Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: CdTp5x6Aeb4Byic7pWZCGjJZJBNmHz62lU3GnJyxn6o=
Subject key identifier: 05:81:72:A7:BE:2A:05:AF:DB:A2:20:6F:1A:D0:7E:C5:AB:94:02:D2
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 0198D473C6EA6CC9224484EB3A46E4DAF2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: 7TjsdJIZqHfDWLS1+1GhR3JuZuPl1ogPv8BJM7UdaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c6:ea:6c:c9:22:44:84:eb:3a:46:e4:da:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=058172a7be2a05afdba2206f1ad07ec5ab9402d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:d5:50:f9:f8:8b:28:1d:05:2b:62:3c:e0:
60:ed:c8:05:d1:3b:32:2d:74:cb:f3:5d:96:67:1c:
9c:bb:4b:95:48:b5:b1:e6:c2:2b:72:e8:77:14:08:
be:40:e9:e4:9e:a7:99:fc:6e:f1:7e:02:6b:65:ba:
7c:2c:e1:0d:94:3a:d9:e0:c7:cd:e6:95:8e:4a:06:
86:79:41:d9:b9:59:60:5c:35:76:88:41:95:30:80:
34:bd:c6:9c:d4:a3:1a:40:f3:ef:7d:ca:c4:e1:02:
ab:a7:62:b3:21:b1:e9:a2:d2:34:10:5e:b4:8a:ab:
be:81:6e:2e:07:8b:10:81:d7:ce:98:72:23:91:5f:
7e:27:76:2a:87:eb:de:fa:0e:1d:f0:3a:8e:54:f3:
db:5d:f1:37:db:23:f9:cf:b3:4a:8b:6d:b5:f1:df:
65:d3:0f:5f:b4:20:60:f3:2b:d8:84:9e:19:18:4f:
3f:3e:58:48:ad:3d:fc:f1:bd:0e:a4:b4:f9:18:6c:
0d:38:53:58:09:11:e9:64:53:73:b2:f6:0f:72:4a:
1d:8e:3c:2d:8d:8c:41:e5:4a:b3:6d:a7:41:66:77:
2c:e7:69:af:67:bb:47:c9:e8:6d:3a:d8:2e:a6:e3:
27:fb:e0:50:1b:5c:a3:fc:a8:07:6e:5f:5a:0f:90:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:81:72:A7:BE:2A:05:AF:DB:A2:20:6F:1A:D0:7E:C5:AB:94:02:D2
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:30:31:4b:db:c4:a9:11:6b:12:47:38:4a:2e:bd:2b:7d:09:
51:ae:67:55:99:0b:c3:78:09:8e:69:af:04:8f:23:2a:ff:62:
80:83:59:ef:36:bd:33:2d:05:1a:73:03:f2:e5:77:95:c6:6f:
6e:ca:bb:c1:e6:56:3e:9d:2d:ce:bd:23:20:ea:b4:ea:fb:45:
b8:cc:c2:09:5a:98:3e:08:60:d8:b9:29:02:2e:be:4e:34:22:
2b:8f:e3:eb:0a:3f:c5:51:b2:8d:61:c7:33:b3:f6:58:fb:20:
39:eb:6a:b2:32:f2:2a:75:39:8f:86:46:69:49:66:17:91:d4:
08:9d:0b:03:26:38:97:4c:14:0f:b1:5c:9b:17:46:26:c5:7b:
6f:77:34:01:f0:4d:d6:44:11:2d:6e:19:e8:fb:2a:61:14:16:
02:f7:fc:b1:0a:d4:41:e0:c7:93:cd:fa:88:35:f2:87:ff:e2:
8e:df:1d:d7:30:0b:1b:46:c9:71:97:55:9f:c9:fd:61:98:0d:
e0:b9:4b:c5:16:6a:e2:cf:68:0f:75:54:23:73:cf:ed:9c:b9:
15:ab:06:e1:d8:a8:86:4a:52:d9:df:3c:01:b0:12:e5:1e:97:
97:22:09:96:d9:50:84:81:5a:21:f1:3a:c9:ac:ff:f2:0a:a2:
d1:8f:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:07:12 2025 by rpki-client