000
Manifest next update: Sun 08 Jun 2025 00:00:39 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: Kgcsd9umiTccd694pEjbpd1wR4U7PUY7LOMAXNp+hMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:83:d5:8d:e5:40:05:bf:14:03:0a:c5:61:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Jun 7 00:00:39 2025 GMT
Not After : Jun 8 00:00:39 2025 GMT
Subject: CN=66158397b4114c491ad3e4c6e9cc15d8d40998aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:29:7d:6b:df:5d:8f:0b:19:bd:d8:10:7e:
86:ab:19:32:b6:52:10:a9:6d:cf:e4:4b:9d:29:c7:
f0:71:60:91:0c:0b:94:a5:c4:13:3f:a4:db:a3:33:
66:d2:1d:39:0e:ec:d3:23:f1:bd:dd:af:0b:0f:b6:
53:d1:a5:d2:48:b4:04:1d:17:c5:2f:0c:18:a7:fb:
3e:a0:d4:8b:da:00:41:ed:bb:bc:50:3c:c4:56:05:
96:a0:d9:a3:a8:34:00:0d:7d:5f:61:f7:06:f9:b6:
e0:67:5c:86:fd:c9:60:66:e8:51:7f:04:f5:3b:8c:
dd:94:ee:c3:64:d2:97:52:95:cf:d3:27:f8:b8:61:
65:ca:d3:f3:8f:c2:fb:70:c4:37:d7:20:46:ac:d2:
52:2b:29:d5:27:c7:6a:b2:c6:4e:b6:cc:dd:71:32:
f5:30:e7:4d:dc:a0:aa:03:27:3a:14:6a:88:bf:cb:
9c:09:bd:ac:ec:6e:70:dc:fa:46:04:8e:a2:d2:83:
9f:8f:2e:f2:86:e3:58:b5:39:ef:54:8a:0f:4d:c7:
99:68:f2:d5:ed:f6:95:51:1c:3b:07:d2:aa:dd:b7:
13:de:67:71:fa:d9:5d:9f:63:cb:54:16:ba:c8:f1:
71:a3:59:5f:f3:d2:1e:e4:2f:c7:33:6d:08:e1:9c:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:83:97:B4:11:4C:49:1A:D3:E4:C6:E9:CC:15:D8:D4:09:98:AA
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f6:e8:6e:04:b1:80:93:d2:c9:05:29:83:f9:e6:dd:07:05:
3f:f4:28:d6:e3:13:00:91:14:e6:ba:1a:cb:d8:7a:9a:ba:27:
95:4f:0e:23:9e:b6:47:b0:e8:d0:eb:a1:30:72:b6:cb:8b:d0:
79:90:cf:15:25:4b:85:73:4d:fe:03:e9:32:85:b1:0e:cf:22:
96:5c:0d:71:fe:22:1e:89:2e:a1:28:c5:09:c4:00:e9:83:6f:
69:fd:f8:b5:04:70:4c:20:0d:d7:9f:56:cc:b2:8d:f8:fb:10:
84:2d:11:ec:e2:99:8d:c6:28:af:92:2b:0d:df:fc:88:b0:50:
63:95:a2:a0:4b:4a:97:42:3e:82:35:ba:12:f3:f1:55:b2:ff:
b0:47:d6:35:7d:29:f5:09:dd:ce:1b:d6:1c:d5:c0:fd:25:4a:
4d:b3:50:ec:82:59:a6:47:8d:1d:7d:00:b7:f8:ab:0f:31:c5:
de:09:9d:79:cf:88:e7:25:28:34:f7:24:be:e1:42:30:35:bf:
5d:b1:5f:70:c2:d1:94:b5:85:3f:69:91:a0:fc:0b:cb:db:7a:
cd:e2:c8:b3:2c:6c:15:6a:35:1e:6f:d6:3c:00:5e:ce:22:db:
1b:cf:f4:e3:95:b9:d1:8c:7e:e9:1b:87:84:07:f2:e2:c7:00:
2f:ed:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:43 2025 by rpki-client