Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: Po2hYVZhq3IZuYNqU9R67X9+B9me19vK5H5FNKDbplU=
Subject key identifier: 24:29:EF:9F:AF:D0:BC:4F:DF:27:F8:45:C7:4F:06:A8:7E:68:C1:FA
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 01987374761C4D768E622215629B4759551A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 1132
Signing time: Mon 04 Aug 2025 05:01:08 +0000
Manifest this update: Mon 04 Aug 2025 05:01:08 +0000
Manifest next update: Tue 05 Aug 2025 05:01:08 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: 9i1vgVQUwCCo4HLuXpp5ZgmSbOGTUJqwvX+dX4QvN4s=)
2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:76:1c:4d:76:8e:62:22:15:62:9b:47:59:55:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Aug 4 05:01:08 2025 GMT
Not After : Aug 5 05:01:08 2025 GMT
Subject: CN=2429ef9fafd0bc4fdf27f845c74f06a87e68c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:b8:e2:07:a4:80:ce:3c:82:6e:c9:c8:05:
e9:bd:75:57:12:da:c9:7c:94:b3:d8:7d:e6:bd:9a:
75:c7:ce:7e:00:fd:c4:88:11:97:79:cf:83:86:ac:
77:9e:59:71:09:cd:3c:4a:30:6a:61:6c:9b:e7:93:
a4:50:be:ea:ee:1a:c3:25:08:35:ea:c4:a2:e6:81:
8c:03:81:ac:41:91:44:66:5a:60:b6:20:87:65:08:
90:a4:df:1a:0f:6e:93:af:3f:e4:96:fd:76:2b:e8:
e4:19:ae:30:32:e5:c9:b7:06:c2:03:8f:b1:7a:4d:
e0:a8:97:26:43:f9:46:36:ee:d5:05:1b:a8:48:38:
47:24:a0:0e:2e:2f:ad:d8:d0:30:0d:49:60:07:de:
fe:5b:44:3b:c5:a5:e4:0e:91:40:a1:c8:ef:9f:2d:
39:e5:df:d2:70:ce:d5:97:9d:82:9a:0f:92:dc:bb:
bf:b5:b7:5d:1e:72:94:cc:fc:a9:f6:9e:5c:b2:fa:
ae:79:d7:19:d4:d0:91:d4:03:d4:f3:01:bb:ac:8b:
ca:01:b1:80:97:ed:97:12:d2:9f:6c:41:8f:53:41:
3e:c7:4b:94:64:5c:b9:74:81:5f:83:14:5e:9a:cb:
c1:5e:c8:c1:9f:d8:5e:9e:47:41:74:5c:4e:91:15:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:EF:9F:AF:D0:BC:4F:DF:27:F8:45:C7:4F:06:A8:7E:68:C1:FA
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:82:30:5d:41:42:8e:04:6e:02:4c:b9:67:68:ea:25:6e:5d:
e8:3d:80:98:6b:77:e8:1b:ac:3b:d0:84:43:aa:63:07:18:a4:
28:e2:f2:14:ec:1b:7f:a4:cf:07:73:e6:8d:c4:58:c8:4b:5a:
a9:f3:55:bb:ca:7b:e0:e9:d0:34:a3:4b:df:7d:97:39:98:1f:
24:cb:b9:c5:ca:06:d6:0b:8e:d3:7e:ab:da:dd:89:30:67:6f:
15:01:58:e8:2a:c8:1d:6d:1c:65:2f:ba:04:ac:09:10:c0:6d:
15:8c:dc:e4:1e:02:21:6c:cb:2f:12:dd:11:fa:2c:05:04:61:
1c:f5:37:94:3b:aa:29:1d:cb:15:f3:67:3c:2d:51:3b:ac:55:
21:8b:b3:53:78:fa:96:30:18:0a:9c:2f:cd:30:16:c7:e4:63:
51:e7:df:ee:8e:93:1b:ae:66:5f:44:9d:5b:ca:89:65:45:22:
18:42:c4:d7:a5:79:18:cc:d0:80:b1:15:d4:bf:28:f9:49:69:
f2:ec:6c:10:17:0b:14:b7:37:ec:3b:a2:40:bd:78:d1:db:a4:
7f:62:c7:5b:a5:cb:b0:cc:f2:e0:d0:80:99:fa:11:77:d7:07:
1e:fe:8a:0e:e9:e6:01:e5:7a:a2:95:c3:bb:9b:78:63:e6:32:
f5:23:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:08 2025 by rpki-client