Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: eRVg8/lxqPPiz9loDUPGoDLYFRguL0cYwxd4iuHak9Y=
Subject key identifier: 64:E0:06:61:99:2B:DE:25:02:A3:6C:E9:F4:E4:A5:D3:EE:B5:99:A9
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0198D773701E0857AFA8B9AB6F9E0F82532C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 02B0
Signing time: Sat 23 Aug 2025 15:02:03 +0000
Manifest this update: Sat 23 Aug 2025 15:02:03 +0000
Manifest next update: Sun 24 Aug 2025 15:02:03 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: 4sL68FDBNJPs1v/gyss0O/aMnw0K9ZQcN5YeuOpJM8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:70:1e:08:57:af:a8:b9:ab:6f:9e:0f:82:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Aug 23 15:02:03 2025 GMT
Not After : Aug 24 15:02:03 2025 GMT
Subject: CN=64e00661992bde2502a36ce9f4e4a5d3eeb599a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:f6:10:c3:b0:61:c1:49:24:a1:6b:ba:23:
8a:bd:aa:c6:3b:8f:d0:bf:a7:cc:76:75:2f:9c:a4:
85:df:36:c8:b5:0a:3e:79:48:42:8c:98:ea:e2:bc:
f0:b1:e7:3c:e5:fc:da:9f:7f:0e:cc:85:b9:ca:1b:
7c:d9:cb:19:3e:8e:97:3a:91:cb:02:66:3b:ea:a8:
b7:67:9a:f4:23:92:29:7f:34:c4:53:94:1d:1f:42:
c3:e0:87:97:93:48:dc:07:0d:96:78:d4:9f:9d:f1:
31:6b:90:f6:c4:ff:5a:b2:8f:93:b0:eb:4c:40:9f:
61:2b:27:24:23:8e:9f:61:7f:df:26:61:6c:52:94:
dc:4d:2b:77:ee:50:95:67:28:7c:5e:06:31:93:ce:
8e:2a:93:52:05:78:2a:fb:ff:88:51:38:dd:98:af:
83:8e:e0:72:60:71:92:45:dd:f8:59:d2:9d:5a:aa:
78:af:1b:c2:87:9a:3d:f7:6a:06:1b:25:8f:19:97:
63:98:36:e5:29:b1:bb:46:2c:d0:1e:02:84:08:20:
2c:8e:d5:57:22:1e:a2:e1:30:c4:c0:89:4d:5c:30:
a2:f5:4d:1b:86:d6:57:19:89:1e:9a:11:cf:e0:6e:
ad:48:28:e6:ee:72:a2:b1:61:cf:95:b2:84:7c:e4:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:06:61:99:2B:DE:25:02:A3:6C:E9:F4:E4:A5:D3:EE:B5:99:A9
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:6b:16:25:31:0a:16:d8:38:30:b6:88:0b:66:34:ae:a8:
cd:81:a5:34:e4:a6:c2:4c:7b:af:9a:ee:5a:91:06:f8:8d:b3:
b2:91:96:a1:53:c0:95:6e:ef:e8:e5:e5:25:ea:88:c5:aa:17:
67:a7:3e:9b:7f:09:b7:a6:fb:d6:e0:3f:92:b2:b2:a1:3b:3c:
df:14:21:e0:c2:20:c7:24:d7:02:c1:06:3b:8f:ec:28:c1:a1:
34:80:9d:a3:8e:7d:4c:91:c1:5a:e7:7d:ab:ee:55:53:b9:e8:
c2:77:b7:e9:7d:d5:26:e3:e5:f3:8b:8d:97:7d:4d:cd:a1:cd:
b9:6d:94:5e:42:96:2b:ea:5f:e9:64:ce:b5:35:7b:02:4a:a2:
db:8e:09:1b:09:1c:e7:5c:2a:6f:dd:1f:93:b6:36:01:ea:0f:
6a:15:ee:a6:54:45:57:d4:13:f2:83:83:ee:22:8a:95:71:b4:
fe:ef:e9:ed:c1:15:fe:fb:35:a2:05:ce:34:66:a5:ad:35:35:
7a:0b:ec:be:3c:18:8e:3b:bf:94:fa:ce:36:91:8d:31:00:88:
83:8a:8f:84:3c:ae:8b:9d:73:7f:f4:99:9b:50:5c:61:40:3e:
22:a7:36:f9:77:29:b5:25:71:48:16:94:7b:c4:f4:4d:9a:98:
c7:ff:1f:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc3AeCFevqLmrb54PglMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTU5NDA3NWYzMWM1MTNhMTMzN2U5MTc1OTI5MDAzN2U2
NjdiZjkwHhcNMjUwODIzMTUwMjAzWhcNMjUwODI0MTUwMjAzWjAzMTEwLwYDVQQD
Eyg2NGUwMDY2MTk5MmJkZTI1MDJhMzZjZTlmNGU0YTVkM2VlYjU5OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxb2EMOwYcFJJKFruiOKvarGO4/Q
v6fMdnUvnKSF3zbItQo+eUhCjJjq4rzwsec85fzan38OzIW5yht82csZPo6XOpHL
AmY76qi3Z5r0I5IpfzTEU5QdH0LD4IeXk0jcBw2WeNSfnfExa5D2xP9aso+TsOtM
QJ9hKyckI46fYX/fJmFsUpTcTSt37lCVZyh8XgYxk86OKpNSBXgq+/+IUTjdmK+D
juByYHGSRd34WdKdWqp4rxvCh5o992oGGyWPGZdjmDblKbG7RizQHgKECCAsjtVX
Ih6i4TDEwIlNXDCi9U0bhtZXGYkemhHP4G6tSCjm7nKisWHPlbKEfOQOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTgBmGZK94lAqNs6fTkpdPutZmpMB8GA1UdIwQY
MBaAFMaVlAdfMcUToTN+kXWSkAN+Znv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYt
MjI4OWM3N2EyZDM5LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYtMjI4OWM3N2EyZDM5
LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1prFiUx
ChbYODC2iAtmNK6ozYGlNOSmwkx7r5ruWpEG+I2zspGWoVPAlW7v6OXlJeqIxaoX
Z6c+m38Jt6b71uA/krKyoTs83xQh4MIgxyTXAsEGO4/sKMGhNICdo459TJHBWud9
q+5VU7nowne36X3VJuPl84uNl31NzaHNuW2UXkKWK+pf6WTOtTV7Akqi244JGwkc
51wqb90fk7Y2AeoPahXuplRFV9QT8oOD7iKKlXG0/u/p7cEV/vs1ogXONGalrTU1
egvsvjwYjju/lPrONpGNMQCIg4qPhDyui51zf/SZm1BcYUA+Iqc2+XcptSVxSBaU
e8T0TZqYx/8f+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:59 2025 by rpki-client