Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: WFqCFjT+mYM03NQFSxeClZFG/nSzXmTXcmJsykTjM28=
Subject key identifier: 8A:98:3A:EB:3E:40:DE:59:9B:50:A0:AC:F8:F7:8B:1B:68:66:DC:56
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 019A70A54B3BF9B6587251BB3B15021B1DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:12 +0000
Manifest this update: Tue 11 Nov 2025 02:01:12 +0000
Manifest next update: Wed 12 Nov 2025 02:01:12 +0000
Files and hashes: 1: 7EHgO3PucIIBrDXTf3unAqcCVmM.roa (hash: xo4Z+bj09YwXVnD23gXzeCAhnM1Vgv1JkS4OxDZhKZ8=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: MPIvBh9BDFdb90CZlvvBWgVj4YEhcNtfa0BP1REMbDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4b:3b:f9:b6:58:72:51:bb:3b:15:02:1b:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Nov 11 02:01:12 2025 GMT
Not After : Nov 12 02:01:12 2025 GMT
Subject: CN=8a983aeb3e40de599b50a0acf8f78b1b6866dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:49:73:b8:cb:e4:9e:a1:c5:f7:d9:2d:7a:
90:ad:14:4c:80:38:b9:c4:24:ae:6e:57:f0:ba:7b:
ae:60:a0:6f:b5:fa:ba:bd:08:a2:04:10:9d:58:9b:
83:1b:ce:40:b0:5a:1c:ae:5c:38:cf:31:22:cb:bc:
6c:d7:c1:99:0f:30:21:a8:7c:eb:ef:04:0b:fd:b2:
64:2d:4d:81:0c:4c:40:93:13:17:0b:64:2b:11:2b:
7e:12:32:0b:ae:82:8a:40:81:e3:58:f0:b8:c4:5a:
73:94:03:3f:b4:5b:b1:65:d9:5d:d7:16:a9:7e:1d:
41:91:b6:91:14:b8:fe:f7:28:1a:0c:b6:d9:a5:79:
e5:3e:b4:8b:b2:29:71:47:2b:26:68:05:25:80:b0:
f7:23:7e:f9:62:00:12:4b:c5:08:9a:3a:fe:07:66:
a6:e5:f1:d3:d2:f3:89:6a:b6:d6:3b:04:bc:45:5b:
ee:86:48:d6:2e:ca:dc:3d:7e:3b:4b:4d:e4:7e:21:
89:7a:43:27:17:c1:18:88:41:16:ba:fd:c1:97:18:
10:e6:fd:ff:eb:72:20:81:ea:63:51:7c:9a:e9:2f:
78:4d:f7:cc:23:cd:f8:36:9b:02:13:d3:13:0b:e4:
87:18:39:c0:d7:e7:ad:dd:3b:43:84:b2:ba:2d:85:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:3A:EB:3E:40:DE:59:9B:50:A0:AC:F8:F7:8B:1B:68:66:DC:56
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:00:00:ec:68:c4:6f:d1:1d:40:4e:02:89:7d:89:de:cd:9f:
fc:ae:b0:0f:37:6e:f0:fa:35:f9:e0:74:fc:c3:d2:25:2b:5d:
c1:60:88:b2:9d:24:73:e4:e2:c2:5b:b4:64:f4:eb:a5:61:31:
26:98:27:8c:3e:15:63:75:14:9f:6e:dd:16:c2:17:33:09:6c:
8d:2d:7c:d4:66:34:1f:7f:c2:c8:77:3d:85:f8:f9:52:44:4a:
f5:21:ed:80:37:58:c2:2c:02:62:74:e6:a7:4a:cd:73:85:d2:
8e:3c:cf:b6:bb:52:17:48:66:ab:2a:1a:ae:8b:bf:7f:30:27:
0d:85:37:09:ca:51:1a:67:17:3e:ea:e1:00:f3:d6:98:6b:e0:
c5:df:65:fb:fe:ff:ab:2b:2d:40:f7:14:a8:f9:46:6b:3a:c9:
a1:fb:7e:0e:49:f8:a9:14:47:81:4e:1a:7d:2d:44:b7:ea:4e:
7e:3f:2c:e1:75:4e:3c:00:e1:e1:fa:8d:39:95:a5:59:b8:ef:
26:7a:2a:c4:f4:b8:cb:2b:47:21:a7:45:2a:43:bf:ab:7c:9e:
46:7d:70:b2:59:81:41:18:3f:4f:7e:fd:45:a7:5b:08:45:d6:
f5:59:91:0d:b5:ab:3b:50:6a:50:e3:99:47:bb:f4:dd:46:fe:
9d:c0:ba:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client