Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: qCPF446HyhN9GvpGm88XIhMeBNg+qDROVlQGq0tQRAk=
Subject key identifier: D3:4F:7E:CB:93:8C:F1:4D:14:4E:CF:A9:FC:ED:63:1C:B5:90:14:41
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 0199239FEEF1092174D5D2FF078CE626924B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 015F
Signing time: Sun 07 Sep 2025 10:01:47 +0000
Manifest this update: Sun 07 Sep 2025 10:01:47 +0000
Manifest next update: Mon 08 Sep 2025 10:01:47 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: MCqBiiBfk69RAvkgMxmvbwa/Jfnv1F8abz7zMcMEPJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ee:f1:09:21:74:d5:d2:ff:07:8c:e6:26:92:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Sep 7 10:01:47 2025 GMT
Not After : Sep 8 10:01:47 2025 GMT
Subject: CN=d34f7ecb938cf14d144ecfa9fced631cb5901441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:91:b4:0f:4f:ac:a2:e4:e5:3f:91:3d:af:
50:51:7b:ab:b6:df:86:58:a9:62:33:c6:67:8e:ce:
36:b6:c0:c5:d2:53:f1:b0:ee:5b:f8:04:d0:28:b6:
95:e8:11:01:c2:aa:3a:81:ea:c0:d5:53:55:45:f3:
ca:37:40:2d:c7:6f:b6:d7:cf:79:40:cf:e9:41:76:
0e:16:d8:9e:3f:c3:fb:1d:03:61:37:02:8a:a6:41:
11:46:3b:60:18:49:ad:09:83:27:11:d4:19:e1:7c:
fb:b1:f5:74:9b:0a:18:2d:da:67:ad:b6:12:18:32:
86:af:a9:2f:a2:e3:27:47:f0:9d:57:de:79:ad:23:
6c:be:71:d1:b0:ac:d8:81:f8:8b:20:35:ca:f4:af:
d0:68:56:b8:86:65:e1:14:23:ae:43:e6:03:25:f2:
e9:5d:cd:64:6e:5f:22:0e:3d:24:d0:aa:c8:de:e2:
53:34:e8:0d:0e:2f:fd:b4:c4:5b:2f:b8:8d:23:8b:
81:8a:f3:37:d3:87:03:c3:23:85:64:77:bc:eb:f2:
6b:b4:b1:74:2d:0a:c7:d8:ad:c4:48:b8:92:0e:02:
47:43:27:3e:40:8c:fe:78:84:5b:49:c0:87:fe:93:
c9:e1:cc:be:75:0a:86:9e:a5:73:74:9e:fa:0f:d7:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:7E:CB:93:8C:F1:4D:14:4E:CF:A9:FC:ED:63:1C:B5:90:14:41
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:87:60:ac:19:0f:7d:f3:73:dc:5c:73:6a:e6:84:97:5e:41:
92:f5:25:63:0a:2d:ce:e3:64:dc:85:ba:05:a1:04:53:2a:aa:
08:f6:cd:76:f3:a0:03:66:1b:5a:fb:b2:c3:c9:98:99:4b:89:
18:8c:ca:71:8a:78:96:cc:7a:4b:cc:75:ed:09:cd:c4:fe:df:
61:55:43:20:ff:04:4f:22:67:c2:7f:8c:cd:c6:ba:6d:67:bf:
e7:b3:5d:d4:5f:03:e1:e1:fe:b8:1a:47:59:8b:39:0a:63:37:
68:53:ac:4c:d1:3a:ed:a1:f6:a9:4b:26:37:d0:b8:d9:d4:00:
ba:83:63:6c:3f:57:ae:d2:36:67:c8:e1:cd:ca:a0:1e:36:f5:
4f:1a:94:c3:c9:de:1a:21:e0:f1:a1:27:23:86:11:b0:1b:b1:
79:5f:b1:1f:79:e8:be:18:c0:f1:88:0a:05:c9:b6:23:cd:c6:
f0:2f:54:63:ff:d8:bc:9f:79:78:df:6b:a0:f6:cd:bc:40:c6:
03:5a:d7:6f:c8:79:17:df:0b:0d:f9:fa:a1:a8:f8:ec:e0:5b:
03:c5:b3:db:f0:8c:b0:62:f9:df:f9:f2:ed:ec:01:40:5b:f5:
7c:e6:8b:8f:44:30:8c:1f:52:f8:54:43:aa:ef:91:d5:15:ac:
90:61:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:00 2025 by rpki-client