Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: sR/hrTMDcSE7QGp5rNgugTMo0EUljRdo4f/hknFwOsw=
Subject key identifier: 33:88:81:57:6A:6F:D3:AB:6D:AE:31:98:27:66:1C:A5:9A:21:7D:FA
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 01987CAE5336717A5770C747DC2E884C40A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0281
Signing time: Wed 06 Aug 2025 00:00:55 +0000
Manifest this update: Wed 06 Aug 2025 00:00:55 +0000
Manifest next update: Thu 07 Aug 2025 00:00:55 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: OWNFaNcrsXwamiYI2pj8QRkI1f00XyXHx8VVwmiWCtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:53:36:71:7a:57:70:c7:47:dc:2e:88:4c:40:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Aug 6 00:00:55 2025 GMT
Not After : Aug 7 00:00:55 2025 GMT
Subject: CN=338881576a6fd3ab6dae319827661ca59a217dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:75:28:6d:7e:fa:96:33:eb:ae:c5:99:51:
d3:79:d8:60:97:fc:c7:99:4f:c5:63:f4:84:ac:fb:
ef:5a:31:97:bd:71:01:9b:39:e0:36:3e:a4:bb:34:
24:f6:91:85:81:70:8c:75:d0:87:89:07:7e:2f:08:
9b:6a:cd:a9:66:47:bd:61:38:2d:80:86:e1:ef:a7:
a8:43:17:f4:ca:c9:e6:4f:47:74:56:4e:74:33:e9:
41:a4:ab:76:5f:76:b3:89:9f:37:d7:c5:28:85:3a:
4a:35:de:05:db:dc:6b:a7:51:5a:77:bf:06:fd:b0:
76:e8:13:71:6c:d2:55:19:cc:6f:3c:b3:35:76:37:
b8:7f:2c:cb:d6:90:b9:7b:29:20:64:94:51:3b:d5:
e1:bf:4a:4b:b5:9f:76:ec:46:ce:ae:67:4f:cd:cf:
b0:7d:a6:ca:9d:4d:8d:bd:18:c2:cb:25:3c:2e:24:
30:bb:37:81:cb:18:11:56:4d:77:e7:5f:f1:49:22:
6e:dd:ad:8b:ea:10:3d:c0:3d:c9:3c:7f:7f:e5:3e:
81:e4:6b:00:da:ac:ba:94:59:89:9a:f2:4c:81:03:
cc:7d:87:52:5a:b2:2d:22:f8:52:32:39:e7:f2:6c:
a0:fa:05:c7:bb:3b:65:94:54:30:ec:d9:a8:ee:c9:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:81:57:6A:6F:D3:AB:6D:AE:31:98:27:66:1C:A5:9A:21:7D:FA
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:38:e3:0d:88:5a:83:f6:9e:cf:ec:24:bc:1f:98:80:1c:
c7:b4:e3:1b:29:8f:51:c8:f3:d9:a0:be:af:d6:be:d1:fa:c9:
41:96:6e:0a:b0:f7:fd:ae:92:ff:6d:67:0d:12:b3:23:fa:c9:
7c:a2:ca:f2:1c:d4:55:84:80:d9:f6:74:b0:43:40:36:c3:9c:
a1:d0:7d:51:de:7b:b1:f2:55:75:ea:ba:65:80:98:2b:aa:8a:
89:a9:35:44:5a:b3:49:c4:db:40:55:f5:93:f0:d0:43:d3:6e:
38:1e:eb:4d:d3:4d:a4:3d:00:aa:ee:28:8d:a9:cf:47:47:22:
8e:b3:b5:af:7a:32:7f:df:6c:fe:6b:0b:c2:11:6f:93:84:49:
27:40:d4:b5:cb:21:23:df:9a:8e:17:65:c2:e6:a5:bd:b7:4b:
66:73:02:a2:b2:f4:04:2e:77:ee:6d:fb:0a:5e:94:c2:ec:7c:
3f:9e:07:73:a6:ac:fb:b4:fd:a4:bb:0a:99:ab:6f:6b:57:27:
19:db:66:ac:a8:d9:1e:28:19:a0:81:25:fc:6c:c3:5d:de:4e:
65:1a:ec:5e:4b:1b:43:ef:c7:a9:7e:84:c9:a2:df:35:98:37:
7c:9e:94:95:d8:d2:92:2d:ff:de:6c:48:29:38:80:8e:f4:f7:
4a:5d:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:46 2025 by rpki-client