Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: Rj+H9qOc9hkYpwlT4pf0dKmX5npLNh42tbNyzVvUPqs=
Subject key identifier: 65:41:0F:91:43:AC:8E:74:32:B1:0D:EA:3D:11:63:3A:22:DE:F0:A3
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 01987D8AAFDA52133B3AD10BAEA9B8971395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0921
Signing time: Wed 06 Aug 2025 04:01:37 +0000
Manifest this update: Wed 06 Aug 2025 04:01:37 +0000
Manifest next update: Thu 07 Aug 2025 04:01:37 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: NzwSrAdVZbUFok73S66N4YedKx6ok/6LP7jG8yrNi1U=)
2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:af:da:52:13:3b:3a:d1:0b:ae:a9:b8:97:13:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Aug 6 04:01:37 2025 GMT
Not After : Aug 7 04:01:37 2025 GMT
Subject: CN=65410f9143ac8e7432b10dea3d11633a22def0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:64:d7:f9:a1:f6:3c:c8:4c:e6:bc:21:76:
a9:6a:22:62:2c:5e:38:2a:05:f6:c2:73:7f:e6:36:
b5:01:a0:2e:33:b7:e1:29:af:55:4b:2e:49:37:df:
88:23:2f:0e:ef:7c:ac:0c:c1:02:ab:bc:22:60:bb:
72:bb:96:33:9b:6c:cb:da:bf:4b:52:6c:78:b1:0f:
60:59:24:1d:51:02:78:f3:24:e3:8f:3e:f8:88:75:
24:be:76:e0:58:00:23:0e:3c:74:f2:49:9e:94:fa:
49:22:d0:c0:72:6c:28:ce:eb:9e:91:f4:6c:72:99:
dd:18:36:6c:e9:ac:17:65:3c:9a:ad:78:7a:d2:ec:
57:33:8a:4d:8f:08:bc:6b:36:59:85:e9:a3:87:ea:
cf:4a:9a:83:3f:e3:87:d8:99:ad:57:57:62:10:41:
6d:7e:a4:89:e4:48:78:df:ee:99:cc:9d:ee:53:19:
a6:9c:c0:e7:6e:79:23:f1:58:6b:33:c7:08:3c:77:
7c:d5:ea:30:7d:54:c5:5e:b8:e6:07:6d:45:9b:71:
fa:95:2e:a5:8b:eb:50:fd:96:37:4f:f6:59:96:56:
61:1f:13:62:e9:94:08:c4:e2:46:95:e8:13:b8:9f:
70:f7:ab:04:cf:0a:f5:d4:f8:20:29:8a:51:07:47:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:0F:91:43:AC:8E:74:32:B1:0D:EA:3D:11:63:3A:22:DE:F0:A3
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c6:a6:c9:72:8d:10:62:91:6c:9e:77:53:93:92:23:c5:fa:
e9:19:ec:26:be:dd:5b:a2:1f:3b:2a:4a:ae:50:3e:53:9e:d1:
06:bf:82:69:97:b8:ff:f4:d1:a3:af:0a:eb:d7:61:a6:ca:cc:
41:e4:24:e8:7a:53:a8:0e:2d:52:d3:83:7a:e4:99:1b:2b:0f:
e9:4a:80:84:dc:13:54:a7:31:39:d9:46:2b:31:8d:af:a6:42:
20:58:5f:4c:fc:43:74:97:7e:26:cf:ae:44:da:ba:aa:79:e4:
af:2e:55:1c:61:dc:c3:65:e2:66:58:b1:21:45:bc:c8:0b:30:
1e:c8:39:35:9d:43:f2:ec:3c:2b:a8:48:41:47:c9:ce:b3:17:
98:a9:eb:1d:cb:ab:89:34:ed:5b:6d:eb:9c:95:a2:f5:b3:1f:
6d:72:d0:ce:ab:b5:f7:40:9b:a9:b5:41:44:80:9c:f8:0b:0a:
2b:2c:50:45:e7:36:fd:dd:09:a9:db:2a:9b:2f:a5:87:73:d0:
71:23:19:3f:17:56:e4:8b:59:64:a3:90:74:2b:ea:ce:d5:ce:
93:76:7b:6a:66:66:11:5a:74:17:56:b0:41:08:22:55:39:f1:
60:81:02:11:f7:4a:19:ec:dc:b9:8a:b6:e9:6f:fc:b0:9a:67:
64:71:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:22:05 2025 by rpki-client