Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: M2PHxJCKqhF3Zkdt9lwBadCnf1c8hyj9kLuLMz2enJQ=
Subject key identifier: 6B:9F:ED:A8:35:94:62:89:DC:DE:88:66:6D:E7:35:72:02:34:5F:81
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 01988EED0F7BAA317468E6528B14D83BB670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0CF0
Signing time: Sat 09 Aug 2025 13:02:37 +0000
Manifest this update: Sat 09 Aug 2025 13:02:37 +0000
Manifest next update: Sun 10 Aug 2025 13:02:37 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: Fv79/DEb49L/HF4eabxkDSeQeKx77MunSrFgABIFd0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:0f:7b:aa:31:74:68:e6:52:8b:14:d8:3b:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Aug 9 13:02:37 2025 GMT
Not After : Aug 10 13:02:37 2025 GMT
Subject: CN=6b9feda835946289dcde88666de7357202345f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:a2:8f:17:c7:04:6e:9d:dd:aa:0f:53:40:
71:91:02:cf:f2:44:99:9a:ce:39:78:63:82:a2:ca:
2f:ed:87:de:0a:bb:b9:cc:2f:b6:0a:61:53:0d:89:
ce:39:8a:51:7a:2a:ef:75:94:2e:a0:26:25:0e:13:
66:bc:cb:5d:eb:5b:e4:72:89:d4:9f:ce:f5:af:81:
fc:21:7d:41:c0:a5:28:c7:ce:25:41:84:d6:b9:e0:
03:3a:15:4e:98:bc:d9:9a:49:a2:6e:ed:59:1a:97:
e2:da:57:c4:3b:59:c1:c5:ad:f1:41:fa:b4:d3:6a:
5a:30:75:27:67:c9:de:49:52:0d:fd:8a:ce:66:0b:
27:dc:79:41:b2:09:0d:3a:e0:d0:87:48:81:2b:26:
34:9a:41:d8:0b:a1:52:90:ee:5b:1e:43:54:5e:5e:
8e:84:94:ca:68:9e:96:18:58:1e:93:92:51:a6:0d:
2f:d3:17:56:27:7f:da:52:c4:8b:5d:ae:a7:8c:cc:
b7:a0:83:65:f0:95:58:42:fa:9b:f5:23:a4:60:49:
13:38:2b:2f:ca:00:5e:7d:27:71:d3:66:8d:c3:56:
13:17:8c:82:8f:d4:ec:98:09:88:bf:7d:36:8c:de:
cf:a3:d1:5d:08:0c:c8:b9:c4:c9:52:15:5b:24:1f:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9F:ED:A8:35:94:62:89:DC:DE:88:66:6D:E7:35:72:02:34:5F:81
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:c5:64:75:ad:10:a2:d1:10:bb:15:52:07:25:4a:71:8b:
22:28:6c:23:34:01:17:71:1f:f9:09:90:6f:e3:f3:64:75:fd:
3b:d1:de:3d:1b:45:7e:40:be:87:0e:5b:78:ab:39:ef:83:86:
eb:bd:eb:01:0d:43:35:9a:ad:b4:98:c8:21:e6:b5:28:3e:39:
53:5c:78:be:a0:71:9e:71:04:bd:6e:8c:59:2e:36:e4:59:35:
6b:5a:6a:71:7a:56:df:b4:66:dc:b5:18:cd:90:b9:ff:a7:95:
ab:da:f4:9a:b3:de:60:c1:cb:28:39:cf:20:bf:9b:e8:b3:d1:
4f:25:51:62:e0:ce:86:96:15:36:b2:8c:2e:3f:c2:70:d5:52:
28:7a:61:91:fa:3e:b1:02:d4:22:68:2a:e4:ec:62:1b:33:12:
92:c8:64:db:11:22:d5:9d:f8:4c:f4:db:44:a2:ed:68:c7:db:
b4:a5:15:d1:11:19:9c:32:e3:a6:14:01:f8:a1:4b:f0:d8:90:
6e:5e:19:23:0c:ec:f0:bf:eb:1d:86:81:70:84:ce:5a:8f:ba:
d0:bf:3b:27:57:fa:06:3a:fc:ff:68:3f:ea:32:51:6a:a0:31:
1b:00:ac:a4:41:df:c7:d6:a7:b4:6b:dd:79:75:66:3e:42:01:
d2:ad:b2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7Q97qjF0aOZSixTYO7ZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODYwM2YwZDQ0YTkyMDQ0MzM4YTJjYWRmMTg5ZTgxMDFj
M2JmNWYwHhcNMjUwODA5MTMwMjM3WhcNMjUwODEwMTMwMjM3WjAzMTEwLwYDVQQD
Eyg2YjlmZWRhODM1OTQ2Mjg5ZGNkZTg4NjY2ZGU3MzU3MjAyMzQ1ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzayijxfHBG6d3aoPU0BxkQLP8kSZ
ms45eGOCosov7YfeCru5zC+2CmFTDYnOOYpReirvdZQuoCYlDhNmvMtd61vkconU
n871r4H8IX1BwKUox84lQYTWueADOhVOmLzZmkmibu1ZGpfi2lfEO1nBxa3xQfq0
02paMHUnZ8neSVIN/YrOZgsn3HlBsgkNOuDQh0iBKyY0mkHYC6FSkO5bHkNUXl6O
hJTKaJ6WGFgek5JRpg0v0xdWJ3/aUsSLXa6njMy3oINl8JVYQvqb9SOkYEkTOCsv
ygBefSdx02aNw1YTF4yCj9TsmAmIv302jN7Po9FdCAzIucTJUhVbJB9ImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuf7ag1lGKJ3N6IZm3nNXICNF+BMB8GA1UdIwQY
MBaAFAmGA/DUSpIEQziiyt8YnoEBw79fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYt
YjczNjg2NDI3OTQyLzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYtYjczNjg2NDI3OTQy
LzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANfFZHWt
EKLRELsVUgclSnGLIihsIzQBF3Ef+QmQb+PzZHX9O9HePRtFfkC+hw5beKs574OG
673rAQ1DNZqttJjIIea1KD45U1x4vqBxnnEEvW6MWS425Fk1a1pqcXpW37Rm3LUY
zZC5/6eVq9r0mrPeYMHLKDnPIL+b6LPRTyVRYuDOhpYVNrKMLj/CcNVSKHphkfo+
sQLUImgq5OxiGzMSkshk2xEi1Z34TPTbRKLtaMfbtKUV0REZnDLjphQB+KFL8NiQ
bl4ZIwzs8L/rHYaBcITOWo+60L87J1f6Bjr8/2g/6jJRaqAxGwCspEHfx9antGvd
eXVmPkIB0q2y4g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:00 2025 by rpki-client