
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: TanTcEmeejKyVQGX3Fd1azI14w8tyZadoTuN/cJBQBU=
Subject key identifier: 7B:C5:CC:C5:40:7E:51:E4:DF:42:78:B4:39:5F:1E:D4:C8:67:FA:28
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 019921B145BF041FB32C860F5FCA1C26430F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 0E7D
Signing time: Sun 07 Sep 2025 01:01:29 +0000
Manifest this update: Sun 07 Sep 2025 01:01:29 +0000
Manifest next update: Mon 08 Sep 2025 01:01:29 +0000
Files and hashes: 1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: TajyEFT2FDQkxb2abKvIayQneENe3i2PBlw5zt/A4hI=)
2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:45:bf:04:1f:b3:2c:86:0f:5f:ca:1c:26:43:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Sep 7 01:01:29 2025 GMT
Not After : Sep 8 01:01:29 2025 GMT
Subject: CN=7bc5ccc5407e51e4df4278b4395f1ed4c867fa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:16:c9:77:88:0b:b1:a8:aa:0d:6b:57:ff:
db:4c:57:59:03:56:57:e1:e6:20:73:9d:6a:cc:1f:
80:5f:3f:c3:79:21:f5:67:f9:53:4a:3d:17:ef:a2:
38:b3:d7:2d:33:7c:4e:12:65:e3:7a:b0:59:cf:bc:
e7:36:a1:2f:55:27:d7:70:d4:04:2e:55:e9:76:2d:
9a:b4:1a:46:c6:59:9e:a1:13:87:d4:4e:de:fc:86:
9a:8b:a5:7c:88:d9:86:51:1e:0b:79:da:4b:5a:4a:
06:85:f7:16:f6:30:62:bd:62:46:d9:49:72:14:4f:
84:d4:f7:6a:92:bc:18:f9:a0:6f:2f:f2:03:9e:5d:
0d:c3:4e:f9:fc:47:98:90:43:e9:1b:a6:42:c7:cb:
df:f1:f9:b0:65:c5:75:6e:ee:60:8d:fd:ff:96:87:
8d:a0:26:df:fd:2c:d0:29:80:58:c7:d1:39:24:7d:
a1:dc:e2:45:21:1e:df:10:22:c4:f6:ad:27:71:6d:
5b:a9:67:47:a8:19:98:0b:0c:46:c5:00:ee:22:ae:
65:52:2d:63:6f:2b:0b:11:d1:6a:7f:d7:3b:ae:7f:
6f:30:dc:72:e2:13:bd:dc:17:ca:2a:51:72:01:2f:
fa:64:c0:1b:c4:99:1a:86:40:0c:72:f1:88:5e:ff:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:CC:C5:40:7E:51:E4:DF:42:78:B4:39:5F:1E:D4:C8:67:FA:28
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:01:8a:63:30:37:9b:19:59:27:89:d9:e0:db:86:a8:2b:af:
0c:59:e6:76:a4:03:76:5b:33:ab:72:06:36:6d:1e:26:f8:92:
d4:80:d4:cd:a7:d9:35:fa:f3:f3:1b:63:7f:f0:3d:96:bb:37:
15:5a:57:21:27:63:25:f4:24:13:c9:ec:07:4f:0a:f6:61:15:
3d:a8:98:eb:ba:7a:64:a1:71:fd:2f:83:0e:40:f5:e2:54:b5:
59:99:80:23:91:50:04:96:25:d7:c4:28:9c:c7:6a:12:62:61:
14:28:c1:da:79:87:e8:cc:6c:86:48:47:a4:d1:e1:30:2e:e5:
bc:13:ab:f8:e4:7f:b3:2b:fa:8c:fc:73:7a:aa:b3:e6:02:b7:
35:f7:41:9c:dc:d8:ad:22:70:18:44:f2:e2:ad:c3:0e:50:2a:
7b:55:ac:d2:bb:23:3e:5f:79:a3:b2:6a:c9:27:d5:e2:c0:dd:
ee:af:71:14:c4:fe:64:37:28:58:73:ac:ac:09:eb:77:12:f8:
c1:04:a3:f4:2b:03:d2:30:44:f7:1e:8a:a0:13:67:18:11:2d:
66:eb:17:b4:f5:de:69:7d:23:45:b5:58:55:57:92:5a:49:20:
d0:c4:91:ac:85:ce:8a:d9:8d:3a:3e:d2:60:8b:71:d5:78:35:
91:f5:38:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsUW/BB+zLIYPX8ocJkMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmVkMjQ3MDNkMzM0YjExY2QyMmVlNDg5ZmMzYzY0YmRj
MDZmNGIwHhcNMjUwOTA3MDEwMTI5WhcNMjUwOTA4MDEwMTI5WjAzMTEwLwYDVQQD
Eyg3YmM1Y2NjNTQwN2U1MWU0ZGY0Mjc4YjQzOTVmMWVkNGM4NjdmYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn40WyXeIC7Goqg1rV//bTFdZA1ZX
4eYgc51qzB+AXz/DeSH1Z/lTSj0X76I4s9ctM3xOEmXjerBZz7znNqEvVSfXcNQE
LlXpdi2atBpGxlmeoROH1E7e/Iaai6V8iNmGUR4LedpLWkoGhfcW9jBivWJG2Uly
FE+E1PdqkrwY+aBvL/IDnl0Nw075/EeYkEPpG6ZCx8vf8fmwZcV1bu5gjf3/loeN
oCbf/SzQKYBYx9E5JH2h3OJFIR7fECLE9q0ncW1bqWdHqBmYCwxGxQDuIq5lUi1j
bysLEdFqf9c7rn9vMNxy4hO93BfKKlFyAS/6ZMAbxJkahkAMcvGIXv/6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvFzMVAflHk30J4tDlfHtTIZ/ooMB8GA1UdIwQY
MBaAFAsu0kcD0zSxHNIu5In8PGS9wG9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEt
YjY0ODhhZWM1MzNiLzEvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEtYjY0ODhhZWM1MzNi
LzEvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswGKYzA3
mxlZJ4nZ4NuGqCuvDFnmdqQDdlszq3IGNm0eJviS1IDUzafZNfrz8xtjf/A9lrs3
FVpXISdjJfQkE8nsB08K9mEVPaiY67p6ZKFx/S+DDkD14lS1WZmAI5FQBJYl18Qo
nMdqEmJhFCjB2nmH6MxshkhHpNHhMC7lvBOr+OR/syv6jPxzeqqz5gK3NfdBnNzY
rSJwGETy4q3DDlAqe1Ws0rsjPl95o7JqySfV4sDd7q9xFMT+ZDcoWHOsrAnrdxL4
wQSj9CsD0jBE9x6KoBNnGBEtZusXtPXeaX0jRbVYVVeSWkkg0MSRrIXOitmNOj7S
YItx1Xg1kfU49w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:24 2025 by rpki-client