Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
File: CyKQB_XS3fo_clwPpFLEe22dhU4.mft (raw, json)
Hash identifier: OC9y1sS37pubCjuBEOh0bmLuviedXnJpvD2SUsRV2/s=
Subject key identifier: 99:44:F0:2B:36:9B:04:78:FB:49:7E:98:C2:76:B6:B8:77:39:50:93
Authority key identifier: 0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
Certificate issuer: /CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Certificate serial: 019873E351D8B2620AB22A317D03E9C7E215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
Manifest number: 075D
Signing time: Mon 04 Aug 2025 07:02:14 +0000
Manifest this update: Mon 04 Aug 2025 07:02:14 +0000
Manifest next update: Tue 05 Aug 2025 07:02:14 +0000
Files and hashes: 1: CyKQB_XS3fo_clwPpFLEe22dhU4.crl (hash: ySUcabj464saHa+SkDABveoBvBscd2f33Ql0i3DXPLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:51:d8:b2:62:0a:b2:2a:31:7d:03:e9:c7:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b229007f5d2ddfa3f725c0fa452c47b6d9d854e
Validity
Not Before: Aug 4 07:02:14 2025 GMT
Not After : Aug 5 07:02:14 2025 GMT
Subject: CN=9944f02b369b0478fb497e98c276b6b877395093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:f2:14:ec:d8:1f:7f:d8:b6:68:0e:a4:81:
5c:03:ad:a2:41:4d:85:5f:99:62:ae:c1:1b:ef:ff:
60:4a:fd:92:87:2d:e5:7c:6a:32:7f:ee:0f:f6:14:
4b:20:e7:5d:2a:c2:02:0d:f2:93:42:ae:f1:12:98:
df:b3:c1:63:27:3c:a8:98:a3:7d:93:b8:f6:0e:4f:
30:65:e5:14:b9:1b:ca:4a:99:99:91:ea:61:75:ff:
1a:9e:83:09:fe:b7:15:d8:ef:de:27:76:68:bc:c5:
3a:a2:53:32:71:2c:17:11:ea:b9:d9:62:ef:0d:2e:
cd:e8:e4:8b:e3:ae:cd:af:7b:8c:04:37:34:18:49:
9d:c2:f9:67:0a:91:92:28:7b:13:58:94:97:17:b8:
0d:31:79:6b:e7:a4:1a:02:df:27:38:3f:1f:48:14:
22:d6:c8:ae:b9:0d:1f:a9:d6:33:ef:43:53:89:a7:
96:7a:6a:16:c4:51:aa:3a:e3:f7:d5:b3:c8:10:ba:
60:47:f3:8c:51:1d:bf:7c:cd:2b:90:f5:8b:7b:82:
ad:6f:d1:52:c0:38:2c:ec:6e:62:4b:88:33:3b:1a:
8f:5a:05:5d:0e:27:7c:31:5c:26:3a:ad:dd:a6:b7:
2f:6d:66:0a:5f:74:cb:50:81:cc:62:45:30:6e:51:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:F0:2B:36:9B:04:78:FB:49:7E:98:C2:76:B6:B8:77:39:50:93
X509v3 Authority Key Identifier:
keyid:0B:22:90:07:F5:D2:DD:FA:3F:72:5C:0F:A4:52:C4:7B:6D:9D:85:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyKQB_XS3fo_clwPpFLEe22dhU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6e8f41-4ced-434c-9144-d2a4371b3e53/1/CyKQB_XS3fo_clwPpFLEe22dhU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:d3:4a:16:2b:d1:dd:31:20:cf:06:6c:13:69:70:25:8e:
