Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File: xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier: dckry4Kszqo9Moz/Oc3sCNV26pjV/+nY//D0eaEIh6E=
Subject key identifier: 67:73:04:03:8F:16:C1:8B:1C:47:8C:BB:CA:66:05:A5:F9:54:45:26
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer: /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial: 0197B6A0B2110DAAE300AB486EE836E3A69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:13 +0000
Manifest this update: Sat 28 Jun 2025 13:01:13 +0000
Manifest next update: Sun 29 Jun 2025 13:01:13 +0000
Files and hashes: 1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: p0Kyr1Ds1+3M1H1q2ltIM8X0qM6/EoQUjFBpT481sfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b2:11:0d:aa:e3:00:ab:48:6e:e8:36:e3:a6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
Validity
Not Before: Jun 28 13:01:13 2025 GMT
Not After : Jun 29 13:01:13 2025 GMT
Subject: CN=677304038f16c18b1c478cbbca6605a5f9544526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:73:8c:08:9d:1c:45:20:8e:8d:d4:c1:5e:30:
a4:80:cc:e1:0e:4e:ef:18:02:0f:ed:3e:87:7b:96:
1b:9e:15:e7:ae:85:bd:5f:a4:94:41:64:f9:44:7d:
69:bf:5d:43:c5:79:d3:32:f2:b2:b6:ad:ce:42:dc:
2c:f3:57:f9:c5:c4:77:19:5e:3a:42:c6:5c:19:07:
6c:5e:08:8c:75:bc:0a:db:84:c6:26:1b:a3:e1:56:
df:71:d8:79:69:3f:8b:8e:b7:f6:b7:a3:bb:a0:12:
2d:cc:2e:45:ce:7b:73:97:f5:ae:da:83:de:9e:5b:
83:96:e2:7c:b8:29:3b:61:53:ec:8f:ea:90:dc:84:
28:3a:29:83:f6:a8:d8:19:06:9c:2f:3f:a9:ba:22:
73:bd:a6:fc:e3:c0:2b:6b:de:36:85:8c:43:56:2a:
84:bb:bd:11:c3:43:80:db:2c:d8:e1:65:e9:8f:2a:
29:c2:cd:f7:00:ec:9b:44:89:e8:38:3b:44:ef:8a:
0a:5a:56:d1:24:be:78:be:95:9a:04:27:91:ac:5b:
b8:0c:86:ff:c1:bb:ef:6c:03:da:b1:f0:ce:6b:09:
8f:2e:20:df:e7:7f:43:d9:fa:46:31:d4:46:64:c6:
e8:38:5c:4d:b8:b4:b5:5e:5a:0d:00:cb:08:60:94:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:04:03:8F:16:C1:8B:1C:47:8C:BB:CA:66:05:A5:F9:54:45:26
X509v3 Authority Key Identifier:
keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1f:a5:94:0d:f4:43:68:ff:cf:dd:b2:49:90:3c:3e:6f:dc:
51:ef:c5:b7:04:88:eb:de:21:56:a7:c3:77:2a:79:57:df:de:
28:d4:e1:04:bd:c9:9b:e8:94:b7:17:da:34:09:d9:33:f4:d6:
1a:ec:b7:7c:99:85:2e:a7:1d:19:05:93:08:28:8c:0c:df:92:
88:34:d8:25:5d:1b:d4:30:04:19:9a:69:b1:b7:fa:6f:e4:40:
78:80:bd:6c:82:e5:0d:1d:7e:c4:7f:1e:4b:3e:d8:68:ec:47:
b6:2d:99:69:ca:3e:15:df:82:35:90:f5:30:bc:fd:d3:0f:83:
cf:c2:af:a2:c3:cc:13:5b:93:cb:7c:26:90:03:ed:88:b6:bd:
e6:0a:11:de:f5:59:e9:d3:3c:2d:cc:94:0d:44:00:08:30:21:
91:9d:2d:8c:06:40:a3:30:42:30:eb:c9:9d:d8:c5:63:26:c5:
7d:31:7f:44:17:fa:cc:57:ed:ae:17:74:6f:02:e2:ed:02:c4:
76:5f:f4:46:eb:b3:73:56:fc:04:2b:a3:d0:86:13:8b:cf:77:
18:eb:94:8c:93:9a:e3:fa:ae:69:bc:ff:60:ce:c5:3e:eb:6d:
a2:6c:95:69:1e:62:ba:89:47:31:03:40:92:6f:e6:38:de:23:
c9:ac:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:22 2025 by rpki-client