Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier: iDAGyoz4jz4InSPBrk94CAwvpxVKKMjae/pmWkv07DY=
Subject key identifier: 12:DE:80:38:D2:BD:92:6F:2C:CA:2D:B1:44:FC:16:D8:21:53:98:1E
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019849D3AD6BE12926A362E689FB6ABCF86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number: 0E74
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: mk9Uu2WAjYqY7nDjXiic/05eiNAQaryZvvINcL5/Fp0=)
2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ad:6b:e1:29:26:a3:62:e6:89:fb:6a:bc:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=12de8038d2bd926f2cca2db144fc16d82153981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:69:34:d3:d5:64:9e:84:12:16:91:9f:17:
5f:1e:3a:54:d1:64:ee:49:5a:0d:a2:a7:6a:86:83:
f6:5a:b8:fd:0f:9d:e7:03:20:8f:f1:a4:77:38:71:
52:6d:11:87:de:67:c1:94:f0:80:d2:84:e1:ef:31:
ae:08:9c:52:d1:49:2d:1f:77:15:c8:da:da:50:a3:
a9:47:9f:5e:6a:2f:f0:e4:f1:06:2f:b8:6d:80:29:
0f:8f:c6:0c:cf:48:cc:95:5a:b5:90:4c:bd:98:91:
9a:7f:16:e9:6b:9f:a4:19:2b:ff:c5:18:67:f5:1e:
5f:4b:38:45:50:83:9b:9a:66:ca:9f:41:d3:00:cb:
25:4a:2e:11:0f:30:e7:23:84:ea:c9:48:37:19:95:
85:da:2c:43:ce:cd:15:37:8c:ea:cb:e2:c6:a7:b6:
1c:3b:43:fb:a3:88:4c:51:a4:74:f6:60:7a:c3:12:
28:8e:21:19:56:1b:fe:3e:97:9b:ba:e4:3d:cf:03:
8d:42:b1:78:ee:85:11:0d:b2:1d:25:ba:3e:26:5d:
58:27:83:07:24:db:0d:ee:07:a9:5d:46:75:f7:13:
a2:57:eb:6b:77:94:4f:e7:41:ae:aa:aa:4b:ed:3e:
0d:91:5d:09:2d:4d:48:ef:ab:b1:5a:68:3b:c9:5e:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:80:38:D2:BD:92:6F:2C:CA:2D:B1:44:FC:16:D8:21:53:98:1E
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:aa:21:2a:94:54:1e:8a:7e:1a:74:a3:85:6b:cd:8d:23:6f:
51:c6:27:b8:d1:2c:91:60:b9:c1:b6:56:db:91:4c:d1:a0:c4:
66:82:27:e1:19:a9:34:67:87:80:02:c9:c9:d9:6b:50:70:8a:
c3:a5:ac:e9:79:9c:cd:6e:31:10:8f:17:f6:f3:5c:16:13:bf:
cb:19:72:a6:4e:09:a4:7d:01:e7:3c:62:09:e3:7a:4e:d7:38:
8f:05:ea:25:41:99:17:b4:68:b6:e7:61:2e:68:e3:d5:4a:3a:
bd:30:33:b0:4b:25:80:ec:be:40:db:4d:76:35:cd:e3:17:e4:
85:09:cf:41:33:4f:24:8a:e8:47:f0:74:4a:62:74:12:3b:8e:
02:b3:c8:e9:be:94:1c:31:8c:65:6b:29:7a:35:e5:a7:fc:f2:
c2:8f:a3:f9:3a:4d:b1:2e:e0:ed:ed:de:dc:f9:78:89:4b:ef:
1a:cc:39:2c:f8:80:e7:a0:1d:88:28:3b:d8:88:27:ae:07:6c:
52:5d:76:37:b3:22:7a:1e:b2:4a:f3:b5:01:b2:f5:54:c1:a4:
b6:dc:15:b0:bd:55:e2:e9:15:77:d8:a3:6f:ea:d1:d9:05:4b:
e6:8e:fe:58:99:e9:8a:19:8d:2d:a3:c5:0d:73:c7:1e:da:ed:
2a:b3:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:44 2025 by rpki-client