Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: D7Z+oqCdaEHhaGXMRJjBtzBbuwX89tEHjouGTHdPVwk=
Subject key identifier: CB:ED:A6:B0:03:E7:31:9F:4A:40:C0:86:FB:2E:CB:BD:AA:44:58:1D
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 019893368B31037A7CDF259DB101A3D8B098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: A0
Signing time: Sun 10 Aug 2025 09:01:21 +0000
Manifest this update: Sun 10 Aug 2025 09:01:21 +0000
Manifest next update: Mon 11 Aug 2025 09:01:21 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: ZC5NV7jBYDadY7R1WLw72Vy43nmfXrtpHnIG+UEXCvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:8b:31:03:7a:7c:df:25:9d:b1:01:a3:d8:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Aug 10 09:01:21 2025 GMT
Not After : Aug 11 09:01:21 2025 GMT
Subject: CN=cbeda6b003e7319f4a40c086fb2ecbbdaa44581d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:4c:ca:89:a9:92:17:40:54:f4:47:3d:e8:
9c:50:f2:b4:b6:6d:d1:86:18:d4:46:09:75:dd:40:
de:0d:a0:4d:1a:48:4e:82:dd:cc:46:83:f0:3a:5c:
49:f0:71:34:30:43:5d:2d:5a:9a:5c:a1:40:19:e3:
ef:1a:45:d8:67:61:a2:23:15:fb:ae:8e:61:8f:da:
da:a0:04:c2:89:d7:5e:00:ba:05:84:e4:dc:fa:6c:
dd:c0:ca:21:9e:70:3f:2f:5a:1c:e3:72:e5:14:65:
ae:45:9f:29:52:e5:2b:32:23:73:46:72:1a:d0:11:
18:2f:9c:65:ec:6e:8b:8b:14:eb:ac:75:af:8e:59:
2f:85:8f:15:38:0c:ca:62:02:9b:3c:be:5d:85:af:
3e:70:8d:6c:26:d7:15:eb:c9:2e:1b:51:b3:ea:cd:
3c:40:93:e5:be:5a:9d:3f:79:34:54:16:05:35:f9:
f4:55:07:55:e7:e7:df:94:1c:04:6b:c3:c7:49:29:
0f:9c:0a:88:c3:5f:b1:4a:15:fe:84:7d:17:93:0b:
51:8e:b7:47:a3:4c:9a:55:c4:22:bd:9c:ed:a3:b3:
8c:a2:1a:f5:33:35:a5:81:f6:07:57:1e:d1:63:7e:
85:d7:6e:c8:98:62:56:04:06:94:27:34:3c:e3:a4:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:A6:B0:03:E7:31:9F:4A:40:C0:86:FB:2E:CB:BD:AA:44:58:1D
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:48:a1:3d:fc:77:d6:98:26:00:f3:5c:6a:da:54:60:79:
f6:44:f4:3a:3d:47:8d:73:de:98:18:50:db:b3:c1:f0:0f:c7:
2e:dd:e1:dc:ae:85:50:85:a8:06:a9:43:ff:86:1e:bc:a8:d9:
e0:86:d7:c3:d2:4f:37:9f:bc:8d:a5:b7:3a:d4:23:ed:52:08:
cc:31:e2:77:8b:26:c7:63:66:3f:90:67:45:81:57:a8:55:e5:
28:cb:02:18:3e:2d:a3:9d:ce:66:24:26:82:1d:20:e7:78:25:
e6:66:07:0c:b3:19:f0:07:63:d4:e0:ff:a4:f1:2a:f8:93:21:
7e:02:ee:8e:9a:c2:14:e9:e4:9f:8f:19:f2:3d:70:80:9c:25:
2a:4c:f4:f1:d2:27:ea:01:9c:13:bd:9d:5f:44:cb:2e:fb:f0:
65:c7:25:50:98:5a:9c:9e:6e:ca:93:a9:20:73:00:f2:12:11:
cd:3c:13:c6:3a:99:b3:b5:c3:84:2c:2f:ec:a9:1e:5c:d7:3e:
90:0d:65:43:c0:2e:b9:5e:49:c4:d8:ec:52:7e:60:a6:9d:0b:
21:fd:3d:de:3f:d8:97:29:fb:95:d6:53:b2:2b:55:cc:0d:b9:
33:f5:96:c2:94:4f:e4:03:db:ab:21:83:b0:08:fa:a5:32:c2:
fb:9f:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:00 2025 by rpki-client