Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: /BhwwBjJ6zIdBJAzRdoZgJTpeJTko/Hf1EpxV+evj9o=
Subject key identifier: DD:F4:C4:52:0A:36:00:56:1D:97:87:6E:40:41:3B:5F:6F:07:86:F9
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 01976F2CA6A5946E5F328C920315EF60887A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 16:01:26 +0000
Manifest this update: Sat 14 Jun 2025 16:01:26 +0000
Manifest next update: Sun 15 Jun 2025 16:01:26 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: 9QIAEN96N3UpTxA0KmxFTqa7jNYMIcvLKv1qm2qvYe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:a6:a5:94:6e:5f:32:8c:92:03:15:ef:60:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Jun 14 16:01:26 2025 GMT
Not After : Jun 15 16:01:26 2025 GMT
Subject: CN=ddf4c4520a3600561d97876e40413b5f6f0786f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:a6:f1:c2:65:8c:f1:47:83:4d:58:cf:5b:
43:2c:e2:c9:79:32:01:9b:98:60:94:3c:e4:78:8d:
2e:d0:66:08:d3:ee:c4:05:d9:59:88:42:4e:c2:30:
1a:77:af:06:d0:4a:a7:83:b8:d3:db:b9:2c:05:36:
ef:5d:eb:83:80:31:64:54:fc:a9:b6:fd:f0:ba:f4:
a5:ac:bd:06:7d:a6:8c:d9:de:37:1d:30:a2:c3:15:
85:5d:17:4f:df:5f:de:5d:f1:3a:6c:0e:3f:86:c8:
c6:36:13:00:b5:d0:1e:77:83:98:8b:72:46:f3:b1:
b3:30:77:96:51:92:8f:07:98:73:b9:1b:8a:be:fe:
bd:e0:6b:86:1a:d0:9a:df:80:0b:e3:21:47:f7:5f:
e3:bc:37:80:49:2a:66:b8:fd:88:42:f6:31:e6:0d:
2e:19:bf:93:20:68:58:38:d7:81:b6:db:52:04:ac:
9e:2f:b2:f1:80:0b:cc:f3:9d:2d:04:59:81:4d:93:
8e:5a:2c:fe:8e:c7:48:4d:2f:64:4f:02:34:66:46:
c3:7c:35:8c:5e:9a:3e:e9:c2:93:02:50:ca:69:0a:
ce:4b:22:78:9f:f9:0e:03:68:ad:4a:9f:2f:f9:e7:
1f:f1:05:ad:45:d4:d8:6e:ab:d3:3f:a0:a9:34:83:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:C4:52:0A:36:00:56:1D:97:87:6E:40:41:3B:5F:6F:07:86:F9
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bd:95:64:5e:f5:da:6f:36:1e:ef:0b:27:75:06:b8:ef:09:
24:f3:fd:7f:f3:e5:bc:5e:f5:bc:ed:b4:48:32:35:8e:92:ff:
91:f7:e1:61:e1:4b:bd:f6:5d:9e:69:05:e9:45:03:5a:2e:8c:
53:f9:e1:42:a7:71:dc:c1:38:d0:c4:bc:69:21:2b:14:a0:cc:
4a:77:94:c7:b4:2e:cc:25:af:bd:f1:4f:15:27:26:06:dc:a3:
a3:ba:6a:1a:5b:ed:2e:1a:63:27:59:f5:9b:66:a6:48:d2:9b:
7b:0c:24:6a:44:d0:c3:c1:42:d1:c7:bd:35:c3:6f:6e:a1:47:
1b:24:61:2e:de:03:0f:55:0a:9c:b5:dd:35:00:56:97:1e:8d:
9d:30:d9:e3:eb:b5:f6:00:d1:ec:ba:32:e2:93:dc:5f:c5:81:
bd:e7:71:b4:a0:fa:22:0c:7f:a2:13:09:86:f0:24:44:08:70:
e0:02:fd:05:1f:82:28:5f:17:18:f0:d5:ae:a8:b3:28:e5:0d:
02:95:11:6a:f3:7d:f3:86:5f:d6:5d:53:f6:45:74:1c:2e:9f:
75:d3:53:ab:cb:f7:71:6e:05:58:b9:13:06:99:17:a8:a5:bd:
d0:3a:fa:50:62:84:f3:f5:a8:51:fd:9b:62:fe:b9:8a:54:6e:
c1:80:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:15:34 2025 by rpki-client