Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: tZZBWKV3RczrIzrHsiPg0P9XMNHQzvsvL7LEreM7V9A=
Subject key identifier: 63:47:73:C9:85:65:19:76:19:18:BF:B8:FD:E3:73:20:C5:65:07:BA
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 0199FC58ACEBCF4DE3EFD23F55B2F8CA8A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 015B
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: YiCiZoZXen4cx+9V7vTEekm4DIHk8ZAGeFJTTG1wHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ac:eb:cf:4d:e3:ef:d2:3f:55:b2:f8:ca:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=634773c9856519761918bfb8fde37320c56507ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:d3:5b:87:07:0f:e7:aa:2a:a1:85:7b:13:
31:b4:89:a1:53:c1:09:46:bb:a8:1a:4a:62:65:f5:
45:6c:cc:11:04:e5:c5:40:16:e7:eb:62:07:e2:b2:
d2:db:ba:30:68:be:d7:00:3c:1e:c8:45:98:98:5b:
4a:e3:2e:12:5d:70:51:3a:95:39:5f:69:22:de:ca:
dc:0d:74:92:2e:ad:59:f9:60:58:63:e9:ca:dc:04:
8c:6b:28:8a:0b:48:1a:ea:8e:7e:3a:44:a1:c8:9c:
ba:26:4c:0b:9f:51:42:6b:e6:cb:32:50:39:1b:50:
5d:88:31:32:fd:0f:90:31:66:73:f3:49:76:35:ec:
5f:3d:7e:f0:2f:5f:38:12:bd:35:8d:00:ce:b6:08:
c8:3e:ad:18:9b:6a:72:c9:2f:4a:19:8f:f4:a0:04:
77:b6:8e:7f:39:fe:71:72:2e:21:3b:db:99:b7:c7:
c0:8a:6a:31:e5:d1:6a:e4:b1:97:74:aa:4f:25:56:
08:71:4b:e9:6a:80:b8:3d:88:07:85:b9:48:45:91:
f4:ac:97:48:06:b2:c0:6a:4d:f5:34:f9:93:35:bd:
b2:c6:c9:a1:ff:55:92:fc:88:ec:da:9b:3b:06:3c:
6b:1f:a5:89:d1:a5:e1:92:f2:e8:a1:79:4b:38:ad:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:47:73:C9:85:65:19:76:19:18:BF:B8:FD:E3:73:20:C5:65:07:BA
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:b3:ac:44:b1:ee:07:82:a0:0f:d4:2b:24:e7:8e:c1:77:
e7:73:23:94:ba:5a:aa:e6:64:45:51:14:7b:93:9d:c2:2b:de:
50:46:0e:7a:93:da:54:f2:6c:f8:de:8b:e4:3c:31:cb:f3:56:
7f:bf:80:1d:a2:89:31:07:ad:5a:30:9b:b0:ad:dc:b6:46:d7:
78:67:89:1e:a1:b7:f9:f5:ce:31:00:d5:61:55:9c:21:98:b3:
84:6b:fb:d6:3b:bc:ca:61:27:08:de:d5:02:28:bd:6e:df:7f:
a4:1e:6a:a7:29:e8:8e:18:70:7f:39:4a:c9:e8:8f:9a:7c:e5:
3d:46:0e:19:1d:fc:44:36:63:b2:00:0f:83:7c:93:a8:53:84:
45:a1:18:e6:bd:c8:a0:17:4f:68:32:4e:8a:fc:50:c6:7b:c7:
a0:89:30:33:22:e6:5c:5e:29:b3:ef:b9:5c:e6:17:f9:e5:a2:
f4:21:8c:3e:88:bd:24:46:e6:3d:eb:f2:b9:62:b8:ed:b9:c1:
96:8e:d9:70:91:1f:71:c3:c1:93:c0:f8:e9:6c:4a:4f:92:5e:
b3:22:a3:f0:cb:3b:d1:38:7f:7a:f3:24:6d:9a:f8:f5:05:44:
7e:03:1a:f5:92:d1:0d:c4:c2:5b:29:58:3d:36:5d:1a:36:4b:
c3:b5:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:23 2025 by rpki-client