Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: jeX3h+nIDFrJKbOTkhM1aV0Zk0YmV2+AUmlnRHPwK9U=
Subject key identifier: 4E:94:02:50:38:5D:71:FD:80:B1:E5:71:A8:96:50:E2:68:A1:A8:CD
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 019921B13A7FE4FD7C1267D7F7227EF8389F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0D3C
Signing time: Sun 07 Sep 2025 01:01:26 +0000
Manifest this update: Sun 07 Sep 2025 01:01:26 +0000
Manifest next update: Mon 08 Sep 2025 01:01:26 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: ddB8qHfJ4FLPBi/bS0RaP3RE37/r05DZniyilR6m6LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:3a:7f:e4:fd:7c:12:67:d7:f7:22:7e:f8:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Sep 7 01:01:26 2025 GMT
Not After : Sep 8 01:01:26 2025 GMT
Subject: CN=4e940250385d71fd80b1e571a89650e268a1a8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:58:91:c1:56:e2:b3:cb:94:a5:61:3e:22:
40:cc:66:20:bd:e7:c2:6e:76:7f:34:90:30:bb:de:
c4:ea:2a:55:da:cd:f1:33:94:e5:69:8f:19:b9:79:
85:28:a7:88:d3:a1:0c:08:0b:85:f9:b3:f6:fe:2f:
2c:f6:35:00:f1:95:ef:3c:51:a9:90:26:36:64:8a:
0d:86:1b:84:f2:20:ba:bf:65:75:14:69:6b:d9:f4:
a6:48:cb:b8:d6:a1:52:39:a8:07:25:ec:0d:20:9a:
8a:7c:b5:05:0e:b8:2d:eb:2a:63:c1:7b:75:a6:b0:
99:02:53:1d:0d:f8:9d:ce:8b:ff:a5:41:2b:6e:62:
92:99:4c:43:b2:9d:e5:83:88:fe:49:9e:43:24:cf:
4c:a6:b8:2a:50:58:05:a6:75:fb:b9:15:dc:cd:9f:
96:5b:d2:be:d7:44:3d:b5:f9:1d:90:25:63:db:57:
fc:33:3b:e0:79:09:50:80:49:47:86:46:76:1f:d0:
04:44:31:af:e7:57:4f:85:a2:8c:b4:19:57:54:d1:
82:eb:85:01:2f:6d:3c:f7:71:cc:65:bc:28:d2:4a:
4b:82:d9:d6:1f:81:b7:54:8f:ea:23:d2:0a:9e:ac:
62:00:92:13:48:86:01:82:6f:ba:23:54:dd:c8:e1:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:02:50:38:5D:71:FD:80:B1:E5:71:A8:96:50:E2:68:A1:A8:CD
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b8:50:02:be:62:5f:ce:fd:4d:de:72:f4:0b:4b:c1:b2:09:
86:b0:63:72:64:21:d3:32:63:56:33:e1:aa:78:2c:df:c4:b7:
a3:4b:68:0d:f7:60:e2:2f:ff:94:5e:2f:46:b2:c3:b8:fb:c1:
93:80:b5:23:cc:f6:13:7a:3c:86:4b:be:f5:4c:07:cd:8c:28:
17:9c:50:5d:27:61:62:50:80:98:f9:48:5a:df:87:6f:e6:65:
e2:bc:2e:bf:86:3f:0b:f5:bf:93:f1:df:0d:b7:e8:4c:04:77:
d0:59:a9:a6:6e:95:43:22:10:90:02:9b:0c:90:a8:9b:59:ee:
30:9f:76:79:3b:02:f5:28:45:4f:2e:ae:a5:02:c8:f6:5c:ca:
23:c3:5c:be:44:b9:ab:7c:ba:58:12:64:7b:95:b3:92:e9:03:
7c:6c:70:e2:d6:ab:b7:59:4b:89:bf:00:84:19:eb:e7:6f:66:
ae:35:d1:4f:32:0d:82:ff:49:61:62:f4:ab:9f:82:f1:46:ba:
a9:87:05:40:ab:9c:d3:45:a6:23:c7:2c:b6:1c:a4:fc:a9:e7:
32:5d:b3:d6:10:86:f6:47:88:af:13:3b:3f:0a:06:f6:ba:08:
0c:89:04:53:18:a1:2d:00:b8:b8:78:6a:fb:0b:3e:79:02:48:
31:92:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:51 2025 by rpki-client