Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: QZmyo8r1/mGqoqxXcdHNEOHDjR1WunTXbKqe//PIpXk=
Subject key identifier: A5:93:12:C1:64:F6:71:26:3F:5D:6A:31:07:D1:08:C6:4B:C5:C0:B4
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 01958C607ADB1B72F35CCA990FD3CDE45403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:01:27 +0000
Manifest this update: Wed 12 Mar 2025 22:01:27 +0000
Manifest next update: Thu 13 Mar 2025 22:01:27 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: cNEdC8n9d95LJjXamckAOOaY6+MKWlqjrnRSkEwEhSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:7a:db:1b:72:f3:5c:ca:99:0f:d3:cd:e4:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Mar 12 22:01:27 2025 GMT
Not After : Mar 13 22:01:27 2025 GMT
Subject: CN=a59312c164f671263f5d6a3107d108c64bc5c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:26:f6:7d:2f:78:f0:a9:df:5f:0b:d6:4c:
18:d2:51:4f:5d:37:79:84:3f:64:21:f6:8d:ae:9d:
44:93:ea:e1:a8:3e:8a:a4:f9:76:74:45:ce:51:92:
5d:50:27:db:3b:e3:30:26:5c:59:3d:7a:bd:28:eb:
13:92:4d:4d:29:53:3a:01:34:84:65:2f:11:82:d1:
76:75:3c:f0:01:f9:66:7a:e5:e5:5a:02:c2:9e:f5:
d2:f6:1c:17:97:20:f8:29:fb:ad:94:4d:07:a2:92:
a8:cd:bb:25:a8:f5:82:bb:37:69:4c:13:39:df:f3:
7c:75:88:e8:33:6b:38:9d:f7:dd:bc:01:4a:b1:a2:
44:49:1f:2a:53:e7:4c:d4:75:b4:bd:4d:61:43:94:
c1:79:3c:63:77:91:d7:a9:e1:4f:1e:00:54:ab:9c:
2e:42:e0:a2:ee:57:cf:1f:dd:88:52:00:dd:ff:ee:
37:ea:29:d1:2a:f7:42:1d:a8:21:ca:21:f8:2b:36:
91:e8:3e:b8:39:6b:dc:f8:fd:9f:92:5f:9c:a0:10:
4f:71:21:d6:8c:14:97:c4:c9:9d:f4:b0:b9:21:59:
47:d7:0a:2b:f6:eb:91:78:08:e9:98:96:9e:b9:24:
09:b7:09:9a:19:80:6d:67:8c:07:f2:35:17:dd:25:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:93:12:C1:64:F6:71:26:3F:5D:6A:31:07:D1:08:C6:4B:C5:C0:B4
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:b6:8a:14:8f:ff:4a:01:2f:a4:29:17:45:b1:a1:f2:8b:
e6:ee:d8:f7:27:8d:44:de:85:45:76:84:58:da:dc:55:a1:d0:
eb:08:d1:f6:48:3f:0e:d3:d0:3d:2d:92:bc:91:d8:8f:9d:6c:
ea:38:ea:d0:9d:6e:20:83:93:7b:22:59:85:a7:3c:7f:e7:07:
43:44:de:a8:44:81:95:25:73:2e:84:56:8a:a0:54:f5:00:54:
20:21:df:93:5d:2c:4d:c2:13:00:96:6a:fd:f4:fb:17:7a:ea:
8b:d0:88:38:9e:94:78:9e:bf:26:f6:19:8b:8a:82:d9:8f:31:
1c:70:ae:2b:a4:5d:32:af:12:a0:b6:33:6a:a0:60:9d:e4:6c:
ac:d5:7c:22:65:04:6f:ef:b8:81:db:18:ae:1d:31:4a:98:cb:
26:63:c4:ee:16:e0:b5:62:4b:98:8b:cb:77:69:44:66:95:91:
46:b5:d3:84:26:ae:69:d4:86:df:79:f2:1a:17:fd:55:e2:d3:
bb:7c:4b:7d:59:f0:a8:32:48:9a:0a:d0:78:ce:a2:c7:47:04:
6d:78:8d:da:b8:7a:a1:a0:79:70:58:f6:88:9f:a8:c0:87:3c:
b0:f6:46:1f:c9:9a:73:b0:c9:fc:1f:ae:c7:4f:e8:be:fc:87:
2d:d6:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:39 2025 by rpki-client