Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: TLVXIN29JVirnI/dBTIJXakVlRy6KQ8zbLpyx2Qe1Ks=
Subject key identifier: 31:5F:47:3E:43:6D:49:5F:16:29:B9:44:78:7D:77:5B:D9:73:48:78
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 019A71B90D38467C79A9F014F31A45198579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: +SzP1krxOGlQvfXowO37Py92LNlXc3Vv1RU8KQLWOvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0d:38:46:7c:79:a9:f0:14:f3:1a:45:19:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=315f473e436d495f1629b944787d775bd9734878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:46:a8:78:51:a9:e6:bb:c4:b2:d2:ff:65:
77:20:de:25:f8:1f:5a:c2:dd:72:8f:ba:bc:62:47:
7d:7b:60:52:52:b3:7f:75:16:34:a0:cb:e2:48:01:
f5:05:02:a7:c7:f4:45:76:61:de:f0:e8:7b:a9:31:
ff:c2:75:cb:69:f0:56:d2:20:69:4b:fb:f4:f4:38:
b8:e3:1d:80:89:df:0b:db:bd:07:5d:05:b9:77:19:
65:be:61:0f:95:9b:52:bb:78:a5:61:57:bd:fb:43:
f8:71:61:2f:6c:93:30:43:c8:e9:0d:b8:53:93:82:
6d:32:20:14:f0:f9:53:62:37:d7:66:28:7b:92:0c:
bc:87:b2:ec:00:45:77:c9:a2:1f:5a:88:18:38:40:
66:24:09:26:d2:0c:54:43:86:34:62:7a:dd:a3:f1:
39:82:73:fb:7f:b0:ad:fb:fa:be:80:44:f7:3b:56:
70:78:64:05:20:98:c2:56:92:ee:50:f4:59:30:9e:
52:9d:32:43:f4:ef:ce:6e:f0:6d:09:ba:fb:06:02:
00:dc:24:40:6e:30:0d:ef:eb:72:4a:55:47:4f:72:
3f:8a:c2:d4:7a:a1:61:6b:91:79:72:5e:41:95:b6:
6c:14:60:70:03:e4:0c:71:48:e7:64:e5:9d:39:67:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:47:3E:43:6D:49:5F:16:29:B9:44:78:7D:77:5B:D9:73:48:78
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3e:2f:5f:37:64:20:6f:bf:71:a1:61:46:33:6e:55:63:30:
fe:eb:10:69:a2:e3:df:bd:a5:80:01:61:9c:16:c2:69:b0:26:
18:c0:5e:a3:99:5a:43:3f:ef:02:66:20:1f:50:ee:6a:4d:ae:
0a:dd:6f:68:0c:72:bf:92:f7:29:5e:38:b2:cf:b6:21:d0:ce:
bc:81:f3:30:b0:eb:14:99:78:fd:9b:ce:41:cc:41:33:b7:68:
29:a8:d3:83:82:af:65:c3:a5:37:10:7c:93:8e:2e:c0:1f:41:
ba:e1:eb:1a:0d:dc:b8:a0:09:43:45:72:0d:ba:e4:19:51:cf:
e0:89:03:ee:85:8a:ec:5c:e6:69:5d:04:3e:79:20:07:f8:da:
1c:5c:79:56:42:e1:5f:1a:91:11:10:19:dd:1f:4b:22:a2:b1:
ed:49:b1:1f:0e:01:e6:a9:60:38:81:11:7f:e0:fd:05:f7:6d:
41:40:f6:02:45:99:3f:b4:5c:de:14:ee:73:b7:89:ba:f8:64:
37:2c:8c:7e:2d:a0:5d:ed:84:e6:f8:c2:76:b2:8e:89:98:6a:
9c:ea:16:29:f1:07:94:8c:2f:78:24:5c:33:d6:bb:2e:ff:b0:
c1:5e:27:99:7b:23:85:23:53:c2:70:44:6b:5a:62:11:b5:f9:
cb:8a:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:02 2025 by rpki-client