Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: JBuEKbEPMCXbz4bftlPHAT8O8b3lT4wxz+GIDuBlVGU=
Subject key identifier: A0:AE:12:C5:07:D0:E6:07:EA:74:D5:B0:E5:44:F6:2B:5F:26:90:5E
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0198D8850A017E52E5B9C8D11DEF6A0FE5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 20:00:54 +0000
Manifest this update: Sat 23 Aug 2025 20:00:54 +0000
Manifest next update: Sun 24 Aug 2025 20:00:54 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: TVGY79/eYmqdwlr0B7IWzcya6dv/9WbtPdBHFp4CbX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:85:0a:01:7e:52:e5:b9:c8:d1:1d:ef:6a:0f:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Aug 23 20:00:54 2025 GMT
Not After : Aug 24 20:00:54 2025 GMT
Subject: CN=a0ae12c507d0e607ea74d5b0e544f62b5f26905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:8d:0b:28:46:d3:6a:2b:ba:5f:9d:e5:2d:
c2:45:69:12:a0:0b:8a:d5:b2:fc:a2:35:a5:89:e6:
c3:42:3a:48:55:6e:69:f6:60:0c:92:db:d3:72:ed:
66:57:5b:88:b0:d8:b9:72:39:91:72:50:18:33:4a:
ad:c7:e9:93:76:9c:e4:55:03:6d:35:6c:86:b3:39:
99:b7:90:11:03:92:7d:47:03:79:f5:9f:d3:7a:b6:
4d:7b:32:f1:d0:dd:b0:1a:4a:fc:89:92:a4:50:7c:
fe:af:68:f1:df:3e:53:85:17:50:67:fd:3a:c5:73:
6c:e6:34:e4:fe:c6:7a:d4:9c:85:89:6a:f6:aa:27:
e9:46:1a:9c:c2:54:7e:5a:53:fa:00:6e:26:f6:96:
53:26:4d:d3:05:5e:5e:6f:27:c0:a8:d7:dc:5d:88:
60:58:a4:73:6d:81:82:01:12:ea:7e:9a:4f:3f:98:
74:92:95:8f:cb:3b:eb:12:96:9f:53:d0:e3:90:68:
33:61:d2:eb:aa:73:63:d9:8f:8a:0d:c0:3a:0c:14:
d7:93:65:d7:a7:23:70:25:b2:86:6c:2b:05:8c:4f:
38:ac:4e:d3:bd:8b:d5:6a:e5:08:2a:06:7e:8e:25:
1d:08:c2:e1:3e:56:e4:aa:25:83:2a:66:92:4c:3e:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:12:C5:07:D0:E6:07:EA:74:D5:B0:E5:44:F6:2B:5F:26:90:5E
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:8f:15:53:82:42:7a:fa:94:ac:c7:0e:2e:df:b5:8a:b0:
bf:44:9e:ec:87:24:3a:e3:49:9d:f7:3f:90:07:d4:59:a1:2f:
e6:61:8a:45:b2:bd:e8:2b:d1:a8:b7:72:fc:77:01:12:dd:05:
0c:27:ed:ac:14:3e:54:7f:fd:01:aa:34:83:d6:97:bc:90:a2:
c2:8b:9d:22:0c:c3:bb:c8:2b:fe:66:3f:2e:48:9a:03:dc:1b:
a1:d0:c7:2c:d1:4a:49:f2:47:59:85:e6:76:ac:77:d1:cd:b9:
dc:85:ea:bf:80:48:bb:81:65:a1:2f:06:b0:0c:52:28:01:44:
3d:9f:83:00:f9:cc:fa:35:ad:9e:4b:eb:43:71:8c:f5:0b:0b:
e4:77:ad:85:43:f2:d0:72:23:6e:73:d8:b0:e8:b3:35:9e:e4:
c9:ac:57:7c:f2:61:df:c7:3c:e8:37:9c:d3:b5:08:5b:59:47:
85:d4:41:fb:e0:1d:02:c8:02:df:e6:a5:d8:00:d6:a3:d5:7c:
11:4e:f5:91:96:62:e5:e0:06:9a:48:f8:3a:99:98:a8:cb:98:
72:a9:c5:10:44:d5:70:67:60:88:28:c2:fc:8f:b6:c2:c1:83:
f4:76:fa:3d:64:ca:63:6d:74:1d:00:e7:01:5d:f0:2c:2b:4a:
92:0a:d1:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhQoBflLlucjRHe9qD+XHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm
MmY5YTkwHhcNMjUwODIzMjAwMDU0WhcNMjUwODI0MjAwMDU0WjAzMTEwLwYDVQQD
EyhhMGFlMTJjNTA3ZDBlNjA3ZWE3NGQ1YjBlNTQ0ZjYyYjVmMjY5MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0WNCyhG02orul+d5S3CRWkSoAuK
1bL8ojWliebDQjpIVW5p9mAMktvTcu1mV1uIsNi5cjmRclAYM0qtx+mTdpzkVQNt
NWyGszmZt5ARA5J9RwN59Z/TerZNezLx0N2wGkr8iZKkUHz+r2jx3z5ThRdQZ/06
xXNs5jTk/sZ61JyFiWr2qifpRhqcwlR+WlP6AG4m9pZTJk3TBV5ebyfAqNfcXYhg
WKRzbYGCARLqfppPP5h0kpWPyzvrEpafU9DjkGgzYdLrqnNj2Y+KDcA6DBTXk2XX
pyNwJbKGbCsFjE84rE7TvYvVauUIKgZ+jiUdCMLhPlbkqiWDKmaSTD5nMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCuEsUH0OYH6nTVsOVE9itfJpBeMB8GA1UdIwQY
MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt
MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4
LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpePFVOC
Qnr6lKzHDi7ftYqwv0Se7IckOuNJnfc/kAfUWaEv5mGKRbK96CvRqLdy/HcBEt0F
DCftrBQ+VH/9Aao0g9aXvJCiwoudIgzDu8gr/mY/LkiaA9wbodDHLNFKSfJHWYXm
dqx30c253IXqv4BIu4FloS8GsAxSKAFEPZ+DAPnM+jWtnkvrQ3GM9QsL5HethUPy
0HIjbnPYsOizNZ7kyaxXfPJh38c86Dec07UIW1lHhdRB++AdAsgC3+al2ADWo9V8
EU71kZZi5eAGmkj4OpmYqMuYcqnFEETVcGdgiCjC/I+2wsGD9Hb6PWTKY210HQDn
AV3wLCtKkgrRWA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:20 2025 by rpki-client