Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: sQNiGtMYZJl/fDIOHsSCIgN1T+VduPUdTy6ka1jXH+w=
Subject key identifier: A7:F6:BA:6D:00:7A:1F:F4:26:76:F3:F6:BE:08:4F:EF:88:C5:7A:7D
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01974C9FDF576F3BACBB64425B20B32D3A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 23:00:35 +0000
Manifest this update: Sat 07 Jun 2025 23:00:35 +0000
Manifest next update: Sun 08 Jun 2025 23:00:35 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: LR4werdKZsAwy1Ynbr/mttJPJoInOc4btk9LZB78EJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:df:57:6f:3b:ac:bb:64:42:5b:20:b3:2d:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jun 7 23:00:35 2025 GMT
Not After : Jun 8 23:00:35 2025 GMT
Subject: CN=a7f6ba6d007a1ff42676f3f6be084fef88c57a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:a7:14:62:5e:16:da:31:1a:10:7d:59:36:
cd:91:d6:be:37:a1:45:8e:66:c9:04:05:a1:e7:ed:
d8:f5:dd:53:3b:23:20:2f:bf:c7:cf:1b:48:49:58:
4f:87:8b:14:79:a6:b8:a3:49:34:92:50:a2:61:16:
0a:a5:65:5f:8d:66:da:8c:bf:eb:96:95:bf:51:83:
1f:22:92:eb:8e:fb:ea:e2:25:d8:97:88:70:fe:3e:
98:e9:49:9a:32:8d:79:ce:99:39:f7:d0:31:3e:f3:
85:7f:3d:5b:54:75:5a:1b:d1:f2:e3:8d:62:68:b0:
71:8d:53:27:77:ac:52:86:a5:ff:23:40:01:6c:05:
e2:e8:47:0f:e5:24:5f:24:4f:53:14:81:11:14:28:
3e:14:67:8c:68:4e:41:6f:3d:74:04:6b:d2:14:fe:
83:ad:ad:25:6e:c1:91:f1:9a:d1:1f:b5:c6:30:5d:
97:a4:f5:64:f1:c6:19:d7:3a:95:09:79:cc:ff:3e:
60:ab:57:e0:ca:af:e2:19:c3:f2:9a:10:b7:84:67:
5f:99:67:1e:df:b1:fc:89:e7:65:6a:cb:77:80:00:
69:83:66:8b:31:fb:e0:8c:59:d4:ac:be:0c:0b:15:
d0:c5:8d:34:df:09:0e:de:91:94:49:ae:76:15:70:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:BA:6D:00:7A:1F:F4:26:76:F3:F6:BE:08:4F:EF:88:C5:7A:7D
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c3:7e:55:cd:bd:81:9e:02:e8:49:aa:95:68:2b:4c:97:81:
99:17:28:86:67:f5:39:b2:93:f8:16:22:57:ca:76:26:93:fa:
1f:2f:1d:a0:50:35:5d:c9:28:a5:b3:ea:b9:eb:4b:f7:31:d9:
ef:74:74:31:38:d3:1a:6f:65:a4:1d:d2:2b:a9:e7:4a:ca:9c:
49:8b:9b:31:d5:77:d5:32:4f:4a:14:71:53:74:f5:eb:81:4e:
9c:d1:13:0d:a9:be:8b:3c:1b:d3:7a:9e:ae:b6:9a:e6:89:c3:
72:5e:2c:e4:43:dc:47:e3:f9:0c:8a:52:70:0a:61:87:38:90:
00:ed:81:bc:1a:db:19:0b:db:9e:8c:35:fb:b2:02:4e:b7:00:
b7:49:6b:b6:73:9f:a4:55:a8:b0:2e:87:48:be:a6:57:e0:ea:
36:bf:34:fd:f1:cc:95:62:77:2d:8d:83:3f:a3:ee:0c:9e:bd:
e7:00:96:91:3b:5c:30:6c:80:92:f7:f4:08:87:f7:3c:b5:7a:
31:73:5a:3f:c1:13:78:82:37:d7:9d:72:a6:bc:c9:19:9d:23:
5b:86:16:06:d0:af:33:66:fa:b6:30:01:28:04:10:00:ca:c9:
f8:bc:d4:32:26:68:1d:06:bb:24:24:54:ff:24:49:18:41:3d:
85:f2:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:29:12 2025 by rpki-client