Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: DFD3PsxSMvwQj1CmQZZ891DVWxVJ0kKgFEiyx84FeQ8=
Subject key identifier: 77:13:95:61:A0:DC:E5:80:1B:56:5A:91:11:D2:BC:2D:98:AB:97:16
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 0199FBEB0EA3C005582CB39F1ED46CD1EF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: yyVUIdJqan0ry1niQm2WoG7VfqScWwHFvJCQDVcrD3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0e:a3:c0:05:58:2c:b3:9f:1e:d4:6c:d1:ef:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=77139561a0dce5801b565a9111d2bc2d98ab9716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:6e:47:36:a8:9d:8f:a1:ab:3d:ae:05:df:
30:1e:6b:d6:28:2b:1b:bd:58:ee:51:26:22:bf:3c:
27:8a:d8:d7:5a:83:fe:06:21:51:4f:23:b3:db:c9:
a5:24:7f:66:36:60:e2:42:9b:48:63:30:90:6b:67:
29:91:2f:3f:71:d3:bb:94:94:d0:19:18:bd:f3:61:
8e:dc:cf:60:cb:2d:d9:c5:d6:b3:cb:6c:93:a6:52:
d0:ca:db:78:a8:2c:c8:53:ae:97:c9:9d:50:a3:ea:
59:14:42:97:1e:20:3f:0f:a7:7c:03:bf:c2:e8:e5:
ca:4b:71:39:46:63:32:2b:10:89:5e:68:d4:39:06:
b3:85:2a:95:75:14:5e:bb:4a:c9:6e:39:2f:3d:52:
c0:17:87:07:4a:5c:ff:72:29:30:42:8c:a2:7e:b6:
2d:29:25:80:01:7b:35:9d:ab:a9:84:5e:bf:cb:8a:
c8:a0:b8:99:d2:b2:4f:f8:40:db:76:a7:e0:41:a1:
be:d9:e9:6e:56:3e:49:04:63:76:80:a8:2c:7d:c5:
55:97:4c:d8:9e:92:00:82:a1:f6:b7:d7:1e:0c:12:
80:a3:51:7f:27:78:ce:c6:6b:b4:49:2a:1b:61:ad:
81:e9:93:3e:c7:e0:eb:48:d9:3e:bf:66:92:17:de:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:95:61:A0:DC:E5:80:1B:56:5A:91:11:D2:BC:2D:98:AB:97:16
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e0:88:f2:4c:46:cb:16:c3:5d:3a:d4:3e:4e:cd:59:9b:1f:
bd:31:cf:e6:b7:44:94:05:9f:92:24:86:f0:2a:64:ae:78:34:
30:e0:01:ec:9e:ff:e8:a6:fe:6b:75:ee:7a:c1:39:dc:a2:dd:
ae:f6:d5:1e:a9:23:e7:e0:f3:72:c6:19:90:c6:08:83:ea:0c:
ff:9d:64:d5:e4:86:3d:b1:f5:6e:0e:bd:2c:3b:87:d8:fb:10:
28:32:e8:23:b3:20:d1:04:9d:b3:16:20:1e:41:8f:32:e3:36:
74:db:58:1a:97:60:b2:12:8c:a7:78:4d:f6:7a:84:08:fb:76:
19:94:8e:b2:c8:b2:55:0e:13:31:78:23:eb:0b:62:ac:fe:76:
b1:ea:d3:f8:e5:b2:22:a5:70:79:53:bc:55:0d:79:f5:1e:a3:
62:f4:1c:15:08:99:43:9c:37:20:59:60:07:8f:d1:fe:b2:73:
ca:d2:53:01:c3:48:55:4d:b2:4f:e7:ef:3b:68:5f:a3:0d:84:
ae:89:5e:b0:e4:8b:ff:fe:9e:3d:64:52:7e:22:c5:6a:7c:a2:
d7:f3:b5:18:43:24:c1:f6:c3:cc:b6:a4:21:e8:33:73:ff:62:
25:fe:75:bf:6c:3c:84:4e:de:55:89:93:b7:39:f2:c6:77:f6:
6b:bb:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:24 2025 by rpki-client