Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: uUpOsC0bqjD/fPss3PjdP6URqBuPbhSowAtphJftCu8=
Subject key identifier: AE:B7:1F:89:B4:05:04:B1:ED:51:48:BA:EF:10:31:A5:F7:3C:7B:0D
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 01974AE8DF599C111298AB85C1335C96E22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 010B
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: LmyrNyZvEpKhWc1HGWbWI6ncMIxFgD7Va3FIgRG5l1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:df:59:9c:11:12:98:ab:85:c1:33:5c:96:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=aeb71f89b40504b1ed5148baef1031a5f73c7b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:be:1f:66:80:ed:cb:ed:95:67:3d:37:d4:
70:69:99:71:69:e6:a7:62:5a:d2:1b:04:b7:44:6d:
4c:fb:9b:dc:fd:f0:b1:ee:5f:af:a3:57:f1:a4:71:
da:0e:44:25:2b:30:6a:28:66:d2:a2:ea:a8:57:bd:
b9:8f:f7:c4:85:18:65:3d:a9:f2:1c:76:94:5f:00:
dd:be:39:77:ac:a0:be:43:7c:87:ac:2e:3f:d4:86:
03:cb:d3:71:d1:87:b2:61:76:84:2f:0f:c4:14:b2:
10:b2:d3:07:95:33:f5:a9:4d:97:12:6f:d4:61:b2:
e5:3d:b7:f7:bf:25:7a:5f:af:b3:f8:4c:af:cd:09:
18:77:2f:67:0d:63:12:98:1f:fe:ee:20:59:bf:1f:
bb:12:84:9f:42:33:2f:73:f3:f6:93:13:82:8f:04:
a8:81:d9:12:7e:cc:62:52:e9:ed:ed:77:f7:12:8a:
39:97:0e:5d:e4:28:61:3e:ad:4f:76:8a:81:03:8d:
1d:64:2f:e0:2d:ec:35:0c:a9:16:e9:bd:cc:e9:96:
ca:86:31:c1:f7:c3:e3:2d:91:86:ff:e6:7f:9f:8e:
b5:0c:87:9a:4e:76:62:32:eb:b2:fd:35:b2:8d:92:
bd:6c:55:31:4e:81:b1:04:ab:07:16:21:dd:bc:7c:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:1F:89:B4:05:04:B1:ED:51:48:BA:EF:10:31:A5:F7:3C:7B:0D
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:91:2f:59:fe:f3:e2:90:50:78:d8:0c:71:84:12:a2:2e:7c:
cd:cf:3a:19:15:a3:87:ae:6e:aa:71:a2:88:76:98:8f:be:45:
43:a8:9a:2b:e2:6a:4c:fa:af:18:8b:84:05:1d:fa:0f:d3:60:
85:3b:4e:c4:79:7e:da:56:6a:ff:a7:80:d5:d5:72:cb:2d:ac:
c8:a1:63:59:91:37:e6:79:7f:44:d5:59:68:e0:0d:0f:ed:c6:
bb:18:73:dd:1b:94:89:96:c6:6c:91:b6:51:5e:fa:c1:cb:47:
4c:c5:cf:7b:07:91:34:22:8f:ce:35:b2:6a:2d:f6:c2:18:42:
14:56:6d:63:ba:bc:a9:3d:60:20:c7:1f:88:0b:b7:a0:5d:ce:
83:73:9f:a7:80:d2:db:60:4f:e6:10:fc:bc:b0:6c:66:9d:91:
eb:c4:50:8a:68:a1:6f:47:34:9a:98:70:9c:fe:1c:ca:99:cc:
43:01:97:f2:1a:60:c1:23:06:2a:6f:2e:09:93:67:18:6c:91:
72:f3:36:46:25:6f:ae:77:e1:30:e9:d8:16:8d:6c:60:b0:50:
fd:99:41:83:9c:63:34:ef:a6:f0:49:78:26:76:e0:19:0f:9a:
ca:d0:34:71:7b:50:cb:26:50:4d:15:7a:b2:94:63:07:82:d4:
fe:c3:ec:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6N9ZnBESmKuFwTNcluIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm
YWZlMGMwHhcNMjUwNjA3MTUwMTA0WhcNMjUwNjA4MTUwMTA0WjAzMTEwLwYDVQQD
EyhhZWI3MWY4OWI0MDUwNGIxZWQ1MTQ4YmFlZjEwMzFhNWY3M2M3YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGe+H2aA7cvtlWc9N9RwaZlxaean
YlrSGwS3RG1M+5vc/fCx7l+vo1fxpHHaDkQlKzBqKGbSouqoV725j/fEhRhlPany
HHaUXwDdvjl3rKC+Q3yHrC4/1IYDy9Nx0YeyYXaELw/EFLIQstMHlTP1qU2XEm/U
YbLlPbf3vyV6X6+z+EyvzQkYdy9nDWMSmB/+7iBZvx+7EoSfQjMvc/P2kxOCjwSo
gdkSfsxiUunt7Xf3Eoo5lw5d5ChhPq1PdoqBA40dZC/gLew1DKkW6b3M6ZbKhjHB
98PjLZGG/+Z/n461DIeaTnZiMuuy/TWyjZK9bFUxToGxBKsHFiHdvHwTLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK63H4m0BQSx7VFIuu8QMaX3PHsNMB8GA1UdIwQY
MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt
ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0
LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJEvWf7z
4pBQeNgMcYQSoi58zc86GRWjh65uqnGiiHaYj75FQ6iaK+JqTPqvGIuEBR36D9Ng
hTtOxHl+2lZq/6eA1dVyyy2syKFjWZE35nl/RNVZaOAND+3Guxhz3RuUiZbGbJG2
UV76wctHTMXPeweRNCKPzjWyai32whhCFFZtY7q8qT1gIMcfiAu3oF3Og3Ofp4DS
22BP5hD8vLBsZp2R68RQimihb0c0mphwnP4cypnMQwGX8hpgwSMGKm8uCZNnGGyR
cvM2RiVvrnfhMOnYFo1sYLBQ/ZlBg5xjNO+m8El4JnbgGQ+aytA0cXtQyyZQTRV6
spRjB4LU/sPs/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:07:57 2025 by rpki-client