Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: 5wIN9knsnLkeWkuPZgy0f9G18adcImVMImx8oGcRs2o=
Subject key identifier: 33:77:FA:4A:0D:31:49:C1:C6:96:EF:A5:AC:7F:E7:B0:7F:F1:78:B7
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019A503DEBCC30A16ECB3CAC9AB62273B96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 19:00:26 +0000
Manifest this update: Tue 04 Nov 2025 19:00:26 +0000
Manifest next update: Wed 05 Nov 2025 19:00:26 +0000
Files and hashes: 1: 2_aedBK1LsY-Ma99ssfiCM4P-q4.roa (hash: 88IybdKTdXl1XFfeFL40irO5Mp2itxxV1uFlENMQvcY=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: rz0eHQSQn9+QjIoUcezm6mV2pxfnTSGg7+tlqNKAQKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:eb:cc:30:a1:6e:cb:3c:ac:9a:b6:22:73:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Nov 4 19:00:26 2025 GMT
Not After : Nov 5 19:00:26 2025 GMT
Subject: CN=3377fa4a0d3149c1c696efa5ac7fe7b07ff178b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:39:fe:ae:37:8e:0b:4b:7a:30:5e:f9:cb:
d7:2f:97:3e:41:af:25:c8:a5:f2:b6:3e:02:27:ba:
df:a2:1d:07:89:61:ed:a1:7d:89:e5:4d:a9:f1:07:
11:59:33:4c:36:b6:06:d6:46:1d:1b:2f:2b:22:6e:
2a:24:5e:00:80:e8:39:9f:7b:cb:bc:17:0f:08:ea:
aa:df:d6:ec:bf:7d:d6:7e:41:8c:81:a3:7c:dd:83:
c7:36:7a:56:2c:bf:da:10:9f:2b:11:24:d9:8f:2e:
aa:8f:2a:d3:c3:0c:f6:63:04:53:bd:ef:93:f2:e0:
0d:e5:75:48:98:21:9b:9e:ea:d4:e1:e9:a0:00:c2:
03:4d:b4:d0:55:ce:a8:f3:fe:4a:07:3f:bf:9e:c1:
6f:76:dd:68:82:ba:74:e7:01:32:ec:ad:cc:df:58:
22:ae:24:b7:4d:d8:61:6b:cf:90:56:9b:8e:bb:be:
6e:2d:1a:da:b5:22:ba:ab:0d:42:bd:a7:cc:c4:10:
c7:86:a1:c8:ce:1d:06:c1:b9:2e:ad:d4:02:3c:67:
54:3c:cb:45:cf:14:99:9b:33:0a:fe:11:72:ab:66:
0a:e4:a6:71:e9:d6:8e:3b:60:cf:86:03:16:35:dd:
db:d9:51:5c:87:66:02:68:9c:89:22:42:33:76:00:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:FA:4A:0D:31:49:C1:C6:96:EF:A5:AC:7F:E7:B0:7F:F1:78:B7
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:01:61:67:67:99:f5:3b:81:06:33:c3:af:03:88:d7:24:
92:51:52:bb:79:59:70:6f:f4:cd:3d:e1:f0:d1:48:06:41:3b:
f4:49:19:a9:ee:4f:3e:88:ee:27:12:02:cf:5d:e4:da:a0:e3:
30:f4:8e:8e:c9:c7:de:7a:3f:e8:13:16:f6:a7:46:21:54:bc:
de:6a:80:1c:f7:f5:79:1f:6b:97:61:9e:82:42:f0:3d:b9:3a:
ee:71:69:0c:4c:a9:85:ee:2e:1c:69:03:b7:af:55:db:bf:14:
bb:e9:df:bd:6a:a8:c2:09:64:88:e1:61:44:d0:a9:71:90:80:
e1:0a:fc:4c:81:33:ea:ae:cc:14:6e:38:bd:c4:4c:20:5b:1a:
aa:dd:75:7c:16:5e:ac:2d:56:1b:52:a0:96:ce:b0:b6:51:20:
a5:b7:13:41:bd:66:3b:b4:c2:8f:5b:9b:9c:e3:86:80:c6:e0:
3a:69:59:73:ca:53:92:69:4e:eb:5c:a2:16:04:5b:35:63:a5:
b7:4b:74:07:da:4d:6a:bc:d8:70:e0:5c:d4:2e:f1:63:b8:7f:
c9:37:36:22:3c:fc:4c:26:94:9d:07:54:db:2f:d0:6f:7e:51:
ea:68:65:c7:3a:da:7d:54:c4:58:e4:c2:94:c6:ce:5e:03:5c:
91:eb:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:35:05 2025 by rpki-client