Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: 1zcfo3aKTIdt2Xx8DGySPLrC5hov3vfjq8FElrXwDWA=
Subject key identifier: 53:F5:12:3F:1C:06:87:13:CC:A2:B2:49:94:6B:F9:9A:83:25:BB:B7
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0198D7A8B35E73E3DF91C3ABECAA7DABB5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 0637
Signing time: Sat 23 Aug 2025 16:00:14 +0000
Manifest this update: Sat 23 Aug 2025 16:00:14 +0000
Manifest next update: Sun 24 Aug 2025 16:00:14 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: x16BaiqdmoJChx+fm+/OagXAv0pnFdaRvD+yZSukVIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:b3:5e:73:e3:df:91:c3:ab:ec:aa:7d:ab:b5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Aug 23 16:00:14 2025 GMT
Not After : Aug 24 16:00:14 2025 GMT
Subject: CN=53f5123f1c068713cca2b249946bf99a8325bbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:e4:80:36:8f:e7:86:91:7a:6c:ba:81:ba:
dd:4d:27:c2:69:a6:a5:4e:21:27:58:30:36:dc:ea:
cc:8e:2f:9c:b8:ac:08:3c:9a:c0:cb:eb:72:e1:da:
58:06:c7:77:2e:e6:16:29:bd:58:4f:ee:5f:06:4e:
39:3a:ff:ad:47:af:8f:15:0b:fe:e1:45:cd:12:bc:
07:3a:1b:a0:a7:72:30:24:d6:1c:fa:50:71:34:0c:
a2:38:0c:d9:b4:52:1a:60:d6:b4:cc:23:70:34:f9:
95:fd:0b:42:4e:fb:79:05:60:5a:d4:45:0d:7f:06:
20:9c:e4:37:ef:1b:6b:e6:b2:56:05:71:f6:d6:76:
f7:d4:41:08:ff:6b:69:a1:68:69:a8:47:6d:76:98:
02:6e:6d:ef:5a:66:f5:cc:79:59:40:76:49:7c:59:
5a:41:36:bc:dd:0f:bb:aa:ee:ed:0e:d8:3f:d2:9e:
07:a3:c8:8c:8f:b9:14:4c:72:24:ad:17:03:aa:9f:
8c:ac:9c:c6:89:21:11:68:c5:7f:6e:71:05:0a:da:
c7:9b:d6:88:af:4e:cd:32:7d:8b:8a:4b:46:d6:f4:
98:6c:36:c8:4b:23:72:9d:4f:24:fe:34:ca:ac:ce:
f8:97:53:2b:1c:9c:02:57:7f:f2:1a:3e:29:5b:88:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:12:3F:1C:06:87:13:CC:A2:B2:49:94:6B:F9:9A:83:25:BB:B7
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:f1:9c:30:00:25:32:01:07:a5:23:f4:21:67:4d:f1:d6:
a8:65:44:3e:62:1b:46:2c:75:75:91:e1:4c:d6:f6:8b:f4:37:
d8:13:76:14:a2:01:15:c0:e3:0c:bb:2a:4b:57:a4:39:83:31:
bc:f2:6a:e9:6a:7e:e4:9a:68:61:7a:ab:42:fe:c4:20:27:72:
1e:c0:18:80:bf:36:44:a0:b1:ae:eb:22:89:c9:25:f6:ff:3a:
cf:44:d3:cd:6d:48:93:9b:bf:82:54:d7:1b:4b:fc:38:db:79:
29:7a:aa:91:ef:97:1e:04:a6:cf:53:f3:08:88:f3:21:c5:7e:
b4:58:69:1b:ff:72:6f:c8:40:54:b3:8d:99:cd:2e:5e:46:e9:
1c:49:fe:df:bc:0e:32:ef:96:40:48:8a:55:bb:8a:f2:d2:ea:
67:24:69:68:4e:ef:9c:30:39:44:bc:b3:8f:7f:52:1f:e4:23:
58:6a:f0:cd:37:fa:90:4a:4e:a0:96:95:a6:f0:87:98:02:bd:
9a:26:a1:d5:a3:69:79:c7:6d:6e:af:98:7b:f9:40:8b:d0:95:
56:63:ac:b9:c1:b3:52:1a:a0:de:82:78:a0:09:e9:6b:01:15:
96:86:f2:6d:4d:6f:38:3a:c5:e6:b4:46:bd:51:63:99:e7:ad:
da:2d:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:52 2025 by rpki-client