Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: CKZZMWsxMf3kPmW9EQfoQV9IvlR7rL0yIeB/ZLp+kUQ=
Subject key identifier: B3:59:D7:E0:F8:B3:F5:D3:48:74:1E:CA:87:DD:B4:D2:43:63:E6:30
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019A70DBE39780E0D07256619A041F6483F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0384
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: hQ74xKFf+bGyUzale3UmJJofowdWHAe3P4KQZ6JyYNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e3:97:80:e0:d0:72:56:61:9a:04:1f:64:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=b359d7e0f8b3f5d348741eca87ddb4d24363e630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:c0:b2:31:25:c8:89:93:af:55:38:a5:7a:
0b:53:47:f6:42:c3:02:4a:c0:fc:8c:05:91:39:c1:
36:7e:0e:99:b2:fb:7f:47:ac:01:a8:ea:d1:66:ac:
ca:48:24:6f:70:9d:b3:30:c7:93:a1:a2:57:2e:06:
8a:4d:37:91:7f:c0:41:07:41:a1:ef:98:12:da:9e:
c7:b2:aa:f2:b1:b7:b0:0f:2e:56:88:f1:8a:5a:75:
9c:d0:67:8a:1c:e8:9a:d3:9f:ab:51:2f:a8:17:c7:
86:1b:fe:ca:a5:03:56:ad:6c:fe:a5:24:22:ce:44:
41:8a:d5:aa:59:01:07:a7:e6:7b:4b:ba:3b:6c:90:
26:00:3b:58:88:51:65:a6:5b:db:8e:64:0f:69:4e:
ff:1b:e5:31:4a:a1:f5:9a:f2:90:78:cc:01:1b:67:
10:de:0f:0c:e4:9c:3d:fe:d8:4a:52:19:68:09:10:
aa:4a:e6:30:c0:98:47:70:ba:b6:a0:c0:97:45:98:
0e:9a:1a:b6:7a:7f:36:c6:63:db:da:9d:cd:7d:25:
e9:a2:31:be:71:c1:4b:79:96:6c:4a:c5:c9:3b:ec:
64:fb:fc:18:ce:59:2c:25:70:45:60:f8:d7:bd:26:
1c:d4:b4:0d:e1:78:16:fd:60:87:67:15:fe:b6:ad:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:D7:E0:F8:B3:F5:D3:48:74:1E:CA:87:DD:B4:D2:43:63:E6:30
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:fc:54:3c:47:07:a0:8d:f5:2a:65:9b:8d:cf:6d:c5:34:
23:0c:1b:5c:8b:ca:f5:c8:43:a0:52:f6:15:9e:03:eb:58:97:
c3:4d:a3:6b:b4:7a:12:0e:13:b8:c8:a7:f7:d0:dc:51:d1:56:
b7:0d:32:ff:ae:e4:4d:e8:a2:4a:6b:36:c0:22:c9:70:e9:47:
0b:fd:f7:43:8b:c8:86:40:a5:b5:a1:0e:eb:13:94:04:25:71:
40:18:c1:b8:9a:62:da:11:5e:96:2e:ee:a9:a9:e9:15:d0:44:
5a:8c:01:a0:13:aa:26:3d:06:e5:bb:0a:95:44:6b:1e:8e:96:
e7:00:88:0f:f7:3f:87:cb:02:f2:04:df:03:55:57:22:d0:29:
a3:97:8d:53:ff:8d:29:e2:d7:57:dd:49:8a:23:be:1f:21:21:
ae:00:8b:2d:f8:16:fe:ab:c8:a2:c7:e5:ab:a2:87:1d:4d:69:
6d:5b:dc:0a:ff:f0:f3:13:b5:b9:62:9d:56:26:2d:84:c5:d7:
db:1f:d4:81:9b:a9:13:49:1e:1c:42:31:f3:18:2e:74:e9:86:
da:83:c7:2b:a5:59:2b:04:da:c3:d8:6d:c8:34:12:07:e4:0a:
84:bc:35:d6:6a:ca:cb:d0:fa:5f:2f:28:cc:48:88:02:8e:f0:
2b:b6:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:49 2025 by rpki-client