Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: AR+yg3c9F+QpxjpOml58K82SRWXhgQAtSIjLrlp7NjI=
Subject key identifier: ED:C2:F7:22:33:D1:1E:A3:AF:D8:2D:C0:10:8B:BD:53:2F:CF:05:E6
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 0197C682331002FEAC85A710C3139C682FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 36
Signing time: Tue 01 Jul 2025 15:01:50 +0000
Manifest this update: Tue 01 Jul 2025 15:01:50 +0000
Manifest next update: Wed 02 Jul 2025 15:01:50 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: pKte7oQrfF6uqPgCQh8/6r9B7vP+M/67Jg3CQJ2Ofi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:33:10:02:fe:ac:85:a7:10:c3:13:9c:68:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Jul 1 15:01:50 2025 GMT
Not After : Jul 2 15:01:50 2025 GMT
Subject: CN=edc2f72233d11ea3afd82dc0108bbd532fcf05e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:a2:63:25:dc:d0:55:b3:3e:26:5e:6e:e0:
be:97:99:e9:24:18:60:ef:e2:cc:79:68:4a:ab:3f:
fb:d8:80:31:65:3c:c7:d8:e0:2c:72:c8:39:c7:7a:
68:8e:6f:60:64:c5:b7:b3:da:b4:d5:25:cc:3a:aa:
9c:aa:43:c7:8b:3f:8c:ba:85:85:13:52:6b:14:7f:
a2:19:77:6d:1d:93:08:ac:d7:02:70:e3:d0:ae:ea:
fa:e3:35:f9:86:8f:33:aa:c0:c8:ba:af:dc:4c:8e:
3a:ac:a1:ef:ef:82:cf:5e:60:5b:32:2b:2d:bc:27:
b7:aa:c3:c2:86:2d:08:d5:9e:a0:71:51:9c:27:ed:
f4:1f:77:8e:b7:4e:e2:69:44:72:03:8d:75:27:35:
17:27:1c:df:62:a7:da:95:96:dc:09:1b:5e:de:47:
18:e0:4c:e2:a4:7c:a9:6e:04:a6:12:cd:81:80:5c:
d6:ae:ce:25:ec:ae:eb:ab:f2:a3:a9:b4:ea:60:29:
42:d6:40:b2:0e:37:5f:e2:55:ac:b1:be:97:ce:b5:
f1:10:3b:8f:c3:1d:a9:dc:60:7a:d3:6e:24:01:37:
32:cb:a5:b7:f6:cc:f1:e9:0f:ed:15:cb:c4:30:e3:
b3:7e:b7:86:94:34:d3:85:bb:19:5f:bd:87:09:59:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:F7:22:33:D1:1E:A3:AF:D8:2D:C0:10:8B:BD:53:2F:CF:05:E6
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:46:23:4e:04:81:bc:7d:04:aa:1c:15:ed:dd:68:61:e5:91:
0b:ab:0b:9d:6e:4f:bf:c4:95:72:eb:cf:fb:4f:80:77:f2:1f:
f0:36:92:ca:e6:47:6a:b6:82:82:0a:25:62:9a:dc:39:ca:09:
e1:95:2d:c9:3e:bb:54:26:c5:50:e1:9c:a2:6a:c3:ac:45:5e:
a2:b8:5c:ea:f0:48:13:ee:06:22:ef:d9:39:4d:20:3a:4c:f1:
3c:d6:7a:71:e0:e4:24:07:c2:4f:b6:9c:99:3f:6e:73:d2:56:
8b:de:c0:b6:3a:b9:51:9c:66:67:ed:a8:90:64:cd:67:6a:08:
b8:1c:cb:9e:ad:54:a4:96:8c:15:1c:d0:85:a2:a8:6a:7f:a0:
e6:44:08:f1:40:a5:0a:f3:2a:12:63:ef:9b:55:93:8a:a6:79:
89:09:ad:f5:07:83:22:5f:eb:95:97:e5:7d:aa:69:65:54:b2:
72:b2:c0:a9:74:12:f8:de:f9:ec:54:aa:b3:6b:10:fc:a3:22:
73:4c:73:ae:87:0d:4b:6c:8e:6c:e9:7c:0d:fc:41:47:d5:f0:
3a:ec:7a:e0:0d:ff:62:3f:c4:92:8f:b5:45:69:bd:31:9c:9a:
63:b6:79:b4:c8:5f:1c:ea:60:e5:d8:5d:5e:7f:c8:4a:c8:3b:
ec:b1:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:41:25 2025 by rpki-client