Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: BoGcLG1Puv+JURBDV49OTWtEgxeHC7+0YemmsQBo+rk=
Subject key identifier: AF:11:50:C9:97:15:3A:22:00:18:7E:B5:0C:52:1F:C1:73:56:60:6F
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 019A1A61FCE6A76B472928AEBF63F06766DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 08:00:20 +0000
Manifest this update: Sat 25 Oct 2025 08:00:20 +0000
Manifest next update: Sun 26 Oct 2025 08:00:20 +0000
Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: CQy0oW/YHD0AAU1xN6j0YA+PCwR16eLqbjUr+CGKeEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:fc:e6:a7:6b:47:29:28:ae:bf:63:f0:67:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Oct 25 08:00:20 2025 GMT
Not After : Oct 26 08:00:20 2025 GMT
Subject: CN=af1150c997153a2200187eb50c521fc17356606f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:df:1e:19:29:b3:b4:ec:b7:8f:c8:3e:8c:
56:b1:37:7a:fe:e4:ef:a8:b8:57:8d:2e:63:86:23:
0d:35:70:45:ed:5e:52:15:56:41:38:3d:17:4f:2f:
f0:05:7b:e3:d2:53:8a:04:67:be:38:77:56:bd:c7:
cf:36:f1:be:6a:73:ca:32:28:64:8d:0a:09:8a:f1:
e3:dd:c6:43:b0:ec:71:26:66:20:95:50:7d:4a:5b:
62:5e:0f:72:e6:c5:6f:3c:d6:c8:60:87:20:e0:12:
06:98:f9:a1:e6:a2:f9:e4:14:ff:70:e5:cc:24:e1:
06:8a:97:8b:54:c5:91:b7:06:d8:75:fb:b6:98:81:
e5:f4:be:45:2c:28:d9:ec:81:91:63:73:c6:ca:1b:
d5:df:f1:03:1f:6f:98:5f:3a:16:c4:07:2f:ad:23:
36:e0:a5:dd:60:65:08:bd:0e:1f:6a:f5:bf:01:dc:
a7:fb:2f:61:b3:85:b1:e5:70:2a:06:71:da:10:b4:
a1:14:c1:f8:b5:d5:c1:8b:52:cf:72:91:25:f0:30:
03:51:c0:fb:4e:30:1b:cd:8f:44:d3:92:39:1b:97:
65:4a:8e:11:38:13:e5:90:c5:49:0d:e1:d4:86:fd:
5f:87:7f:51:d0:76:c5:f5:04:c1:3f:e6:da:32:35:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:50:C9:97:15:3A:22:00:18:7E:B5:0C:52:1F:C1:73:56:60:6F
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:88:88:e4:bb:36:90:26:ec:80:a3:e9:89:c7:48:0e:8a:08:
dc:2b:b7:93:7a:09:a8:80:26:c2:31:70:1e:ec:ba:70:dd:fb:
8d:54:f5:ae:44:52:39:a8:36:4b:d6:6e:8e:6c:ac:3b:f3:8e:
b3:76:67:58:da:ba:88:46:74:a5:e2:1d:74:60:70:72:5f:a7:
52:25:5a:8a:0c:59:2f:21:2c:19:58:48:b3:91:d7:15:b2:f7:
70:64:01:28:c6:60:db:6c:3a:d1:a5:9c:8c:cf:46:e4:bc:0e:
49:db:09:0d:2c:16:d2:c2:31:25:de:da:d4:32:e2:05:8b:26:
f8:ba:88:ba:e5:7b:36:94:2e:1f:58:c2:64:69:9a:f6:86:37:
b5:fd:36:23:e9:28:c9:ea:ea:9f:8e:aa:ce:d2:fc:18:2f:ba:
29:52:1f:ca:50:fe:67:0c:b6:47:48:91:ee:87:c8:1e:b6:a9:
6f:70:e9:1d:b3:d5:c9:ec:db:5d:d3:9c:8f:19:f8:bb:15:3f:
ae:cc:d6:0e:30:12:b0:20:5b:2d:a4:3c:e0:70:49:9b:41:d7:
14:54:9c:b5:47:66:d8:c1:5b:bf:81:ba:04:7c:d9:14:20:8e:
a6:69:52:0a:2a:bc:0e:fe:fa:c1:96:98:cd:b9:ae:f9:ec:a0:
9f:56:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:37:32 2025 by rpki-client