Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json)
Hash identifier: rTLi5yrt+p5K5tIyLxwclIUIPhZ9/zQwbOtjGn/PyXQ=
Subject key identifier: 23:6E:41:73:B4:BD:38:01:68:84:D8:F7:B5:1C:FD:FC:1B:63:C8:77
Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Certificate serial: 01977B303D4334ECD9E0A36A14FDB9739C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
Manifest number: 0F
Signing time: Tue 17 Jun 2025 00:00:48 +0000
Manifest this update: Tue 17 Jun 2025 00:00:48 +0000
Manifest next update: Wed 18 Jun 2025 00:00:48 +0000
Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: C/AmfVRxulhJ/GxKPUdK+CnRiVuooGhrZZ9hah2pLZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:3d:43:34:ec:d9:e0:a3:6a:14:fd:b9:73:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855
Validity
Not Before: Jun 17 00:00:48 2025 GMT
Not After : Jun 18 00:00:48 2025 GMT
Subject: CN=236e4173b4bd38016884d8f7b51cfdfc1b63c877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:81:de:e5:38:9b:97:2c:80:4a:be:be:c3:
18:fa:4b:e9:ef:08:6c:fe:cc:bd:e7:97:90:73:8c:
a6:14:a4:24:8e:be:da:0a:9b:3b:89:4c:fc:81:f0:
b1:fd:cf:62:79:de:a5:be:d8:2b:62:26:3a:56:35:
ed:d2:b6:3f:9a:1e:97:5d:60:b9:20:39:cd:c3:ed:
d7:2d:2a:f8:4e:ce:6e:84:d9:c2:22:31:6e:83:ef:
bb:49:33:09:b1:cc:75:42:eb:1e:2b:db:c1:d5:c1:
ea:ed:d1:bd:c6:35:ce:d7:03:d3:2c:24:e3:65:7b:
1b:70:ef:f3:4c:8b:7d:fa:66:05:6c:75:d0:db:b1:
3c:0a:d1:71:b3:6a:c2:54:ce:43:45:d9:84:91:13:
92:c3:a7:25:c7:49:0c:53:b6:c8:73:2f:9b:5a:23:
70:af:54:7f:b8:a8:17:c9:fa:94:40:23:e1:b3:32:
11:35:f9:41:1a:97:a9:a3:e5:06:f8:48:61:ea:b3:
aa:14:fe:38:c6:a1:e9:fe:e1:b8:a9:fd:4e:44:ec:
b1:a0:6f:9e:d4:a7:f2:65:5a:c9:76:cf:d2:4c:a4:
d1:c6:f0:af:4e:d7:94:17:4b:d0:c3:3d:9b:0a:b6:
78:80:bf:a8:a5:e9:7d:1a:55:82:f9:e2:ca:b5:57:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:41:73:B4:BD:38:01:68:84:D8:F7:B5:1C:FD:FC:1B:63:C8:77
X509v3 Authority Key Identifier:
keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:af:fb:5d:a0:77:7d:bb:2f:f0:26:21:64:5e:9c:78:11:b3:
b6:00:75:58:a8:99:51:bc:aa:43:02:9a:e3:fe:a0:50:3e:56:
d6:0e:67:90:b3:b0:8c:c4:6d:78:01:fb:d4:59:33:4e:81:21:
1c:37:b2:1e:9b:0c:86:1d:42:a0:8c:b7:d2:03:49:36:31:92:
49:f9:dc:12:4a:13:d0:f0:cd:3e:ee:72:a3:39:29:5b:01:48:
e7:25:c3:0d:6e:f1:42:50:4a:e2:6d:a8:03:de:8e:a2:8c:be:
58:d3:ab:1a:81:33:cf:3e:ab:f8:1b:6d:fe:13:74:1f:48:1b:
f9:31:c8:f4:5a:bd:9e:6f:52:dd:11:94:d8:a4:37:f5:84:8a:
3d:9f:89:ac:33:12:a1:f7:8d:17:24:ce:73:35:b9:4d:04:b7:
c7:f7:99:46:c8:9e:c0:49:c1:be:1c:0b:5a:66:62:eb:ab:b8:
de:61:2f:7e:2b:a9:fc:c2:37:ed:ca:61:a2:05:9a:62:d9:c9:
a7:22:04:c7:44:97:80:77:53:62:8e:d5:7c:12:92:17:54:6a:
9b:ae:53:54:6d:be:ef:22:87:ed:ac:14:8c:e8:bc:48:ce:ce:
3b:74:b2:c4:20:bc:62:43:1b:9f:c4:08:d0:7e:a8:99:6e:70:
85:ce:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:35 2025 by rpki-client