Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
File: cyrf7tpQvgNppSvklRoJOWh0T2c.mft (raw, json)
Hash identifier: 0LM/TtqW4kvMB9ml4wnWK0lq5wOhBkUJNYKSAhva8ls=
Subject key identifier: 70:A5:3C:3E:71:15:55:A9:13:92:0F:D0:69:36:7D:4A:20:3D:6B:45
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Certificate issuer: /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial: 019A70A51049246DF33419279FE03A582756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: cyrf7tpQvgNppSvklRoJOWh0T2c.crl (hash: fF50AUFYQ0DpCPdAtcx4KODymxlh0leFC0a64NfWhU0=)
2: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (hash: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:10:49:24:6d:f3:34:19:27:9f:e0:3a:58:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=70a53c3e711555a913920fd069367d4a203d6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:d4:98:af:09:a1:a9:5d:44:d6:06:0d:42:
d2:f6:a0:f8:21:97:2a:2d:1d:cf:c9:dd:60:57:cf:
d8:e9:9a:e4:3a:88:c0:c3:4d:e7:d2:6d:7d:63:54:
c9:10:49:24:ad:e8:c1:4b:fb:13:4e:88:d8:52:5c:
50:a0:62:eb:cf:ed:b4:c7:c2:30:c0:21:ec:47:11:
c9:a9:ff:07:d3:a7:7c:88:65:ab:cb:83:8f:f4:14:
29:60:2f:1c:3e:49:81:de:98:09:e8:28:32:0b:94:
8c:df:c4:7b:e9:2c:65:bc:59:f8:ee:3e:15:e5:f7:
9d:1f:5d:8b:c3:c6:84:2c:ed:96:ec:cc:ae:76:3f:
23:24:42:ea:3a:9b:45:ed:1c:c5:5c:20:4c:52:93:
0f:36:31:8d:82:ce:e4:d8:05:38:c7:71:68:61:3c:
5f:75:cf:ae:27:89:36:13:cd:d2:38:37:a2:98:04:
2a:39:26:50:82:29:6a:a4:04:91:5a:a9:56:8e:88:
64:9a:72:6b:68:fe:a7:fd:74:3b:48:a1:4e:f7:c5:
2f:e6:a8:74:be:42:9e:bf:a0:cc:78:60:c3:70:d4:
80:9c:fa:91:a8:04:f2:97:b6:61:08:fe:4a:4b:c5:
2e:00:df:c4:b4:8e:d1:9b:d7:0c:c4:e2:fb:7b:a1:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A5:3C:3E:71:15:55:A9:13:92:0F:D0:69:36:7D:4A:20:3D:6B:45
X509v3 Authority Key Identifier:
keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:51:47:1d:65:50:02:eb:19:73:7b:db:61:c7:b0:cc:d2:
6c:a7:4a:24:29:27:07:1d:8e:31:83:55:04:4d:c1:22:ee:46:
70:5b:5e:b7:8e:e6:4e:47:e3:e1:bc:a2:58:6f:14:e2:79:ee:
80:0a:ad:22:7f:69:9a:87:a7:fe:d4:3c:6a:9f:60:1a:9e:26:
50:e8:e6:c8:01:8b:27:8d:c4:84:80:2d:0b:fe:38:9a:b3:69:
5f:bf:78:ad:4e:92:bd:a8:71:2b:45:90:be:4b:7a:3f:98:d2:
34:d2:10:fb:92:7e:a8:12:33:b7:86:c2:a7:f0:b5:5b:a0:14:
b9:ed:4e:a8:6f:0a:72:3f:f4:e8:74:ad:01:43:76:13:71:44:
95:c1:fa:de:54:c8:cc:7f:e9:ca:56:47:9b:42:bf:6b:16:1c:
19:9a:07:a7:73:03:6d:0c:e1:08:84:60:a5:83:22:aa:c6:c9:
08:ff:1a:fa:d0:cd:a1:62:e5:3c:d9:d8:39:70:64:2a:df:8a:
83:c1:94:05:a2:d5:dd:77:bd:4d:d9:51:9d:06:6b:c8:db:4a:
b8:1e:01:91:93:05:1e:65:70:6a:96:ec:4b:73:21:ca:3c:36:
c6:ee:85:1d:ca:0e:cd:18:05:17:89:a4:ea:ab:e4:23:b8:27:
82:16:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:42 2025 by rpki-client