Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: smDvM0apeuvAnesmxVJEDFjHgzWjNJ5D+MYo46oU8Ds=
Subject key identifier: 42:6D:C1:CA:21:A6:81:F1:A1:B7:64:45:28:E2:29:59:33:5C:90:A4
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 0197CA5E92F1FA4C148F63B242B01BEE7342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 38
Signing time: Wed 02 Jul 2025 09:01:24 +0000
Manifest this update: Wed 02 Jul 2025 09:01:24 +0000
Manifest next update: Thu 03 Jul 2025 09:01:24 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: U/Wz/jfZmlCuflaxcSUHdFbBasoRTIgcxKIVFpjhekk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:92:f1:fa:4c:14:8f:63:b2:42:b0:1b:ee:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Jul 2 09:01:24 2025 GMT
Not After : Jul 3 09:01:24 2025 GMT
Subject: CN=426dc1ca21a681f1a1b7644528e22959335c90a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:5b:cb:e0:96:c0:13:fd:61:64:8e:00:af:
72:83:33:b0:b8:b1:f3:6d:24:34:84:a9:0a:51:4b:
93:24:b8:1c:7c:64:34:6d:80:b9:13:68:73:32:0a:
2f:47:ce:9e:74:fc:3f:e0:be:54:84:fb:2b:9d:93:
81:1f:f6:3b:03:bc:a2:04:dd:50:2a:fc:35:77:d3:
58:01:fa:ad:ee:7d:17:4b:c2:ed:3c:ff:03:0f:88:
09:1a:f4:aa:c9:63:f8:28:a8:78:aa:d9:a6:d8:8e:
f4:f6:5d:0e:b3:ac:af:01:3b:73:f0:76:c0:b3:3e:
96:ed:cd:c3:de:76:38:82:0d:46:36:7f:10:4c:e3:
b4:74:eb:93:4f:7d:7c:a1:ae:81:3c:33:1f:fa:56:
39:0f:2c:58:cc:03:89:58:ea:47:34:08:a4:c1:ea:
2f:1a:ac:a3:5e:e2:8a:89:9e:f8:34:e8:47:33:cc:
c1:64:c6:17:96:cc:bd:9e:f7:ad:2c:ae:cc:5f:9a:
70:c7:af:a4:7b:a0:84:73:05:ef:46:c1:2d:83:c2:
3e:d5:50:0a:d1:22:53:14:00:39:3c:f1:98:c5:50:
f5:36:dd:7c:c3:68:f5:e9:ab:fa:7d:e4:cf:9e:f6:
e4:de:31:3d:be:e9:fc:23:1a:b6:d7:c2:d0:e1:63:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:C1:CA:21:A6:81:F1:A1:B7:64:45:28:E2:29:59:33:5C:90:A4
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:56:2b:e2:94:cd:96:ea:07:4b:ca:1c:8d:03:96:85:9f:7e:
b1:f4:51:4a:aa:ba:00:32:1d:65:d9:a9:03:13:16:4d:30:9a:
32:cd:bb:21:b2:2a:8e:10:2f:32:54:e0:f1:ad:77:a9:0a:7c:
e2:b1:73:b1:e9:22:94:30:5d:cf:0f:0d:a9:36:39:db:80:9a:
44:57:2f:98:35:b6:aa:c1:d5:35:1c:68:a1:d7:74:6d:b5:16:
0f:c1:18:47:ee:8c:a5:cf:87:44:af:ce:cf:96:b0:0d:e0:00:
91:f3:a0:67:2b:1f:0c:95:ec:6f:06:94:22:f6:e5:9c:20:e9:
77:e4:86:19:8a:84:fc:59:cd:dd:8b:13:4f:96:40:cf:d3:40:
60:08:e8:46:2a:fa:23:87:27:51:9e:11:93:89:f7:5c:1b:79:
f4:ed:e2:9c:82:f6:3f:46:43:ae:ff:b3:54:8e:9d:fa:90:5b:
cc:b3:05:07:f4:bd:0c:05:27:09:e4:f2:64:54:72:9b:dd:51:
3c:2b:c5:15:82:68:de:00:7b:44:4c:16:02:0d:29:7b:ef:2d:
21:13:1a:7d:ff:bf:a0:be:ef:0e:4a:75:b5:db:7e:af:65:81:
bb:59:69:ed:df:86:07:0f:10:69:e1:6d:d8:54:c5:3d:5e:4c:
a3:6b:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:07:22 2025 by rpki-client