Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: xGdqI/yYUEwIv5wlKMhNduB+mu4hTIE6e3vGrMcqYYw=
Subject key identifier: 0F:E2:17:A9:5B:D6:68:96:82:E7:C8:13:50:1E:03:7C:78:53:54:35
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 0199221EDB61A44E2CC5DD5B63444D276EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: EA
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: W/R1ZseIsN9eBvAuOY224yvx3RPR4q8krjn5ids/zDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:db:61:a4:4e:2c:c5:dd:5b:63:44:4d:27:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=0fe217a95bd6689682e7c813501e037c78535435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:37:44:14:69:e8:91:52:ca:c0:10:19:a7:
cd:6a:50:7a:5d:84:cc:58:a2:4f:43:30:3d:96:9a:
6b:90:f7:52:61:6d:76:50:9e:71:b7:c3:4e:46:81:
30:e9:40:3b:2e:65:72:e0:b6:71:af:a3:65:c9:53:
1c:b7:74:29:8c:d8:3d:42:25:11:ce:3f:45:f0:37:
2f:50:aa:2a:c6:98:87:80:f2:ad:1e:5f:47:a8:a7:
3b:c5:9c:4e:97:7b:b6:ef:11:76:c8:71:96:dd:d5:
0c:eb:44:b3:7a:04:fc:24:3a:78:b0:b4:b5:a3:cb:
4e:01:1c:22:92:1d:86:3b:4e:14:c4:5b:d5:0e:e3:
bd:5b:69:4f:f7:7e:48:00:b1:5c:2f:70:1c:e6:c4:
63:9c:2a:bd:76:ec:7e:23:11:4c:9c:83:5c:40:54:
72:22:3d:cd:20:36:10:f1:b1:a3:b0:03:c8:98:aa:
eb:a9:1e:a2:c4:b6:86:35:30:2d:b0:2b:6b:58:31:
ec:c1:27:c9:79:fe:57:30:a6:13:49:93:93:9f:c4:
c7:b8:e8:43:13:69:68:18:de:c8:de:cd:62:78:fc:
8f:73:25:7a:cd:e0:0c:2e:8d:4f:b2:6c:c2:16:85:
7a:85:7d:46:d4:2f:30:23:29:3e:75:60:23:6c:53:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:17:A9:5B:D6:68:96:82:E7:C8:13:50:1E:03:7C:78:53:54:35
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:97:32:e7:b4:e0:d2:13:6c:bc:67:d2:1c:d2:09:03:e0:dd:
1e:2c:a7:d7:cd:63:1b:a9:47:2a:59:75:0a:df:d0:0d:44:92:
28:0b:ea:59:fa:50:93:86:3f:a9:7c:26:e8:e8:c5:3b:97:81:
79:c5:89:fa:f8:c2:d4:ca:12:05:74:a5:5b:ac:76:75:c0:a8:
1b:7a:cc:f6:50:b8:ca:37:c6:9c:e4:75:b5:64:90:b2:7c:12:
de:b0:3c:06:71:d7:6b:33:32:68:fb:8c:f7:7a:64:62:3e:2a:
2a:a2:33:4c:5a:d2:c0:c9:06:8f:1a:71:2f:70:45:5f:0a:0b:
82:56:cd:b4:c9:eb:a2:c7:56:96:35:ee:6b:fd:da:fb:ec:be:
e4:3a:c0:96:97:b6:ea:ec:12:6f:24:e2:aa:4c:2c:08:97:72:
52:7d:a7:5c:52:65:e5:6a:ce:b8:4c:a2:be:06:a0:b2:a1:64:
0e:63:60:80:d4:cb:d4:2a:7c:2b:1d:61:70:1d:a9:dd:5f:cc:
3a:3c:5e:19:13:b1:40:d2:12:58:a9:7c:d0:e0:19:4e:9d:1e:
77:ca:b0:51:56:bc:bf:4d:9d:dc:12:51:55:a6:d2:00:2f:2d:
9f:c6:60:09:1a:bd:eb:72:35:99:94:06:07:02:23:89:41:ba:
1c:31:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:32 2025 by rpki-client