Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File: RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier: B/XFBTJfEbW6NleUINfFJQep/+H/kmZKRJmsEayAlpc=
Subject key identifier: 8A:86:FE:23:ED:C7:F4:A5:98:BF:52:32:E2:6A:EC:73:42:47:C1:44
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer: /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial: 019A71B8AAFC20E39A6889AB3705DD4A4822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: jRlIemVDuT4wPbKxVOSd7i/jQsmObQ/YvpRRmBPTRzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:aa:fc:20:e3:9a:68:89:ab:37:05:dd:4a:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=8a86fe23edc7f4a598bf5232e26aec734247c144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:02:3b:c3:3a:56:1c:f0:19:45:59:66:e0:
10:50:db:6f:f0:ea:c0:aa:bf:6a:88:6f:ef:35:49:
a0:37:2b:50:9d:dc:87:5c:69:2a:8b:e2:21:eb:df:
62:92:8d:56:3c:41:93:80:c3:66:58:5f:a2:97:ba:
b4:b3:c4:68:67:26:98:06:6b:e3:88:b1:ca:06:ae:
af:e4:af:a6:63:cf:c6:b9:9a:cb:82:66:6d:e9:d8:
07:c6:7f:bd:04:ed:f7:c0:a1:61:c1:6d:8b:c7:cc:
4f:50:7a:81:f0:44:76:0e:c8:11:ef:74:29:38:4d:
9e:14:f9:06:d1:7c:18:0b:26:ee:be:19:a5:b6:37:
18:80:84:32:ac:32:23:02:ca:6c:76:b0:ca:a8:81:
7d:2e:19:8d:f5:00:0b:74:b0:8f:af:b1:bd:24:ba:
fd:44:e6:9e:94:cc:0f:eb:cb:16:e1:cc:e8:65:d1:
6b:8a:38:e4:1a:73:34:16:66:cc:ed:ed:50:75:2d:
0e:2f:3f:e3:0d:66:37:7d:9c:70:43:72:07:45:2a:
8a:9e:85:8a:69:06:b7:c5:bc:5c:e0:69:0e:34:de:
85:1f:99:b7:dd:23:b3:9c:d9:27:18:c7:6e:47:ca:
54:b0:89:9e:bb:bf:0c:8c:1f:bf:c6:6f:ad:2d:df:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:FE:23:ED:C7:F4:A5:98:BF:52:32:E2:6A:EC:73:42:47:C1:44
X509v3 Authority Key Identifier:
keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9a:5d:80:4c:02:11:91:f9:5b:c1:1d:c7:7a:35:67:51:c2:
b1:69:4a:cd:52:78:10:6d:d1:c0:86:96:c5:4e:91:cd:45:25:
2a:c2:ed:fa:90:eb:ca:56:94:08:7b:b0:c9:43:f6:49:62:93:
90:f4:8f:cb:16:19:2e:80:81:4a:e2:f1:dc:d5:e0:3e:a7:43:
a9:36:1e:c5:ae:55:2d:79:88:70:ad:95:18:a9:8e:b2:10:35:
f1:d5:24:c3:8c:e4:56:e0:a7:a4:74:ef:50:b1:1f:e4:d7:e5:
97:a6:67:38:81:21:30:40:64:f3:2c:93:8f:5c:15:a7:2c:69:
74:d4:77:f6:9c:31:6f:a0:7b:5c:21:e3:79:46:5a:8c:34:6f:
ff:82:d4:74:9e:9a:f6:e1:27:3c:c5:d2:4f:6b:ab:ed:fb:81:
d5:07:b2:f0:91:39:80:1d:fb:d6:4e:0b:5b:9c:47:19:a4:12:
ac:bb:5d:94:4f:9f:2f:2a:e5:1e:6b:ce:ca:c8:88:73:02:9d:
3a:38:7d:2c:9c:4b:77:9b:d7:d6:e6:47:5e:73:3f:b5:a6:5e:
ef:0d:3f:08:00:aa:57:3e:d2:74:8c:3b:43:0b:50:91:9d:c9:
5a:5e:70:b0:7f:cd:59:72:79:37:d3:8c:60:99:c5:95:de:c0:
c8:7c:2e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKr8IOOaaImrNwXdSkgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MmM4ZmQ2Yzc3NmI3ODU2NmJiN2MzMDRlMjVmYjdkMmEy
OTMyYzMwHhcNMjUxMTExMDcwMTU4WhcNMjUxMTEyMDcwMTU4WjAzMTEwLwYDVQQD
Eyg4YTg2ZmUyM2VkYzdmNGE1OThiZjUyMzJlMjZhZWM3MzQyNDdjMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnMCO8M6VhzwGUVZZuAQUNtv8OrA
qr9qiG/vNUmgNytQndyHXGkqi+Ih699iko1WPEGTgMNmWF+il7q0s8RoZyaYBmvj
iLHKBq6v5K+mY8/GuZrLgmZt6dgHxn+9BO33wKFhwW2Lx8xPUHqB8ER2DsgR73Qp
OE2eFPkG0XwYCybuvhmltjcYgIQyrDIjAspsdrDKqIF9LhmN9QALdLCPr7G9JLr9
ROaelMwP68sW4czoZdFrijjkGnM0FmbM7e1QdS0OLz/jDWY3fZxwQ3IHRSqKnoWK
aQa3xbxc4GkONN6FH5m33SOznNknGMduR8pUsImeu78MjB+/xm+tLd/vfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqG/iPtx/SlmL9SMuJq7HNCR8FEMB8GA1UdIwQY
MBaAFEQsj9bHdreFZrt8ME4l+30qKTLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOTMyMWMtYTBhMi00OWMxLWE5NzQt
ODA0ZDg5ZTJhMDAxLzEvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jOTMyMWMtYTBhMi00OWMxLWE5NzQtODA0ZDg5ZTJhMDAx
LzEvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5pdgEwC
EZH5W8Edx3o1Z1HCsWlKzVJ4EG3RwIaWxU6RzUUlKsLt+pDrylaUCHuwyUP2SWKT
kPSPyxYZLoCBSuLx3NXgPqdDqTYexa5VLXmIcK2VGKmOshA18dUkw4zkVuCnpHTv
ULEf5Nfll6ZnOIEhMEBk8yyTj1wVpyxpdNR39pwxb6B7XCHjeUZajDRv/4LUdJ6a
9uEnPMXST2ur7fuB1Qey8JE5gB371k4LW5xHGaQSrLtdlE+fLyrlHmvOysiIcwKd
Ojh9LJxLd5vX1uZHXnM/taZe7w0/CACqVz7SdIw7QwtQkZ3JWl5wsH/NWXJ5N9OM
YJnFld7AyHwu8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:01 2025 by rpki-client