Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: tEsH5Zlbi/lQHhT6poYVKGvK+o8eLlkZ+GxwhwBSROw=
Subject key identifier: 1A:6F:F5:EE:ED:FE:91:EE:27:76:0C:05:7E:99:40:72:E3:7E:91:F5
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0199372614D207A56DA617CF01B9E9BFCF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1683
Signing time: Thu 11 Sep 2025 05:01:06 +0000
Manifest this update: Thu 11 Sep 2025 05:01:06 +0000
Manifest next update: Fri 12 Sep 2025 05:01:06 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: wVZz1pq8cR9WMFA/9ytVf+s48pI/Dn9SrUZxkrG7LNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:14:d2:07:a5:6d:a6:17:cf:01:b9:e9:bf:cf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Sep 11 05:01:06 2025 GMT
Not After : Sep 12 05:01:06 2025 GMT
Subject: CN=1a6ff5eeedfe91ee27760c057e994072e37e91f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:48:89:12:a5:a9:08:ac:9c:35:e1:0c:4d:
7c:7d:3c:a3:7f:60:f8:e5:8f:d5:32:3e:dd:00:08:
04:66:53:34:07:e3:23:8d:92:df:a3:5b:43:45:07:
d3:f9:cb:b7:07:8b:85:d4:26:5d:89:c3:0c:95:d0:
f4:8f:39:5b:cd:2b:d5:8d:a7:55:f5:da:0e:bd:d2:
ef:fc:4f:61:38:2b:63:43:b8:18:c9:d3:c0:2e:fe:
50:46:34:f0:b1:dc:64:3d:7d:d6:e6:15:56:bb:28:
5e:95:3c:6a:70:35:ae:6a:7a:5a:81:07:a9:a4:c3:
41:ee:19:c9:fb:04:c5:b7:79:12:8f:10:35:99:f9:
35:c7:eb:b6:dc:6e:48:3e:c7:75:20:0d:cf:39:e8:
f0:be:31:84:c2:2e:4d:e7:ae:47:a6:a3:43:46:1f:
4f:26:b6:38:c2:a8:f8:88:3d:2f:09:29:2f:17:00:
46:ff:07:ae:f8:bf:e3:a0:16:b6:e9:4d:69:d4:fe:
e4:7e:41:ae:8d:a8:93:a6:d9:69:9b:e2:0a:06:a2:
d9:41:ad:88:09:7d:17:f3:d5:39:54:88:10:5e:b0:
eb:8f:f9:b3:b8:8e:ad:b4:d3:c3:12:27:a2:fb:77:
3f:d3:c1:1c:03:c1:7d:c3:cf:3a:54:bd:b0:14:64:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6F:F5:EE:ED:FE:91:EE:27:76:0C:05:7E:99:40:72:E3:7E:91:F5
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:69:ee:12:93:e7:12:ea:77:9b:7a:6d:ae:e0:e9:96:fe:
fa:fb:ac:b2:7b:f8:a2:55:13:d5:a5:4b:34:ae:b4:3f:9c:e2:
87:96:64:60:66:d5:53:0c:cb:9c:2d:e4:05:03:72:09:00:c8:
e1:9d:8a:cf:4c:06:ee:89:81:4f:42:25:25:38:7a:9a:dd:9e:
67:fb:c0:ae:01:39:26:a5:d2:cf:8d:4d:8f:78:ec:4d:2a:03:
b0:e2:ca:19:ff:83:f7:d9:ea:e2:b4:71:2c:bb:56:86:31:f5:
25:c3:2a:05:99:c8:43:74:fd:7b:e3:50:f0:07:09:82:1f:d8:
30:ae:f8:05:ae:20:58:67:7e:7a:d5:f1:06:fb:9c:85:b6:c0:
33:8b:29:c7:3a:cc:91:6d:f1:9a:40:2b:8b:5c:41:63:87:5b:
cb:08:86:ca:6e:82:55:9b:52:a8:45:07:46:39:a2:e9:df:76:
28:de:d6:41:6a:ff:a7:c4:8d:22:2d:a7:26:8b:09:57:83:18:
2e:ac:6d:d6:d4:b7:9c:9b:20:0e:73:57:44:c2:0b:b9:1d:16:
62:f3:77:5e:a5:b5:58:69:f6:5e:32:2d:12:f5:2c:45:49:04:
c7:66:44:45:d1:2d:d6:f5:91:1b:e8:c1:fe:19:f7:63:ea:4e:
96:1a:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:52:06 2025 by rpki-client