Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: TyaytyGv7VPh/XxeVoqB6BrhapQy7B0foWkQ8Ekwq20=
Subject key identifier: E6:D6:78:B9:98:63:FA:A9:0D:02:66:A8:30:9C:61:86:2E:2C:C2:42
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 01964B8F718EA1661CB91ACB18D2D2534C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:00:13 +0000
Manifest this update: Sat 19 Apr 2025 01:00:13 +0000
Manifest next update: Sun 20 Apr 2025 01:00:13 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: BoZFCKiLNLhf+pcJq1I+tY10x+rp8EwAI9DHQk+QFZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:71:8e:a1:66:1c:b9:1a:cb:18:d2:d2:53:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Apr 19 01:00:13 2025 GMT
Not After : Apr 20 01:00:13 2025 GMT
Subject: CN=e6d678b99863faa90d0266a8309c61862e2cc242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:00:bc:42:41:3d:85:fe:97:f4:45:77:5f:
fa:61:46:11:e2:ab:48:be:12:1a:3b:71:df:82:4e:
0b:2b:6b:b7:a4:61:fe:37:c1:f3:2b:ef:80:e7:d9:
49:1c:0a:c6:46:91:46:ff:c3:ff:42:22:c0:43:db:
22:af:76:49:6e:a3:88:68:74:e5:4d:bd:d1:01:a7:
fd:bf:02:47:2c:64:60:42:ed:c7:6f:46:50:b5:7f:
31:e9:c7:0e:2f:5e:ac:9e:06:cb:cd:e6:c2:70:1e:
13:f8:ed:b6:09:d1:6b:9e:60:22:a6:fb:8e:3c:7c:
01:5e:f9:5f:42:0d:31:74:9f:22:eb:7c:4b:44:03:
29:a6:78:58:85:23:ec:7e:14:26:55:c0:af:c2:7f:
6b:9e:cf:5c:6b:65:44:a0:b3:8d:14:1e:1d:fa:37:
9e:57:77:b6:f7:49:16:9c:ef:f6:6f:e3:9f:81:c1:
82:dd:40:67:36:78:b6:29:d7:94:8b:ab:c7:a0:fb:
aa:44:b0:6a:af:91:ff:59:e7:6f:f9:2b:73:10:c6:
0b:0b:d9:15:af:13:31:fe:7b:d2:83:5a:2d:2f:49:
23:c6:a5:c6:28:60:f8:b0:d4:c3:40:5d:c6:c7:c5:
fd:fa:0a:fa:10:e9:40:48:b6:a1:82:de:7b:e8:d1:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:78:B9:98:63:FA:A9:0D:02:66:A8:30:9C:61:86:2E:2C:C2:42
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e1:0c:f3:b9:2b:53:91:ec:5d:26:4b:76:fe:3d:9f:09:96:
3d:89:be:23:cf:89:97:1e:e7:28:18:74:e0:9c:93:65:8f:1b:
ba:10:5f:8b:7d:d4:a0:ba:ea:58:8b:8f:d2:40:22:1d:42:9e:
f5:53:91:2e:e6:2d:80:dc:73:91:56:32:f5:61:23:21:de:85:
b0:d1:f2:76:ed:30:df:9f:96:92:34:1f:48:4f:e7:79:96:3c:
6b:85:fa:90:b8:3e:c3:f2:f8:b4:cc:ce:eb:6c:e1:99:9e:b9:
ec:9c:6e:47:2d:c3:f2:b9:27:7b:a2:23:a5:57:cd:c0:14:62:
14:bc:62:72:1b:83:4d:bf:58:89:0a:42:87:dd:6d:e2:f0:bc:
73:e4:9a:57:e3:dd:e1:29:b0:28:21:47:eb:a7:47:2f:88:5e:
ea:99:28:cb:15:48:8d:e8:5e:5f:2d:39:37:49:f5:ab:1a:d3:
d8:18:e2:f0:37:46:eb:18:9f:af:98:f4:7f:66:80:d4:4d:7e:
74:8f:4d:47:6e:11:23:07:d4:78:fc:bc:d0:21:0a:b0:87:6a:
b9:a5:14:23:91:e8:64:45:1f:f5:cf:aa:19:7d:ff:9b:1d:1a:
00:ec:8b:b3:b6:81:72:45:1b:6d:d2:45:6d:00:31:e7:ac:f5:
85:30:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:22 2025 by rpki-client