Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: eJ7MgG0Fk12/jTFTSXP0b3dw+rE6G933G5mvO+olsgg=
Subject key identifier: D1:9F:70:6A:E8:C6:65:38:35:E5:40:DD:43:54:1C:1B:3B:37:02:7D
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0197B7B2E1FC1CF3AC8B71DD66AC1917555F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 021B
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: kpei3k3hOUHGD8+O3ww3T2ShyLHkJPXLkFCkQ+pnEzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e1:fc:1c:f3:ac:8b:71:dd:66:ac:19:17:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=d19f706ae8c6653835e540dd43541c1b3b37027d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:a3:f9:f4:17:94:4e:2c:1d:b3:4c:d7:64:
68:0d:84:77:54:bf:20:62:02:cb:d1:79:1e:7a:47:
f4:ba:3f:0f:f3:22:33:8c:25:cd:44:5a:75:93:a7:
2c:6a:bc:a5:07:04:74:cb:e3:4e:18:01:16:b4:c2:
f6:6d:3d:3c:ef:35:a7:78:a7:06:79:ce:e2:e1:6a:
0d:0d:df:f5:db:21:36:51:12:56:0f:fb:b9:03:a8:
96:c7:96:cd:3a:8e:2d:44:b0:fe:17:5d:79:48:bb:
9c:e7:3c:ce:71:d6:f1:11:1d:c1:98:39:65:02:6b:
b9:41:2f:e3:e8:7c:fe:78:39:3d:ec:2a:37:14:7c:
3b:eb:00:b8:f3:56:5e:ae:44:25:7b:9f:cf:41:49:
0c:66:20:c1:ab:cb:2d:d4:de:09:33:4f:37:fa:44:
61:dd:5c:64:c4:55:ea:98:ad:1a:ea:8c:f5:2b:04:
98:49:82:e7:01:90:a5:19:16:c5:9a:40:28:fb:97:
db:14:28:01:ec:67:a4:f3:d5:7f:75:75:41:f8:7d:
a1:84:8b:0f:c7:f8:c3:74:0f:4d:6f:04:da:e0:46:
d8:08:2c:29:d0:5c:6c:f1:c0:2c:89:4e:9a:4f:83:
48:0f:ce:af:81:94:47:b0:9e:e3:6f:46:7e:2c:95:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:70:6A:E8:C6:65:38:35:E5:40:DD:43:54:1C:1B:3B:37:02:7D
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:84:9c:44:c9:df:fa:c5:b9:f3:80:fa:06:5d:bd:d4:69:eb:
39:92:36:57:9a:74:d1:08:97:e0:5d:bb:6e:4e:e6:ef:a3:2c:
e9:4a:ef:6c:f6:b4:20:9b:fa:1c:8b:88:29:d7:c6:6a:c1:3a:
65:dc:0c:ae:80:51:2e:84:d8:ea:af:ce:d6:88:0d:f2:45:8a:
ec:9f:8c:c6:64:c6:3a:6a:44:92:7f:91:11:fb:b6:db:87:f4:
b5:57:82:72:d9:0a:47:c4:ba:91:9f:81:ca:e2:f6:ef:b5:ad:
0e:8b:22:18:32:eb:9b:16:fd:10:25:f3:68:96:51:25:b4:84:
3c:cf:26:f7:21:64:07:95:d0:b4:0d:05:53:51:c8:71:39:3e:
56:34:17:61:d6:40:60:c3:8a:c3:37:4c:52:9f:9a:40:98:21:
a8:76:69:a5:e0:75:a5:66:28:fe:f4:8d:d3:e5:e1:31:2b:0d:
81:01:f8:34:3c:64:c9:f4:1a:86:e9:64:00:86:86:cd:89:38:
62:ff:0f:9e:d9:4c:e2:74:75:7e:b1:ab:f6:f7:84:18:17:2e:
c9:ac:b4:2f:ef:c6:a5:2e:27:be:6d:a2:5a:c1:47:56:83:0d:
05:01:09:3d:53:ca:56:b1:76:c8:9f:55:b8:7d:d2:ff:64:bb:
da:b1:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:05 2025 by rpki-client