Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: /moPq3C8PJ3u2fMhTQaS1c4zVnASDrCicQTSGwqxOBA=
Subject key identifier: 5F:A4:AB:AE:0B:44:AA:7F:0A:83:02:BE:55:11:07:7F:F1:37:3E:72
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 019A209B827ABE1FC5F190B2AAA6AD8B7A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0DC0
Signing time: Sun 26 Oct 2025 13:00:53 +0000
Manifest this update: Sun 26 Oct 2025 13:00:53 +0000
Manifest next update: Mon 27 Oct 2025 13:00:53 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: UP5Vu/XDCPaBihQwrYs/zjpqP3/mjKcY8mB86YVdihY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:82:7a:be:1f:c5:f1:90:b2:aa:a6:ad:8b:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Oct 26 13:00:53 2025 GMT
Not After : Oct 27 13:00:53 2025 GMT
Subject: CN=5fa4abae0b44aa7f0a8302be5511077ff1373e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:4d:95:a2:bb:8d:a2:b3:2e:74:3c:dc:67:
04:31:76:61:cb:a9:7a:5e:d3:38:7a:72:41:bc:ba:
01:37:e9:a7:98:f8:1b:e7:4d:3f:40:21:80:28:0a:
69:cc:91:5d:db:14:72:29:6d:e6:da:ae:69:c1:df:
29:8d:65:3d:dc:aa:87:32:79:13:b6:d5:eb:e1:1b:
71:5c:49:02:b1:72:4e:47:07:f7:9f:f8:53:b4:c7:
b1:dd:bd:b3:72:c8:55:9d:36:ed:a3:86:bb:f2:12:
a4:87:45:16:8d:0b:85:39:a7:fa:c8:e7:e8:cb:26:
76:e1:62:3b:14:03:8c:70:b7:e8:56:f1:98:a7:40:
a3:a7:6d:93:35:a1:6b:3c:3b:6c:24:6f:1b:28:6b:
bb:53:6b:b7:f8:ce:1c:d0:bf:82:16:07:21:f4:bc:
67:f1:5a:2c:fa:43:bc:ac:e3:1f:47:65:1c:6a:76:
02:fc:a2:49:ac:16:b8:ca:79:c4:b8:0f:99:17:d8:
25:ad:75:77:8d:98:b4:32:6e:08:f6:03:06:87:e5:
b7:39:ca:d9:c5:e2:83:3e:24:7b:31:ce:ce:ce:19:
d4:82:7c:94:da:4e:30:69:05:ae:51:43:c8:5e:96:
e2:fa:a8:10:e6:97:1b:7c:ad:df:89:9d:24:cc:38:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:AB:AE:0B:44:AA:7F:0A:83:02:BE:55:11:07:7F:F1:37:3E:72
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:27:39:2e:1e:c1:ca:eb:1e:8a:84:d5:03:6d:6c:43:1c:3b:
d5:0e:a7:e8:50:de:4e:9c:89:5f:b3:5b:5b:7c:ff:fb:3e:ee:
5a:5e:2c:62:4e:14:00:ef:95:8e:d7:36:53:07:9c:5a:92:a2:
19:db:30:74:51:42:1f:07:9d:04:03:a0:2c:f1:f5:26:e5:53:
77:9d:04:d7:9f:18:df:28:26:3e:f5:6f:97:21:96:b8:27:52:
fe:b5:9e:51:91:76:ba:9d:53:23:20:38:43:a3:bc:2e:d4:e3:
52:89:80:8d:f1:8f:70:98:14:16:73:ae:61:a7:26:59:77:47:
72:ea:4e:db:e2:55:4f:b5:36:7c:6f:75:2d:6c:00:f8:68:1f:
59:dd:bc:cb:c2:dc:89:42:08:66:0a:0a:42:37:63:56:20:6e:
eb:f6:3d:29:a1:c8:d6:02:ff:98:a0:da:4f:b8:9d:58:4b:e0:
b9:6e:49:20:85:b1:af:c6:48:27:3f:ac:25:23:f5:a7:c2:f9:
9c:6c:34:b6:1b:d2:4f:fd:aa:48:28:12:f2:7c:31:3a:24:00:
f1:03:82:16:22:0e:a6:5b:f7:48:22:75:76:44:b8:2a:61:7d:
50:a2:84:d5:dd:62:de:ac:24:96:02:1f:ca:b7:80:f4:31:d4:
cd:49:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:41:46 2025 by rpki-client