Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: BvCkJJ3bhdEaOm1swsDpyvgX3HXix1SwNUSEXVMpF6Y=
Subject key identifier: A6:2C:CB:D3:9B:3A:DE:9D:A0:FC:24:A5:5D:BC:3F:2C:3C:35:64:7D
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0198499BD101A43EA43387BD1561F762EBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 02:00:04 +0000
Manifest this update: Sun 27 Jul 2025 02:00:04 +0000
Manifest next update: Mon 28 Jul 2025 02:00:04 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: Ol5vfmbhHFLFi+LSDBZJj0+I1MP3ZWsYLwr1dNz7geg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d1:01:a4:3e:a4:33:87:bd:15:61:f7:62:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jul 27 02:00:04 2025 GMT
Not After : Jul 28 02:00:04 2025 GMT
Subject: CN=a62ccbd39b3ade9da0fc24a55dbc3f2c3c35647d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:9a:4b:a7:63:25:d9:b7:84:f7:b7:ff:f5:
78:01:42:25:3f:40:2f:ea:12:1d:c5:59:06:f4:99:
52:0e:80:69:1f:f4:6d:d7:40:95:c9:11:f7:3c:b7:
60:76:d4:5f:df:df:fa:fc:aa:26:6d:7d:94:fc:d8:
62:7c:29:a7:bc:6a:0d:ce:54:eb:e1:b6:5f:fa:e7:
0e:8c:1a:94:6d:d6:53:74:0f:d0:f1:ac:c2:63:31:
f6:bb:b2:66:0b:a4:db:d0:ee:c3:96:a5:0d:18:f5:
d5:36:f0:ec:91:00:ea:cc:fb:4e:1b:9e:b9:69:38:
64:3a:cc:82:6b:02:72:de:47:7a:b0:45:df:65:fe:
35:ec:f7:39:28:66:d4:c7:b3:e1:80:41:cc:cf:2f:
27:45:62:27:17:a2:81:6b:81:8f:ca:47:9d:d4:78:
a9:51:04:04:3e:69:47:19:aa:a2:26:dd:00:46:50:
ab:49:03:c2:4a:0f:2a:4d:00:b0:92:22:3b:be:ea:
34:db:6f:2f:82:95:b0:99:ec:d4:e7:d7:54:0c:d4:
cf:0b:32:29:c3:7a:ab:ee:cf:46:c4:b6:82:7d:61:
16:e0:57:d2:5f:f9:04:d7:3a:de:b3:bb:20:b7:18:
86:61:77:cc:0b:8b:47:ff:1e:c9:6e:79:5a:50:39:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:CB:D3:9B:3A:DE:9D:A0:FC:24:A5:5D:BC:3F:2C:3C:35:64:7D
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fd:e9:6a:a5:1a:7c:61:75:af:b3:67:86:66:23:66:5d:db:
ea:ea:ea:59:24:7f:d1:4e:45:da:3a:21:17:eb:86:d1:51:87:
58:b3:60:87:11:f6:ef:36:0c:f9:6e:c2:57:2d:6d:ae:98:53:
a2:e6:bc:32:2a:e8:32:1d:7b:93:ff:a9:00:7e:9a:de:c6:fe:
a2:39:5d:47:52:48:fa:2e:05:f3:d8:4f:ff:0a:8c:ae:ff:59:
61:4b:57:56:2a:6f:71:1a:74:33:37:5a:59:91:5e:4d:01:1d:
ab:02:fd:27:58:c9:8f:9f:da:32:82:bb:02:bb:16:7a:5e:3a:
d1:0e:fb:0f:35:b8:3c:f4:dd:37:4f:ee:0d:10:0f:ce:73:20:
14:e8:d0:1a:a0:84:c6:e9:f6:5d:30:9a:a2:a8:68:f9:57:0b:
47:50:fe:6b:4e:ba:4a:69:62:2b:4c:c2:e8:a5:02:14:36:e0:
6c:72:b0:2a:54:d0:c8:94:59:d2:ce:cb:e5:8d:3d:43:0d:de:
21:da:7d:13:e0:a4:7e:86:93:2c:16:46:d4:4e:4e:c7:75:95:
2d:e5:0b:02:1a:20:41:9b:47:9d:51:2b:91:ec:a5:54:13:f9:
64:47:9f:91:d2:fb:64:ce:00:3f:54:94:e9:1b:8a:65:0d:94:
49:14:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:39 2025 by rpki-client