Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: qXDaXTIivFxm0Fuxrr8pqQnjFXiC79Iwc8bThyIv2Q0=
Subject key identifier: AA:00:B1:98:FE:CC:7B:35:58:68:FE:83:62:8E:26:3E:60:12:B2:1D
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 019873E3C80F9795603EAB1E0ED52871E127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 0104
Signing time: Mon 04 Aug 2025 07:02:44 +0000
Manifest this update: Mon 04 Aug 2025 07:02:44 +0000
Manifest next update: Tue 05 Aug 2025 07:02:44 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: DBwvQ4Xix+gtFAml3X1i1NBMPvWAo/C6qPmuWoHT34o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c8:0f:97:95:60:3e:ab:1e:0e:d5:28:71:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Aug 4 07:02:44 2025 GMT
Not After : Aug 5 07:02:44 2025 GMT
Subject: CN=aa00b198fecc7b355868fe83628e263e6012b21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:be:68:bf:3e:f1:6f:6d:08:45:86:92:fc:
16:47:a9:cc:d9:8d:84:c7:ec:54:b5:1e:0a:53:09:
7a:a3:46:6d:07:07:67:db:ba:c6:84:35:fb:d9:f9:
c1:35:b5:95:52:fa:56:55:e2:9f:9f:64:c6:a6:a5:
63:87:31:a0:2c:91:f8:d6:b9:d6:d9:3b:8c:76:58:
52:8a:74:55:e8:ea:97:31:94:98:7e:26:63:bc:c6:
60:2a:e6:a1:e7:40:eb:85:6f:78:83:96:99:e9:29:
5f:78:a1:52:6c:b0:21:27:9b:d6:7c:69:75:73:cc:
09:ad:1b:20:06:0e:b4:e5:17:4b:d6:4c:60:0a:23:
fe:88:f1:78:3c:67:f7:2b:99:e5:6a:35:91:66:42:
7d:a2:e6:49:4b:16:67:74:6f:ef:04:5d:24:46:06:
49:fc:be:0c:ec:d0:c6:96:95:31:07:5b:00:af:b7:
22:1f:8f:b3:7d:0e:87:75:4a:6d:f4:50:73:ee:4f:
e7:5b:d7:c3:92:4c:65:90:f8:57:d1:ef:e7:43:d9:
c0:b2:cc:37:85:53:a9:93:50:f9:7c:a1:6e:a2:8f:
83:e1:2c:b4:e5:57:21:da:44:60:a6:e2:44:ae:7d:
71:91:99:81:dc:47:8d:af:4c:df:5d:58:09:69:90:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:B1:98:FE:CC:7B:35:58:68:FE:83:62:8E:26:3E:60:12:B2:1D
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:12:eb:08:63:d3:ae:f3:23:21:1c:f4:3c:fc:41:03:9b:
11:f5:f8:76:c5:49:95:52:0f:11:ef:e3:31:ff:fe:f4:0f:13:
69:4c:4c:78:95:48:d1:81:64:7f:89:80:50:0a:08:d4:62:20:
c9:57:c5:15:d4:00:a4:9b:4e:ba:7d:4b:1f:31:03:f1:21:6d:
0f:04:89:a8:26:d7:56:8c:98:e5:45:f2:fc:c7:0c:f0:c8:31:
0b:f0:8b:57:17:bc:3b:47:63:96:ee:1d:e2:57:5c:52:99:ce:
4d:6b:bd:c7:f1:23:cb:61:fd:4a:05:ef:28:da:5d:90:1f:7f:
7f:9f:01:16:c5:c2:6c:66:b5:60:69:fc:c4:3c:24:60:a2:25:
c4:83:18:5b:33:4f:f0:0f:8b:23:f4:56:9c:22:e0:35:95:08:
81:b7:88:a3:38:d0:fa:27:bf:08:ba:3e:9a:9a:25:aa:0d:fa:
ca:fe:e2:14:ba:fc:5c:b0:a8:82:4f:9d:d5:b1:68:e9:86:96:
81:5d:7c:8d:54:54:f7:90:fb:9b:41:b2:4e:f3:c4:fe:19:30:
59:9f:e2:5f:f0:eb:ae:82:de:1e:73:24:f4:bb:e6:de:ed:4b:
cb:96:29:52:7f:25:65:dc:a8:91:4b:9b:9e:ad:df:7b:dd:28:
92:a9:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:50 2025 by rpki-client