Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: ODSgaQXMjX6oGxpv57+zZ/JdtwrsapB7VC5J3NA8a+M=
Subject key identifier: 1B:9D:9F:00:F7:05:6A:6C:81:04:C1:D9:C6:6D:73:57:69:A1:CA:EE
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019A51F5A8024C3FE8B80B931AB5EE33F1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0374
Signing time: Wed 05 Nov 2025 03:00:44 +0000
Manifest this update: Wed 05 Nov 2025 03:00:44 +0000
Manifest next update: Thu 06 Nov 2025 03:00:44 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: o0Ji9Mq0leXYQVCfT16nQfZ61VOim6c0hEGtguc3WnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a8:02:4c:3f:e8:b8:0b:93:1a:b5:ee:33:f1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Nov 5 03:00:44 2025 GMT
Not After : Nov 6 03:00:44 2025 GMT
Subject: CN=1b9d9f00f7056a6c8104c1d9c66d735769a1caee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:8e:cc:89:04:21:d2:d0:ce:de:8a:8b:31:
05:3b:d4:d7:af:85:90:87:03:48:cc:21:54:92:81:
86:9f:02:6b:99:b7:a3:66:ef:93:3a:3a:3c:6a:04:
99:43:ca:d2:8f:5a:9e:f0:40:c0:33:76:88:07:8f:
b0:cf:49:55:77:82:9b:ac:11:10:b7:c3:31:78:cc:
86:27:a2:8c:f9:17:11:46:05:7b:28:42:37:f3:46:
f6:bc:8e:4d:b5:dd:32:be:3a:16:b1:f8:37:9e:42:
96:1c:b2:c0:d8:53:65:3f:17:76:fc:9c:25:a0:91:
79:01:a7:df:a2:5e:ca:36:04:28:76:ac:75:07:aa:
e3:31:48:99:f3:68:58:9a:41:d7:c5:bd:2b:33:db:
c7:e3:cc:26:92:a5:67:a4:e2:89:fc:bf:fe:cc:3b:
fa:83:7d:11:df:38:e1:b5:43:33:5c:74:57:44:eb:
72:62:50:02:24:bb:7b:16:dd:6f:ff:bb:1d:8d:ce:
c1:df:24:f7:d7:d7:47:e0:39:ca:67:b2:23:68:41:
96:49:bf:4e:ce:9b:3c:09:6d:a8:ff:25:29:05:37:
54:27:e9:fe:d4:d5:c7:9f:46:3a:9e:de:bb:4c:31:
7e:c3:76:08:32:87:72:c2:df:6d:de:e8:24:41:45:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:9F:00:F7:05:6A:6C:81:04:C1:D9:C6:6D:73:57:69:A1:CA:EE
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fe:be:d0:d0:4f:f7:7a:39:66:3c:46:97:73:57:07:3a:c7:
3d:c1:62:6b:08:14:fc:e7:4d:6a:31:7c:7d:8e:be:3b:4d:0b:
c0:60:c5:81:59:df:e1:57:fa:b2:84:ec:04:48:33:9c:87:66:
b2:1a:d7:d4:fc:15:65:43:00:8a:e7:89:b1:11:d3:df:ed:ea:
9b:92:02:8b:78:a8:6e:81:7e:ad:8f:cd:d4:bc:8e:69:b4:c9:
0f:e7:db:11:1a:c4:ec:13:be:3d:ca:aa:36:92:f8:92:c5:13:
20:7e:80:eb:37:37:21:b1:36:a3:32:f1:94:e0:19:d7:d1:3b:
b2:e1:41:62:7f:c8:58:e5:e1:1d:30:b2:18:13:fc:45:85:f4:
f2:fa:e2:ac:e2:9d:7e:30:65:39:04:61:cc:46:aa:25:82:3f:
fb:28:69:35:c4:13:07:6c:5d:87:15:17:a8:c6:4d:54:df:f0:
24:d1:92:85:0d:09:a1:9f:c0:8c:22:ca:72:ef:4e:cd:42:00:
c6:e6:3c:57:d0:3d:82:fe:09:dd:eb:a3:48:a6:4d:18:b2:b6:
17:f6:d9:7e:19:2f:47:84:d6:1c:13:b2:19:44:03:93:37:15:
af:7d:7d:8e:ac:ff:dc:f8:b4:bb:0f:a5:46:2b:89:b1:f9:52:
8a:40:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:24 2025 by rpki-client