Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: arT46zzt4PG2Z3mPey035H7H0Q5B3TYPF4Nsbio6/uM=
Subject key identifier: 66:47:F8:E4:77:E6:CB:A8:C2:B3:E5:10:0E:69:4E:A5:7C:A6:94:E9
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019A2666D01D80C9F36F98EC06747B877231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 16FF
Signing time: Mon 27 Oct 2025 16:01:03 +0000
Manifest this update: Mon 27 Oct 2025 16:01:03 +0000
Manifest next update: Tue 28 Oct 2025 16:01:03 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: B5RPIyutjPPLHTdSDbIUAwv/51K041YZKL+1BdCFt6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:d0:1d:80:c9:f3:6f:98:ec:06:74:7b:87:72:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Oct 27 16:01:03 2025 GMT
Not After : Oct 28 16:01:03 2025 GMT
Subject: CN=6647f8e477e6cba8c2b3e5100e694ea57ca694e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:df:0d:e4:77:47:b1:90:2c:c0:20:66:cf:60:
dc:68:42:cb:ca:16:d9:13:50:ff:c7:e5:77:ac:51:
26:a7:19:59:4a:97:18:cd:cc:50:a7:33:5b:d8:31:
6b:76:38:66:c0:05:a9:9d:ba:35:dd:6c:a9:2b:6b:
2d:2f:8e:aa:c3:aa:fb:3e:08:f8:ff:92:d3:5b:81:
77:b2:0f:9b:70:4b:82:da:a7:b4:04:2b:d6:b0:38:
3c:2f:ee:c1:c4:ec:cd:ac:3d:c0:71:bf:cf:1d:03:
a7:2c:09:d0:98:72:a5:c1:b8:c3:a6:19:0d:8e:e4:
6c:76:95:7a:37:15:5f:10:97:3b:84:b8:5b:fd:d9:
78:6b:87:c5:e4:20:4b:b7:b3:1b:83:99:b2:b4:85:
3b:36:8a:d1:0b:9a:5e:7b:b6:18:4e:3d:74:74:73:
7d:5b:03:a8:33:80:4c:d5:be:37:ac:94:06:07:6a:
4c:9e:b4:38:89:81:b2:8d:57:6c:34:34:4a:a5:42:
b1:9e:f8:9c:f2:01:96:26:d9:ad:8d:ba:27:65:d5:
1c:b8:74:5c:f9:29:55:98:98:14:fb:2d:f3:b2:6e:
73:d0:21:55:19:ad:59:6d:50:d6:47:12:6f:98:6e:
b3:86:13:6a:81:f5:e7:cb:23:e3:81:2b:5a:05:f6:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:F8:E4:77:E6:CB:A8:C2:B3:E5:10:0E:69:4E:A5:7C:A6:94:E9
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:02:56:ac:c0:85:f6:16:b2:ab:a9:90:75:66:46:0a:5e:
05:8b:94:a2:ef:df:35:b6:0f:be:b9:9a:20:f3:ac:61:6f:20:
78:1e:cf:36:51:5b:41:5d:1c:4c:06:7e:36:b0:17:b3:a6:6b:
33:97:ca:22:3e:9a:3b:99:36:5a:a0:b7:eb:bf:f8:89:f9:c4:
36:ed:27:30:98:3b:dc:4c:9a:26:ca:45:d4:8b:1f:cf:ef:69:
ce:ad:46:f7:98:80:bc:71:2b:29:2e:04:09:9f:bc:11:59:02:
28:b6:52:a9:9d:cb:02:b7:54:a9:f5:3c:88:e3:3f:e2:1b:de:
15:69:84:a2:c8:2d:f0:21:d7:59:54:01:52:f1:ef:81:7d:ce:
1e:01:60:e3:ff:35:eb:da:41:77:e7:33:b4:c4:89:b6:d7:1b:
26:9e:d8:f9:84:98:8e:69:3a:f1:c8:70:8c:b8:31:87:7e:8b:
77:e2:94:df:e8:ef:d5:52:7c:63:ae:0a:f0:8f:13:9e:db:00:
e9:85:ab:09:36:e8:9c:69:2e:3a:ce:9d:85:b6:01:bc:9d:df:
51:6a:17:0a:12:37:85:2a:a6:cd:37:96:bc:1b:84:a9:d7:ce:
aa:17:33:78:53:bb:ae:90:72:2b:d6:e5:ce:db:e3:f9:05:60:
11:42:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:30:08 2025 by rpki-client