Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: cheDjQDx6HQT3wLPi66Q5JYkLdQexxUjRJCOxlpSC5I=
Subject key identifier: F8:1B:13:BC:F3:00:DA:65:C6:F0:CA:C0:05:A1:AC:AC:82:25:67:38
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 019A7225EC4D177B83858D03E308DBF0752C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 0198
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: yLfhl/bmRmJgFiAqaKRIAIlD/e+BwUC5Lkorr7HBG6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ec:4d:17:7b:83:85:8d:03:e3:08:db:f0:75:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=f81b13bcf300da65c6f0cac005a1acac82256738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:03:3e:b7:ae:63:83:7b:47:b7:56:44:33:
75:71:51:f3:ac:64:4b:05:5d:b4:14:2a:7e:5e:e1:
87:ce:84:9b:8d:3c:37:ec:a5:4b:71:42:36:ff:25:
24:d5:f5:cd:cd:11:3a:fc:c9:72:77:6d:37:64:14:
e4:f6:72:61:94:fa:1a:3a:87:bc:52:15:a7:08:9d:
d8:0f:35:ce:e2:65:94:17:d1:94:40:a5:5e:23:0a:
50:8f:e9:17:24:94:c3:38:aa:b4:40:93:72:8e:b6:
d3:90:33:08:9e:97:e2:52:26:97:52:27:4f:21:61:
36:c1:d5:c8:69:95:f4:fb:0e:39:63:ef:b1:c2:f7:
42:a9:b2:bf:1c:03:b1:fb:b3:f8:c2:ff:63:67:f5:
0c:04:41:ed:dd:a8:63:18:6e:a2:76:79:52:46:cc:
b5:8d:a7:de:0a:e2:eb:2d:7c:a5:6a:09:19:5f:30:
ab:b7:eb:6e:8f:fb:cb:d5:d6:88:eb:9b:07:0a:bf:
35:29:f0:ca:82:9b:24:15:06:f8:e1:29:d3:67:9a:
73:91:5f:14:7c:fd:6d:46:b1:5e:5d:3f:03:e5:6f:
f1:4c:bb:cd:54:e5:c3:b4:05:8a:61:b2:73:d4:25:
23:30:77:8e:e3:0d:48:3b:bd:c5:40:2a:c8:ca:be:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:13:BC:F3:00:DA:65:C6:F0:CA:C0:05:A1:AC:AC:82:25:67:38
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:4f:43:aa:aa:9e:2c:dc:c1:f7:3f:38:c4:41:eb:dd:9c:
55:14:57:9d:ea:ef:7e:0d:90:10:a4:2e:2f:b5:79:4b:28:98:
96:73:a2:e1:6c:46:8f:bf:24:82:a9:3d:cd:1f:ed:25:29:f7:
7d:da:72:f4:4f:65:c8:65:c7:77:ff:8f:12:4e:68:2f:42:b2:
58:be:dd:20:a9:cd:47:95:3c:ee:c9:7b:95:63:71:9b:0e:f7:
e9:c7:e4:5c:ff:92:81:78:bc:f3:91:4c:95:5f:ed:45:07:6a:
02:3b:1d:90:c8:ab:35:f5:92:57:98:e2:9b:70:98:51:43:ac:
b8:f0:97:86:62:06:51:ab:d1:a3:8c:93:15:fb:2f:69:fd:35:
b7:e3:b0:11:7d:04:8f:f0:bd:c4:6b:bd:cc:86:62:3d:d8:73:
fc:7c:66:00:be:f7:21:9c:87:da:4b:44:ea:81:69:be:ed:18:
e0:da:46:07:11:4e:b0:6f:ce:92:10:12:bb:6f:76:ad:4f:5f:
8c:1d:a1:5f:10:b4:9b:cc:73:1a:a3:b0:3d:2b:0a:64:b4:90:
f2:a4:13:15:df:00:e7:12:3d:f0:e8:b2:e0:cf:ed:33:43:37:
f2:16:89:ad:32:ae:dd:a0:44:18:c5:6b:00:9c:92:c9:63:87:
56:0d:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:15 2025 by rpki-client