1f:0f:b3:d8:54:b2:58:f8:3c:36:11:38:06:43:13:c7:6d:33:
20:2c:f6:21:5d:91:f9:ec:33:df:11:5d:01:37:3c:d0:10:6d:
ca:11:ab:74:d9:b1:1e:33:ad:58:5f:99:98:b9:90:db:3f:d9:
e1:03:b7:12:57:02:1f:86:28:39:f9:d7:47:92:62:b8:7f:70:
aa:07:89:36:9b:0d:3b:89:79:d0:e8:6e:82:3d:38:e4:58:c3:
53:fd:6a:3c:0f:5d:9f:4c:26:e0:05:4d:00:7a:89:64:8d:69:
80:c7:8e:de:9b:7c:f2:dc:ac:eb:cb:7f:12:e1:40:74:1d:d7:
72:e7:d0:18:b3:68:ee:2d:d9:0c:f8:f7:fd:5a:4c:93:fb:89:
bc:ba:46:9d:c8:12:95:33:cc:28:1e:9f:3d:2b:e2:e2:07:cd:
96:63:86:88:0c:a6:37:f2:f0:4f:7d:4f:00:6e:fe:0f:10:a3:
b4:ca:c5:6a:70:46:31:6a:10:c3:aa:2c:59:02:0d:2c:0f:76:
9e:26:1c:e8:f8:36:4e:14:55:92:c5:9a:9c:37:14:f9:35:8e:
56:86:7d:93:a3:6f:29:41:6d:f5:f9:89:4c:3e:58:79:50:21:
9e:c3:00:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz41HYsmIKsioxfQPpx+IVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjI5MDA3ZjVkMmRkZmEzZjcyNWMwZmE0NTJjNDdiNmQ5
ZDg1NGUwHhcNMjUwODA0MDcwMjE0WhcNMjUwODA1MDcwMjE0WjAzMTEwLwYDVQQD
Eyg5OTQ0ZjAyYjM2OWIwNDc4ZmI0OTdlOThjMjc2YjZiODc3Mzk1MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lbyFOzYH3/YtmgOpIFcA62iQU2F
X5lirsEb7/9gSv2Shy3lfGoyf+4P9hRLIOddKsICDfKTQq7xEpjfs8FjJzyomKN9
k7j2Dk8wZeUUuRvKSpmZkephdf8anoMJ/rcV2O/eJ3ZovMU6olMycSwXEeq52WLv
DS7N6OSL467Nr3uMBDc0GEmdwvlnCpGSKHsTWJSXF7gNMXlr56QaAt8nOD8fSBQi
1siuuQ0fqdYz70NTiaeWemoWxFGqOuP31bPIELpgR/OMUR2/fM0rkPWLe4Ktb9FS
wDgs7G5iS4gzOxqPWgVdDid8MVwmOq3dprcvbWYKX3TLUIHMYkUwblEbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlE8Cs2mwR4+0l+mMJ2trh3OVCTMB8GA1UdIwQY
MBaAFAsikAf10t36P3JcD6RSxHttnYVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lLUUJfWFMzZm9fY2x3UHBGTEVlMjJkaFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZThmNDEtNGNlZC00MzRjLTkxNDQt
ZDJhNDM3MWIzZTUzLzEvQ3lLUUJfWFMzZm9fY2x3UHBGTEVlMjJkaFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82ZThmNDEtNGNlZC00MzRjLTkxNDQtZDJhNDM3MWIzZTUz
LzEvQ3lLUUJfWFMzZm9fY2x3UHBGTEVlMjJkaFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6jTShYr
0d0xIM8GbBNpcCWOHw+z2FSyWPg8NhE4BkMTx20zICz2IV2R+ewz3xFdATc80BBt
yhGrdNmxHjOtWF+ZmLmQ2z/Z4QO3ElcCH4YoOfnXR5JiuH9wqgeJNpsNO4l50Ohu
gj045FjDU/1qPA9dn0wm4AVNAHqJZI1pgMeO3pt88tys68t/EuFAdB3XcufQGLNo
7i3ZDPj3/VpMk/uJvLpGncgSlTPMKB6fPSvi4gfNlmOGiAymN/LwT31PAG7+DxCj
tMrFanBGMWoQw6osWQINLA92niYc6Pg2ThRVksWanDcU+TWOVoZ9k6NvKUFt9fmJ
TD5YeVAhnsMAsQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:56 2025 by rpki-client