Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: iImlIKTH+W9Lq+2DI4jmF3YsQ+Fm8o/cNlbVKGZWsEI=
Subject key identifier: 5F:AA:36:E6:AF:AF:5E:78:81:01:D2:6F:CD:CC:FD:0D:B3:4C:0B:8C
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 01975BDC1147756E5695E974DB2923B0DD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 22:00:38 +0000
Manifest this update: Tue 10 Jun 2025 22:00:38 +0000
Manifest next update: Wed 11 Jun 2025 22:00:38 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: A/x/Nwq1iN7KRkGVSJOMIQq4WuQaXboUAOoqSoqJWCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:11:47:75:6e:56:95:e9:74:db:29:23:b0:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Jun 10 22:00:38 2025 GMT
Not After : Jun 11 22:00:38 2025 GMT
Subject: CN=5faa36e6afaf5e788101d26fcdccfd0db34c0b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:c3:06:c8:b9:ce:7d:36:05:18:ae:97:05:
80:c5:d4:dd:18:2c:6b:f3:20:2c:62:5a:0e:ea:7c:
fd:82:ce:f0:e7:82:62:0e:4b:b3:dc:96:ad:75:17:
de:b4:a7:29:e1:1b:34:02:41:ff:1f:cb:a4:43:0f:
e5:e7:fe:95:37:fe:e3:86:72:25:ca:c8:ad:9b:36:
7e:9b:27:30:63:83:98:53:65:dc:d6:d9:6b:c8:80:
32:ed:29:b8:6a:32:dd:f7:9f:a4:d1:60:49:b3:79:
a8:8c:30:c6:db:5f:23:82:8f:25:e2:86:f0:79:bb:
79:7c:ff:10:24:ab:0c:da:4c:1f:c9:51:89:ee:08:
75:97:0f:b5:fb:11:7e:b3:5c:2c:30:08:c8:96:6c:
5b:62:61:7a:79:15:1f:6f:f8:64:81:4e:b1:0d:d5:
45:cd:74:3e:a2:88:60:39:fd:43:7f:03:a8:d2:8a:
7b:f6:11:6a:1e:35:36:55:37:4e:88:e1:31:2e:0f:
c7:7d:bf:8f:c6:10:ff:07:7a:cc:43:2f:85:df:72:
a5:98:cd:f7:63:cb:30:68:62:ac:a4:93:f0:45:d0:
78:19:82:5d:9d:55:46:b2:ad:7d:c8:09:4b:14:be:
4b:42:d4:b7:29:53:f6:8b:cd:f2:71:ce:85:f6:8c:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:36:E6:AF:AF:5E:78:81:01:D2:6F:CD:CC:FD:0D:B3:4C:0B:8C
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cb:cd:9f:ae:bc:e3:4d:a9:62:18:34:e1:95:56:7f:01:d0:
73:d0:fd:2d:3f:1c:ee:01:e3:91:0d:75:b2:b1:ea:b0:99:ba:
85:08:26:58:d7:db:cf:45:43:6c:60:75:55:e7:5e:52:6f:f4:
c8:0e:a5:9c:d2:7a:82:cd:6c:33:27:0a:a0:bf:13:84:1b:0d:
78:82:70:1e:28:94:d4:7d:97:37:58:86:af:39:48:d0:8e:57:
90:40:fd:f2:c3:f2:2d:25:e5:2a:8f:50:8f:f7:36:69:d7:31:
4e:18:d2:49:85:5a:59:cc:bc:8a:1e:1e:1f:81:34:1c:61:3c:
9a:99:16:4b:ae:ce:ad:e9:fd:eb:8c:ff:fb:2f:54:00:d4:e4:
3f:34:2b:1d:55:91:04:a9:9b:2e:0d:b1:ac:b6:b7:21:ca:50:
cd:04:a2:14:8a:2f:7c:33:32:4a:2c:ef:cf:55:1a:fc:f7:57:
11:38:5d:da:b3:e9:b1:50:42:87:07:f9:2d:b4:59:51:cd:f8:
2f:e9:9e:66:b0:89:0e:c4:96:da:a6:f0:03:b8:b7:ec:24:8b:
c4:4a:0f:3d:75:7c:13:17:57:08:93:96:7e:dc:e4:aa:c7:bd:
03:a2:30:f0:a3:80:a8:ea:c6:8f:26:7e:ed:db:74:4c:4c:4a:
e2:77:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:32:02 2025 by rpki-client