Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
File: cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json)
Hash identifier: hiv65qvCxV8CD+z3O+uyR/TaWoN9R9xOTNTl4HiBqmw=
Subject key identifier: 2E:BC:3F:82:01:AC:F1:56:CE:64:88:E8:AE:F5:73:00:35:F4:75:87
Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7
Certificate serial: 019A29D4D25FB567FD7D78C32B423FDD39F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
Manifest number: 0B3A
Signing time: Tue 28 Oct 2025 08:00:04 +0000
Manifest this update: Tue 28 Oct 2025 08:00:04 +0000
Manifest next update: Wed 29 Oct 2025 08:00:04 +0000
Files and hashes: 1: 6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (hash: etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=)
2: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: RVZRpB60epelGfwl5x2hnlTYryODcy7iSD79C+dEZJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:d2:5f:b5:67:fd:7d:78:c3:2b:42:3f:dd:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7
Validity
Not Before: Oct 28 08:00:04 2025 GMT
Not After : Oct 29 08:00:04 2025 GMT
Subject: CN=2ebc3f8201acf156ce6488e8aef5730035f47587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:ac:58:a3:55:a4:96:c8:b1:b9:c4:14:50:
99:86:f0:0e:8c:df:43:31:13:46:0e:e6:2f:39:7a:
4a:4c:a1:31:82:9c:55:9e:85:04:e7:ab:8b:ab:87:
9f:07:5b:00:bd:e2:b0:d4:58:0f:8a:94:a0:e6:f0:
d5:5e:c9:f3:38:8c:4e:2b:8c:f5:3c:94:62:7d:fb:
64:54:17:ee:e1:f3:27:9d:94:74:94:7c:c3:5e:68:
d4:15:30:ad:15:f2:50:b1:69:05:ac:17:aa:e7:3e:
bd:b5:cb:cb:49:4d:e0:e9:61:e5:8f:dc:49:37:fb:
c8:98:b0:0d:ef:a9:6b:72:07:db:ca:bb:d8:29:7d:
ca:f3:de:b3:bf:69:5e:c0:58:99:4e:c6:17:4e:f4:
31:77:e5:f3:f9:82:2c:0f:3c:ec:fe:5f:95:5d:99:
d8:47:bd:0a:e1:23:7a:23:50:f1:b6:bf:b6:35:62:
c9:45:76:14:20:1c:62:be:8b:2d:d9:32:03:43:35:
9d:fa:3f:60:69:f1:61:48:28:39:43:d1:51:77:ef:
fb:84:be:ee:07:22:09:81:53:ac:fd:cb:a5:d6:13:
52:57:7e:65:5a:4c:96:c4:2d:26:2a:1c:79:d7:77:
05:74:d2:7d:8b:c7:59:3f:77:ca:99:96:46:6d:24:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:3F:82:01:AC:F1:56:CE:64:88:E8:AE:F5:73:00:35:F4:75:87
X509v3 Authority Key Identifier:
keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b6:c2:eb:4d:48:f0:eb:29:60:f8:83:5c:ac:1c:9b:9e:dc:
0b:6e:8f:91:07:3a:e0:2e:1e:5e:8b:93:41:52:39:ef:a1:1d:
61:24:91:87:ba:ca:84:49:8e:6b:b5:f6:34:59:09:00:48:4b:
69:35:df:4b:2c:de:fb:88:6a:76:38:1f:89:16:89:d3:b8:af:
c6:69:f0:b7:31:20:82:76:73:ac:01:3b:7a:1d:a9:9f:2b:a9:
c3:75:c7:a0:ad:36:6d:c0:80:f9:1b:67:4a:1b:46:85:1d:a2:
f6:5d:2a:04:cd:1b:dd:92:7d:9b:58:aa:12:7c:fc:e6:21:79:
8d:8d:c6:01:5e:d6:03:b5:47:4e:d6:ce:c0:7c:ed:e4:72:6d:
aa:8e:93:4c:77:bd:be:fb:3e:04:12:4e:cc:2f:35:1d:f2:72:
21:17:24:aa:ae:bb:3a:ad:16:05:cd:fe:b8:e8:c5:d7:20:9d:
64:4d:ef:fa:35:d9:ca:97:ca:f1:af:d9:60:ee:73:21:9e:81:
6c:ef:4c:30:e1:1d:22:08:95:60:b1:ff:e3:d2:ec:c7:7c:23:
91:1b:d9:12:6b:b6:92:97:43:a7:fb:f4:3c:77:2c:37:c6:62:
b3:71:d1:b0:20:e1:ae:65:01:b1:12:81:d1:19:c5:98:7c:68:
10:bf:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:14:38 2025 by rpki-client