Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
File: CyKQB_XS3fo_clwPpFLEe22dhU4.mft (raw, json)
Hash identifier: tj35OSWhWIs1u4FJElIz536ox0eum9Eps0Om+B5QOQk=
Subject key identifier: 4A:03:9E:CB:0E:03:8D:C3:A4:7E:0B:B7:1B:CF:82:1B:12:C0:C7:20
Authority key identifier: 0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
Certificate issuer: /CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Certificate serial: 01984966B47C86F1FEDC502E3E08159E0D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
Manifest number: 0747
Signing time: Sun 27 Jul 2025 01:02:04 +0000
Manifest this update: Sun 27 Jul 2025 01:02:04 +0000
Manifest next update: Mon 28 Jul 2025 01:02:04 +0000
Files and hashes: 1: CyKQB_XS3fo_clwPpFLEe22dhU4.crl (hash: 2S+jJZcO/wDJ8DTncB2+Y5QykKkCrrS9s9hB+leWnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:b4:7c:86:f1:fe:dc:50:2e:3e:08:15:9e:0d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Validity
Not Before: Jul 27 01:02:04 2025 GMT
Not After : Jul 28 01:02:04 2025 GMT
Subject: CN=4a039ecb0e038dc3a47e0bb71bcf821b12c0c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:45:47:a8:2e:20:bb:7b:cd:95:0f:e0:b7:
78:ec:c3:4a:af:7e:b6:0a:7b:76:cf:3c:70:3f:ca:
40:09:0e:16:cb:8c:65:d3:dc:62:a0:cf:18:1d:f3:
03:b1:dd:fc:5a:4e:ec:51:dd:dd:1d:e0:80:02:7f:
9a:6e:5a:9d:da:02:67:59:f2:b8:2e:e5:91:2f:b8:
8a:ad:64:df:87:d4:76:32:a6:b1:e9:85:43:31:e6:
35:d3:ec:a6:b9:2b:41:88:6a:90:90:bd:c3:b7:b6:
6d:df:20:d0:49:b1:dc:fb:8b:73:32:a6:bf:5a:0a:
18:f7:d7:9c:25:0b:52:5b:bd:9c:b1:53:85:53:a3:
49:0b:0e:01:f6:61:24:ec:cf:13:5a:41:59:5d:04:
7b:2a:3f:62:93:f5:aa:44:6a:38:5e:b9:54:69:ad:
a8:28:40:12:51:90:f8:ba:a7:55:25:78:5f:fa:6e:
20:04:89:59:d2:d0:75:7b:dd:6d:2a:e7:fb:0f:87:
f7:cb:59:21:2a:66:3d:60:7f:9a:b4:5d:15:a9:ef:
73:de:db:43:50:c8:de:00:db:cb:e0:92:81:0d:8b:
ef:8a:c6:13:fe:18:b3:3a:a9:ca:3a:dc:58:37:cf:
93:76:d4:cd:7a:00:94:9f:c4:e0:f6:44:e0:a1:be:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:9E:CB:0E:03:8D:C3:A4:7E:0B:B7:1B:CF:82:1B:12:C0:C7:20
X509v3 Authority Key Identifier:
keyid:0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:7c:55:a0:9d:46:cc:59:14:f7:d9:db:b3:9f:b5:05:78:
2b:29:78:fc:d4:23:d5:2b:a8:31:5a:b6:0c:4a:cd:6b:40:68:
1d:f5:36:75:04:0f:1a:c8:69:7a:a4:ac:0e:ae:59:4e:09:91:
85:1b:44:c3:da:d2:ff:e0:a6:d3:ea:41:e8:87:e3:ad:5d:74:
32:c3:5b:10:83:11:63:b7:f9:43:0c:22:b8:7b:16:22:bf:ce:
f5:fd:10:2d:0b:d7:db:22:45:6a:28:70:7b:18:dd:7d:75:dc:
16:42:ec:64:35:69:7f:c7:f9:cc:aa:69:86:c2:43:1e:26:6c:
19:69:8d:46:e0:72:60:b1:ce:7f:fe:7a:0e:46:b2:ed:5c:de:
ac:ff:1e:a5:db:25:74:da:68:c7:f4:20:4b:4a:97:92:e8:17:
09:df:fe:53:d0:7a:9e:79:01:3a:b7:b1:ad:21:f1:f5:68:2f:
ac:66:ee:48:c8:cf:1f:06:7f:41:d1:b8:cb:b7:4e:eb:0a:cd:
d7:ca:7d:de:cf:2c:b4:d8:64:ac:85:6a:1f:e6:01:a9:9a:d1:
1c:a2:65:6d:e8:80:26:37:d9:bd:20:bb:1f:a6:b4:1d:8d:b8:
b7:0b:d4:47:eb:a8:d1:5f:0f:1c:58:55:93:63:57:c5:84:55:
55:95:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:05 2025 by rpki-client