Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: Ls3KF5NhZg4bEZc95RteSc/zfs7DyGhBIFZLfLmd1UA=
Subject key identifier: 1C:DE:D8:78:A0:3E:C8:BB:06:26:0E:98:B9:22:A3:E4:C7:1B:8E:BB
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0199FCFD52C4A262E365A7698FA4ED03C1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0348
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: K+hLQFcmgLOBUtSVdL43tk5Uq7BC+xDyJ+02cCmqd6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:52:c4:a2:62:e3:65:a7:69:8f:a4:ed:03:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=1cded878a03ec8bb06260e98b922a3e4c71b8ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:5a:3c:17:b8:be:14:62:85:58:2d:da:ae:
5e:57:7d:7a:2d:c0:dd:dc:34:93:22:0c:ee:c5:94:
b8:bf:98:4e:1f:e0:01:cf:cf:0a:cb:65:53:fe:5b:
c1:04:d7:5d:c5:d8:24:a1:db:e8:a2:63:8e:dd:84:
41:95:b5:e2:f2:e2:32:f8:47:1a:35:00:b3:71:54:
f1:be:6b:89:1e:b4:c2:0b:2d:f6:51:0b:1f:34:25:
26:85:c8:2f:64:9e:d3:f9:d9:5d:ec:2f:5c:2f:f3:
7a:63:79:34:d6:ba:9c:94:15:29:05:f3:5c:52:6d:
66:e9:4e:69:ec:de:90:64:63:30:d2:64:fb:80:4d:
a6:8d:6d:f4:ab:4a:c0:cc:be:ad:ba:59:7f:52:59:
40:4a:ab:01:0e:78:e0:c2:bc:f6:b9:5f:12:ba:51:
08:b0:6d:d7:47:30:b3:4a:39:61:ba:c6:9f:7f:bf:
5c:67:b5:05:9a:95:9a:54:29:ed:51:67:d7:59:09:
19:95:74:90:ac:4e:80:57:3f:e8:ea:69:4e:af:80:
81:f6:9b:10:65:c4:3a:4e:da:22:99:4b:a2:40:e2:
b8:c3:9c:fc:29:47:34:78:57:81:66:1b:3a:19:84:
37:a4:fc:f0:77:e4:5f:87:8a:de:75:62:53:31:33:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:D8:78:A0:3E:C8:BB:06:26:0E:98:B9:22:A3:E4:C7:1B:8E:BB
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:7a:fe:be:51:42:7b:1e:0e:16:97:cb:d9:80:b4:f3:fe:
d8:d7:be:b8:8e:ea:56:f2:07:78:3a:d4:2f:41:2a:e5:1d:70:
dd:9a:02:79:92:c4:8f:fd:8a:d4:60:13:86:49:7e:01:07:87:
7b:03:12:f0:ae:dc:9b:f3:4e:7d:e7:ff:f7:7f:34:cf:40:d9:
e9:9e:40:f9:fa:38:4b:a9:c4:60:15:bc:c0:f0:24:4c:b1:7c:
d7:09:ea:7b:ea:5a:87:83:72:c4:33:4e:12:22:c1:43:f2:b6:
88:48:37:85:aa:06:e9:97:40:b8:cf:ca:0a:7f:de:50:58:42:
db:65:99:61:f4:40:a2:ad:ed:04:24:e1:32:0e:0a:5d:80:04:
08:d0:e9:d4:01:a7:a9:9f:4e:08:0d:50:80:9d:d6:a5:6c:b8:
00:b5:57:6f:2d:93:31:25:50:62:59:bf:2d:e1:44:b8:1b:a7:
5d:b0:36:53:6f:a1:90:f2:d3:eb:bf:cf:d6:99:3a:6d:f9:a1:
53:dc:e4:1e:8e:ff:7e:ff:49:42:89:fa:82:49:b5:c2:91:42:
91:64:33:fd:df:9e:26:c3:eb:1e:9b:ee:96:f7:87:69:cf:3d:
1c:ac:62:cc:30:58:19:7b:49:97:a2:60:1a:44:79:6a:eb:29:
43:d8:f8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:47 2025 by rpki-client