Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: aWONXFEtf+DHkV5OldBZfXQ26fvYyleo8S88zSlMAb4=
Subject key identifier: 72:78:DD:BC:60:B1:2E:AF:37:01:5D:23:77:A7:D1:EE:B5:2B:15:DC
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 019873E237CAF3BCAB026A09E4FF71E879F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:01 +0000
Manifest this update: Mon 04 Aug 2025 07:01:01 +0000
Manifest next update: Tue 05 Aug 2025 07:01:01 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: vJubcqaNsTQcrSBgGW+kJ15CcxY64hOJQTkpEgM+HyE=)
2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=)
3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:37:ca:f3:bc:ab:02:6a:09:e4:ff:71:e8:79:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Aug 4 07:01:01 2025 GMT
Not After : Aug 5 07:01:01 2025 GMT
Subject: CN=7278ddbc60b12eaf37015d2377a7d1eeb52b15dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:ef:7a:bb:f3:f5:64:51:50:ee:44:98:2b:
03:66:7f:f0:6c:81:b2:83:5d:7b:fc:5d:a0:5e:93:
d3:71:cf:63:26:ac:2a:52:3e:79:9d:f9:43:ef:f5:
5d:f6:0a:3b:a4:bc:73:27:90:d9:3b:1f:2b:ee:4a:
8c:1c:d2:b7:09:7a:6d:a3:a6:55:72:2a:c8:a4:60:
53:b3:f5:18:c7:5d:d7:58:5c:76:82:48:ce:3b:90:
48:f1:ea:16:d7:70:cd:73:6e:0a:e2:c1:39:ff:21:
40:ce:f9:49:58:b1:f8:d4:7a:c5:bc:c0:ea:8e:dc:
54:1b:26:74:d9:29:2a:c8:46:93:57:ad:e5:bf:c6:
d3:97:50:51:c4:c1:71:cf:2c:34:84:32:50:2b:f1:
b2:03:ed:cd:d9:d8:13:bb:db:38:85:2f:8e:5b:8b:
90:d6:f5:23:07:96:43:f9:ad:49:86:7e:26:70:75:
39:52:54:f7:7d:c8:f6:e0:6d:94:c0:46:97:0b:c9:
08:3f:f0:bd:07:b1:08:ba:d1:a1:d5:8b:c5:db:e2:
51:b2:3b:34:a8:36:80:9c:91:77:58:e7:b8:49:f1:
4f:02:51:c9:b8:6d:c2:c4:46:03:65:81:71:4d:67:
fd:ef:49:90:47:6f:46:c4:90:b9:76:fd:4c:9b:9d:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:DD:BC:60:B1:2E:AF:37:01:5D:23:77:A7:D1:EE:B5:2B:15:DC
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:2c:60:97:52:40:b0:bf:ae:6c:4d:6b:c3:16:02:82:0c:
fa:c5:f0:42:29:6d:62:c7:31:45:42:48:76:7c:a9:dc:27:34:
72:c4:ba:ec:d1:71:90:3b:72:75:ae:27:4e:b6:b7:f6:72:c9:
9e:11:40:34:f1:ea:95:f6:d6:de:90:e4:15:69:c2:53:ab:f0:
ab:d1:d4:fb:41:e4:46:a9:59:e8:f3:9f:7f:cf:d3:95:3a:1c:
b9:73:e4:bd:b0:b5:b9:c2:46:3b:90:eb:3d:2e:5b:92:57:71:
fd:ed:cf:f1:df:63:bb:62:b5:e7:d2:a1:81:2d:98:e7:32:7f:
75:36:17:65:98:6f:d8:36:95:93:1a:12:35:7f:17:ea:87:fd:
2e:9c:1d:7b:5b:b5:db:63:07:cd:0c:81:78:48:ac:22:dd:6a:
f8:cd:2c:97:17:91:f1:b5:b9:df:ed:6b:43:9f:3b:c3:9a:0e:
f9:0d:7a:a5:45:a4:68:18:48:ca:ec:4d:92:9f:5f:09:77:62:
a0:5f:06:71:35:1a:b0:85:a8:94:84:d3:06:2b:95:0d:2a:48:
ab:25:db:ab:42:40:70:65:1c:ed:3e:99:a0:31:d8:21:72:b1:
c0:6d:40:1b:3a:1c:71:b7:e2:0a:9d:46:09:85:50:33:10:29:
68:19:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:26 2025 by rpki-client