Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: MMabDnzEhOrRT7RBz4M/GRTptme/LKreOA/sHJylAQw=
Subject key identifier: 05:0D:05:21:6A:E7:84:A5:0F:DB:E5:AD:E6:5D:A5:C0:4A:C0:CC:F5
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 0198D6CCD700F6633089360ADA1A90D2638E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: C3
Signing time: Sat 23 Aug 2025 12:00:05 +0000
Manifest this update: Sat 23 Aug 2025 12:00:05 +0000
Manifest next update: Sun 24 Aug 2025 12:00:05 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: SGtYsYJthjbscyy5OilRbIsOZxrQSMfREMG6bUc7438=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d7:00:f6:63:30:89:36:0a:da:1a:90:d2:63:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Aug 23 12:00:05 2025 GMT
Not After : Aug 24 12:00:05 2025 GMT
Subject: CN=050d05216ae784a50fdbe5ade65da5c04ac0ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:b3:a3:e6:d0:8b:5a:98:97:90:e3:e0:6e:
5c:ac:88:ec:f1:2b:74:b6:a9:78:e4:6c:c1:4a:44:
c0:9f:70:82:c5:5b:6b:1f:36:2f:cf:98:70:c8:dc:
56:bb:1b:3b:c8:e7:49:aa:7b:25:da:89:e8:dc:45:
37:94:1a:d0:68:b9:a3:9a:5c:47:a2:89:96:48:66:
51:4d:29:ed:f0:8a:45:ce:9c:89:9b:4a:9a:e3:78:
7e:b5:c2:64:35:da:f1:20:b0:7f:d4:e7:7a:11:ee:
e7:81:7b:5b:29:38:f6:78:47:3f:e1:bb:4c:fd:16:
1c:1b:65:d3:69:63:db:cc:79:a0:a7:2a:fa:ac:8a:
ac:2d:40:64:a0:b1:c9:c8:64:f1:96:d0:44:99:fd:
61:0f:f8:80:98:4c:4a:1c:db:5a:e8:e1:e8:4d:96:
71:3b:b3:98:dd:af:39:9d:51:e0:fd:54:8a:ce:ff:
d6:34:df:ac:de:68:e6:d6:b9:33:3e:c0:9d:3e:a8:
29:5c:5f:e5:b5:32:6c:ca:ac:a6:9e:4a:fa:ea:52:
6f:a3:40:2e:b9:3e:ce:3a:b5:0d:a9:db:d6:08:52:
8e:e0:b2:9b:4b:20:78:6c:06:9e:23:9b:07:2c:48:
c5:e1:6f:d9:d8:53:f4:32:9c:08:2a:cc:ab:77:c0:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:05:21:6A:E7:84:A5:0F:DB:E5:AD:E6:5D:A5:C0:4A:C0:CC:F5
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9d:82:2e:0a:72:f2:39:a2:5d:a2:8b:89:04:a3:f7:7d:de:
ab:7a:82:c1:38:c4:bf:64:87:2f:d6:46:e0:4d:3d:a2:30:a1:
e1:54:60:64:72:f6:08:5b:34:6a:c2:e6:02:b0:c5:64:31:9d:
1c:06:89:a0:3b:fe:c3:e2:c0:d2:a2:95:0d:7f:53:0d:d7:ac:
55:83:af:17:7d:b9:47:2b:6b:33:ca:2f:bc:fe:00:94:d5:8c:
5c:ed:c2:3a:6a:e4:fb:b3:5e:3e:ed:5c:d1:a5:62:07:be:12:
3d:9b:56:aa:88:e5:69:d4:d1:39:52:fb:91:67:d1:c8:7d:08:
e4:f4:71:b8:61:6f:aa:a8:a8:01:2f:a2:4e:5b:95:da:eb:53:
2e:5d:21:bb:27:2e:13:33:bc:02:33:79:84:aa:fe:56:29:ca:
00:a7:17:8c:56:64:ad:bc:75:b7:66:72:3f:3d:c9:c3:ce:b1:
2c:10:58:12:82:3d:e9:f3:d2:4b:98:4b:fa:d9:44:23:36:0b:
39:c0:5d:16:5b:34:46:34:16:fe:7f:00:18:7a:81:b4:f9:97:
aa:23:52:65:8d:55:62:2d:29:16:19:39:27:b1:40:9c:87:ac:
b6:26:4d:c4:6d:a7:b1:27:a8:1e:10:37:44:3c:a2:89:84:2d:
ce:46:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:39 2025 by rpki-client