Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: /3iylzvmJ73oY3DQl5xWQkq7sUkCV1EuKXJvX0/vlow=
Subject key identifier: BA:3D:4B:8A:D0:6F:D8:BC:D9:0D:E9:D2:E1:51:00:D3:AF:A7:62:3F
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 019A7149D5F65618A60559CD5F5D4B43F227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 123A
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: AiZvxNqtIt4dq6v6O6snPI5ZHs2RzUDdGbxN8x0mvvA=)
2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d5:f6:56:18:a6:05:59:cd:5f:5d:4b:43:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=ba3d4b8ad06fd8bcd90de9d2e15100d3afa7623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:9f:34:43:ca:88:d5:45:56:24:40:ab:6f:
78:59:fb:a3:cb:fe:c5:01:14:91:dd:0d:47:a4:80:
ff:76:36:07:0c:93:fb:c9:a8:e9:51:32:dd:07:ff:
66:f3:0b:2e:55:c9:b3:69:35:e0:b5:77:f2:52:97:
b8:42:a2:4d:52:ef:23:e4:fb:a8:3a:87:68:49:a8:
7c:c9:76:1f:cf:15:ad:8d:c0:91:f5:25:ae:7d:62:
51:dd:4f:2a:18:7a:d4:0b:fc:55:8b:d9:78:28:0b:
63:45:fe:34:33:4a:69:34:08:98:06:1d:87:e2:77:
0f:bf:fe:05:64:0c:1b:04:f2:a0:18:78:30:b8:64:
ad:63:5d:4d:12:87:9d:5d:77:d3:0e:39:97:b0:f6:
68:f2:72:a1:75:3d:eb:fb:64:71:4b:79:ac:f0:c7:
5a:f9:35:a5:ff:74:f2:ba:fa:c4:30:02:87:53:7b:
8a:c7:fb:d8:ed:1d:2d:56:0a:a9:73:a9:e5:3c:5e:
a3:b7:b3:87:de:60:1e:2c:20:48:23:1a:24:54:af:
d1:98:f1:ca:ae:4c:e3:e1:3d:11:54:a1:85:3c:3b:
2e:3a:31:fe:54:70:d4:46:9a:80:45:18:e4:e1:bb:
bf:0b:79:17:be:f6:27:98:f1:04:70:26:32:e8:3d:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:4B:8A:D0:6F:D8:BC:D9:0D:E9:D2:E1:51:00:D3:AF:A7:62:3F
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:9c:58:6d:60:0d:5d:05:54:b4:32:5c:ae:1e:75:d3:03:
6f:8b:d4:81:2f:d2:c3:32:99:c0:71:52:72:11:4c:7e:b7:c6:
3a:19:90:48:c5:bb:93:1d:88:5e:e5:90:79:e2:49:ee:f8:c6:
c2:38:94:66:77:80:cc:18:32:b6:47:2f:87:1f:28:27:b7:36:
79:4d:07:a2:35:4a:5c:bc:6e:b2:4a:a8:1a:30:1f:61:b4:4d:
9f:44:08:cc:52:3f:5b:1c:75:cb:99:7b:45:02:2c:1f:0d:ac:
53:57:61:81:a1:d4:54:ca:0c:d1:48:35:43:c9:b1:0c:de:5b:
a2:25:d2:45:2a:54:fc:23:b5:40:f3:05:c1:d9:8c:0f:f9:c3:
84:bc:ce:62:56:c7:f2:b8:fb:5e:41:12:34:51:5c:e7:7f:3e:
a4:86:0e:c1:f4:eb:7e:29:57:2d:38:05:97:ab:a8:ec:e4:e3:
42:3a:f3:d1:ec:48:51:f8:14:46:a7:1d:b1:0f:20:94:54:dd:
12:17:ec:fa:ed:14:12:4c:53:39:d7:11:8c:36:93:b8:c5:bc:
0c:db:c1:fb:08:8e:d5:35:17:92:c2:d8:5b:91:06:71:9c:68:
98:ca:3e:59:30:0b:f9:2a:ad:8c:9c:8f:71:cb:de:1e:78:51:
48:14:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:58 2025 by rpki-client