Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
File: CyKQB_XS3fo_clwPpFLEe22dhU4.mft (raw, json)
Hash identifier: Hlqo3EFRwrGJsxxq7FiBxQDheuA9KJp/HgstYsjcBjQ=
Subject key identifier: 2A:BE:10:95:D3:70:DF:13:DC:9F:7F:F5:1B:43:82:1B:B7:4C:7D:D6
Authority key identifier: 0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
Certificate issuer: /CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Certificate serial: 0197469DBB6BC43FCFC9A6ED356D7A6E6B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
Manifest number: 06C1
Signing time: Fri 06 Jun 2025 19:00:31 +0000
Manifest this update: Fri 06 Jun 2025 19:00:31 +0000
Manifest next update: Sat 07 Jun 2025 19:00:31 +0000
Files and hashes: 1: CyKQB_XS3fo_clwPpFLEe22dhU4.crl (hash: d3kUuRQtGba9YewpQS3utPb6QIq4ww8ktZFOXEJmXmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:bb:6b:c4:3f:cf:c9:a6:ed:35:6d:7a:6e:6b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Validity
Not Before: Jun 6 19:00:31 2025 GMT
Not After : Jun 7 19:00:31 2025 GMT
Subject: CN=2abe1095d370df13dc9f7ff51b43821bb74c7dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:c2:40:d5:55:92:9a:ff:25:19:2a:85:79:
18:cd:c0:cd:06:4b:b0:f5:2a:ba:7f:5b:03:1e:81:
59:77:b0:00:6a:a0:dd:19:a5:b5:97:29:57:e2:8a:
95:ec:46:7b:a2:82:33:f3:0e:b9:8d:7c:5e:9e:fb:
9b:b2:54:7e:50:a5:3e:5e:ee:68:8c:b0:60:ec:59:
4e:e9:0e:25:cc:7d:13:e8:81:8b:13:67:05:08:57:
a4:11:a2:d9:76:5d:a1:5d:89:db:55:e0:99:e4:90:
81:d6:fd:2e:d8:01:34:af:4d:92:53:f8:bb:f6:e0:
c1:01:b6:c7:a6:55:e6:49:92:8e:2d:6c:6d:7c:03:
e2:6c:3c:5a:83:e0:88:5f:81:ad:fa:9c:a7:01:af:
7a:f1:03:d3:b4:00:d3:5c:57:db:b8:ad:f8:f1:c0:
01:48:2a:44:a6:0a:97:47:03:a5:a8:38:33:af:42:
dc:24:5f:12:d2:39:1e:46:ac:17:af:45:e7:95:7f:
cd:67:3a:62:de:7c:01:b2:0e:27:55:de:19:fa:b4:
ed:7b:fd:e9:eb:fb:fe:b1:c8:72:34:6b:4f:fc:25:
36:ea:8a:56:47:e0:18:98:08:a9:88:8d:d2:60:d2:
c9:2b:0f:6c:df:0f:2d:17:67:40:90:23:bf:40:fb:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:10:95:D3:70:DF:13:DC:9F:7F:F5:1B:43:82:1B:B7:4C:7D:D6
X509v3 Authority Key Identifier:
keyid:0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:a9:83:9f:6c:79:06:a6:0e:ca:be:4a:8f:1a:67:63:f1:
8e:78:ac:ec:e6:03:36:83:8b:f4:0a:58:fa:4f:83:bc:94:9c:
f9:f4:a8:6a:56:82:be:97:e6:78:70:4d:56:cf:2c:ba:31:92:
0f:5e:5e:f2:bf:28:85:ef:62:76:9f:ea:78:9e:d7:27:54:ed:
1e:de:2b:7f:88:7f:74:a9:7e:c1:f6:3a:ec:6d:5f:81:b5:98:
59:5d:fa:be:a7:73:73:83:f8:8f:3a:7a:82:11:e0:7f:21:85:
b3:c5:98:63:00:18:46:de:a2:3d:7a:3f:40:5d:0f:75:df:9c:
9d:6b:ec:03:01:c2:ca:43:56:94:27:da:05:a1:18:fb:43:23:
56:1d:7a:ed:53:32:ff:38:6d:f9:34:aa:09:19:73:13:c3:60:
71:a3:af:b0:48:4b:3d:7a:ad:32:c3:a4:5d:0d:c2:22:3a:e3:
da:93:6e:8a:1e:bb:96:e4:44:b7:54:48:e4:77:e1:ba:54:15:
5b:50:6e:e3:5b:b8:ca:41:ba:f3:a6:b9:16:b0:99:4d:90:86:
18:64:56:67:0e:1f:4b:df:41:d8:3b:f6:81:fd:37:e8:17:9c:
25:28:20:cd:fe:30:47:8f:e2:58:67:b3:45:8b:f0:d6:f3:23:
9b:cd:92:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnbtrxD/PyabtNW16bmsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjI5MDA3ZjVkMmRkZmEzZjcyNWMwZmE0NTJjNDdiNmQ5
ZDg1NGUwHhcNMjUwNjA2MTkwMDMxWhcNMjUwNjA3MTkwMDMxWjAzMTEwLwYDVQQD
EygyYWJlMTA5NWQzNzBkZjEzZGM5ZjdmZjUxYjQzODIxYmI3NGM3ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrrCQNVVkpr/JRkqhXkYzcDNBkuw
9Sq6f1sDHoFZd7AAaqDdGaW1lylX4oqV7EZ7ooIz8w65jXxenvubslR+UKU+Xu5o
jLBg7FlO6Q4lzH0T6IGLE2cFCFekEaLZdl2hXYnbVeCZ5JCB1v0u2AE0r02SU/i7
9uDBAbbHplXmSZKOLWxtfAPibDxag+CIX4Gt+pynAa968QPTtADTXFfbuK348cAB
SCpEpgqXRwOlqDgzr0LcJF8S0jkeRqwXr0XnlX/NZzpi3nwBsg4nVd4Z+rTte/3p
6/v+schyNGtP/CU26opWR+AYmAipiI3SYNLJKw9s3w8tF2dAkCO/QPtA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq+EJXTcN8T3J9/9RtDghu3TH3WMB8GA1UdIwQY
MBaAFAsikAf10t36P3JcD6RSxHttnYVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lLUUJfWFMzZm9fY2x3UHBGTEVlMjJkaFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZThmNDEtNGNlZC00MzRjLTkxNDQt
ZDJhNDM3MWIzZTUzLzEvQ3lLUUJfWFMzZm9fY2x3UHBGTEVlMjJkaFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82ZThmNDEtNGNlZC00MzRjLTkxNDQtZDJhNDM3MWIzZTUz
LzEvQ3lLUUJfWFMzZm9fY2x3UHBGTEVlMjJkaFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej2pg59s
eQamDsq+So8aZ2Pxjnis7OYDNoOL9ApY+k+DvJSc+fSoalaCvpfmeHBNVs8sujGS
D15e8r8ohe9idp/qeJ7XJ1TtHt4rf4h/dKl+wfY67G1fgbWYWV36vqdzc4P4jzp6
ghHgfyGFs8WYYwAYRt6iPXo/QF0Pdd+cnWvsAwHCykNWlCfaBaEY+0MjVh167VMy
/zht+TSqCRlzE8NgcaOvsEhLPXqtMsOkXQ3CIjrj2pNuih67luREt1RI5HfhulQV
W1Bu41u4ykG686a5FrCZTZCGGGRWZw4fS99B2Dv2gf036BecJSggzf4wR4/iWGez
RYvw1vMjm82SVg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:41 2025 by rpki-client