Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: 2RgedGlDcXfnjHU2ZDGCkAIvybZ3ADRhz6salrg645Q=
Subject key identifier: 48:4B:E2:84:58:30:51:16:84:ED:FC:C4:B4:3B:B3:3D:E3:4B:8B:C2
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0197B8C6294098B466E2CE48F3BD3C4368AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 23:01:23 +0000
Manifest this update: Sat 28 Jun 2025 23:01:23 +0000
Manifest next update: Sun 29 Jun 2025 23:01:23 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: a2O8gkWo8wai1b9ySIqL/lusFCM42bNFq0qedzQMfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:29:40:98:b4:66:e2:ce:48:f3:bd:3c:43:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jun 28 23:01:23 2025 GMT
Not After : Jun 29 23:01:23 2025 GMT
Subject: CN=484be2845830511684edfcc4b43bb33de34b8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:9a:07:27:96:c5:6b:47:16:70:2e:6e:51:
38:62:4c:9c:67:9d:1b:72:f0:df:03:7c:62:3d:81:
2b:82:b1:45:23:5f:60:e6:f3:07:f3:d3:83:f7:06:
56:76:aa:8d:cf:48:87:3c:a9:ef:12:ac:cc:b7:e2:
48:7e:9d:c0:70:5c:15:97:cc:31:7b:f8:4c:9a:50:
8e:85:a2:2d:fc:13:b3:8f:81:99:7d:19:46:4d:d0:
aa:b6:21:4b:d8:64:d8:e4:a7:f0:88:e9:03:0d:e9:
9a:5a:86:04:49:b8:74:27:27:fd:ea:09:41:28:b6:
40:07:6d:ca:9a:e6:7e:e4:c6:4c:e2:4c:be:19:76:
70:5a:a8:a3:49:07:95:32:27:6d:f2:23:e7:92:1e:
24:ee:4e:25:3a:cf:15:d2:f8:79:8e:7f:46:a1:85:
39:aa:10:07:c6:c8:f9:78:5a:16:50:2f:93:6e:11:
14:a6:75:36:e0:17:67:26:06:cc:2b:9c:70:7d:2a:
77:21:0a:5e:d7:27:4a:13:a2:ee:0f:e6:9e:77:05:
27:99:19:6a:58:a0:b6:f1:dc:fe:8e:6f:95:9b:d4:
b7:47:ca:f2:ff:eb:e4:69:32:e0:8e:72:50:4b:a4:
86:11:f9:07:58:be:68:ae:04:1c:cc:ee:88:f3:ea:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:E2:84:58:30:51:16:84:ED:FC:C4:B4:3B:B3:3D:E3:4B:8B:C2
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:30:de:a9:4f:05:57:8f:02:4b:7e:83:a5:22:8a:58:ae:08:
dc:5e:d2:6f:12:f9:7e:10:28:7d:2d:a3:88:05:b2:5d:17:a0:
12:13:a8:d4:9e:b5:3f:45:30:ec:21:76:8b:75:0e:0b:78:55:
c4:87:b0:8a:83:85:85:af:6b:69:58:7a:8d:77:3e:8e:3e:20:
7c:8b:46:91:e1:2b:50:8e:88:39:85:9b:bc:11:8a:6b:24:2f:
12:36:8a:42:f0:1f:18:04:3e:34:cd:1d:39:23:a5:83:7f:8c:
27:e3:b7:4b:21:cc:8f:84:63:66:99:88:02:95:4e:e9:73:ab:
eb:6f:b4:a4:e9:67:2b:02:ab:75:d2:c7:8b:24:17:85:bd:7b:
72:62:e5:93:f6:df:10:9b:f9:36:1f:f6:82:f5:36:eb:44:0d:
05:f1:45:db:76:05:38:5f:02:b7:fb:aa:17:b8:42:66:ba:c7:
09:3f:32:6c:fb:0a:8b:85:9e:9a:a4:17:30:6d:d7:84:ea:03:
2c:40:3e:c2:2d:c7:82:36:e6:8e:f9:ea:00:3f:9b:bb:51:dd:
85:ac:af:07:d5:d0:5b:dc:16:eb:ec:20:13:78:16:94:88:13:
14:0e:3b:4d:8a:6b:42:c3:bd:c5:e6:e2:cf:9d:e3:5d:e5:f1:
e3:c1:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:19:07 2025 by rpki-client