Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: VDz1WdZtzfxfKusEi9xn4KScRtD7lCtHyPZ/kxivQeQ=
Subject key identifier: 28:6B:EF:4D:DA:00:3D:A7:A4:D0:C8:3C:94:02:8B:A7:60:8A:1B:76
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 019A50752F805FA2796AF54AEA597E9855DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 1229
Signing time: Tue 04 Nov 2025 20:00:48 +0000
Manifest this update: Tue 04 Nov 2025 20:00:48 +0000
Manifest next update: Wed 05 Nov 2025 20:00:48 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: XCAdOrmiEijXvX0GSnTsJVIChdS/iQD4j/4P2Y8Iwd8=)
2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:2f:80:5f:a2:79:6a:f5:4a:ea:59:7e:98:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Nov 4 20:00:48 2025 GMT
Not After : Nov 5 20:00:48 2025 GMT
Subject: CN=286bef4dda003da7a4d0c83c94028ba7608a1b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:a4:0a:b2:66:e1:4e:e4:14:eb:fc:1b:2e:
d4:05:d4:04:34:78:bd:d7:2c:97:b9:1f:42:cf:2b:
18:91:48:ae:47:40:f9:8b:2a:b3:01:bd:12:6b:b7:
a3:2a:71:ea:e7:90:f7:46:4b:1f:ed:28:51:2b:05:
3e:c1:a5:03:7c:cb:fd:2c:66:17:91:15:b2:37:67:
9b:29:90:f5:30:2a:61:3a:cc:bf:23:9b:21:1b:f8:
cb:00:31:69:72:cd:c2:ef:25:f3:a3:87:3e:07:bb:
87:c4:67:b1:8d:ae:63:fe:f0:10:8d:1e:72:75:0c:
1f:68:64:16:1a:de:dc:63:fd:5d:16:51:7d:d5:9d:
96:c4:b5:c4:ca:37:ef:9c:91:39:4b:a4:28:aa:bd:
59:2b:3d:f4:f6:0e:9f:da:58:3d:e3:bd:47:cb:49:
f7:b8:50:d6:67:e4:2f:56:7e:d2:75:24:26:10:0f:
53:af:56:71:af:19:2f:fb:b1:59:65:47:30:cf:2c:
6f:fb:f5:93:de:9c:eb:9e:9c:75:02:bd:c2:85:d5:
a3:94:ac:e3:fe:68:17:7f:a0:d6:af:b8:f5:cb:6e:
2d:02:ee:c7:9c:96:09:89:04:fc:47:18:20:d9:30:
6d:91:14:40:07:1d:4d:54:71:c1:cb:99:fa:d3:18:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6B:EF:4D:DA:00:3D:A7:A4:D0:C8:3C:94:02:8B:A7:60:8A:1B:76
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:37:37:08:7b:f4:d5:bd:c8:2b:67:09:f5:1f:b9:d5:0e:
8e:d6:6d:b6:77:2c:04:6e:06:61:54:60:aa:a5:99:da:5a:e9:
bf:5a:b1:bd:78:c0:b8:ad:e2:fd:97:0a:9a:c3:e6:ca:92:11:
4f:d1:b6:6a:38:49:0b:47:f0:a4:18:ad:86:b3:5e:27:3f:75:
a8:25:3d:24:d1:a7:98:5c:06:8f:53:f0:39:b8:92:26:7e:19:
19:19:7f:7c:9a:cf:3d:bc:0f:a5:d2:50:a4:6d:f6:13:62:59:
53:82:e5:35:15:d2:19:8d:ff:38:5c:8d:60:36:df:35:c6:02:
45:75:d7:62:5e:bb:3d:1e:56:af:d6:2d:d0:11:5c:f6:ea:0b:
ae:59:d5:2f:1e:c4:7e:ab:5d:6e:ca:3c:55:08:c4:52:7b:d6:
f6:4c:bb:e1:e8:cc:77:a4:08:39:7a:bc:ac:b2:0a:04:b5:ba:
3e:6b:59:c0:00:4c:1f:de:b4:0a:d7:31:c8:ee:18:8d:80:4f:
d6:c4:e6:67:0e:59:3d:4f:29:96:6d:7f:f2:3d:80:36:f3:97:
04:07:4a:8e:06:b0:a1:5e:c5:ba:f4:34:d6:cd:b5:0c:2b:09:
81:55:bc:d8:34:74:16:05:37:11:e7:78:46:5e:24:73:7f:32:
8a:57:f7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdS+AX6J5avVK6ll+mFXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi
ODVjNmUwHhcNMjUxMTA0MjAwMDQ4WhcNMjUxMTA1MjAwMDQ4WjAzMTEwLwYDVQQD
EygyODZiZWY0ZGRhMDAzZGE3YTRkMGM4M2M5NDAyOGJhNzYwOGExYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWakCrJm4U7kFOv8Gy7UBdQENHi9
1yyXuR9CzysYkUiuR0D5iyqzAb0Sa7ejKnHq55D3Rksf7ShRKwU+waUDfMv9LGYX
kRWyN2ebKZD1MCphOsy/I5shG/jLADFpcs3C7yXzo4c+B7uHxGexja5j/vAQjR5y
dQwfaGQWGt7cY/1dFlF91Z2WxLXEyjfvnJE5S6Qoqr1ZKz309g6f2lg9471Hy0n3
uFDWZ+QvVn7SdSQmEA9Tr1Zxrxkv+7FZZUcwzyxv+/WT3pzrnpx1Ar3ChdWjlKzj
/mgXf6DWr7j1y24tAu7HnJYJiQT8Rxgg2TBtkRRABx1NVHHBy5n60xhc3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChr703aAD2npNDIPJQCi6dgiht2MB8GA1UdIwQY
MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt
MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My
LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzo3Nwh7
9NW9yCtnCfUfudUOjtZttncsBG4GYVRgqqWZ2lrpv1qxvXjAuK3i/ZcKmsPmypIR
T9G2ajhJC0fwpBithrNeJz91qCU9JNGnmFwGj1PwObiSJn4ZGRl/fJrPPbwPpdJQ
pG32E2JZU4LlNRXSGY3/OFyNYDbfNcYCRXXXYl67PR5Wr9Yt0BFc9uoLrlnVLx7E
fqtdbso8VQjEUnvW9ky74ejMd6QIOXq8rLIKBLW6PmtZwABMH960CtcxyO4YjYBP
1sTmZw5ZPU8plm1/8j2ANvOXBAdKjgawoV7FuvQ01s21DCsJgVW82DR0FgU3Eed4
Rl4kc38yilf37g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:13:53 2025 by rpki-client