Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File: RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier: Csngt9NEong9Ebdfx/JH6MCVS8+601OiCuX09vU/kZU=
Subject key identifier: 0A:40:BD:B8:A1:13:34:0D:1C:E4:61:3E:EC:90:43:11:39:1E:C8:A2
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer: /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial: 019A54C06D8D6EDF2EC40259DA023E047E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 16:01:28 +0000
Manifest this update: Wed 05 Nov 2025 16:01:28 +0000
Manifest next update: Thu 06 Nov 2025 16:01:28 +0000
Files and hashes: 1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: 0gaGRKogQ49zEh1NSCaGc5FS+lPIfxxU1QzdkBZuhpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:6d:8d:6e:df:2e:c4:02:59:da:02:3e:04:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Validity
Not Before: Nov 5 16:01:28 2025 GMT
Not After : Nov 6 16:01:28 2025 GMT
Subject: CN=0a40bdb8a113340d1ce4613eec904311391ec8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:5c:72:35:d2:72:fa:81:c3:b4:2c:09:5f:
0d:d6:05:34:5e:7b:25:df:b8:ed:0c:3f:44:6b:b3:
a9:55:11:19:03:b5:9f:7e:30:23:00:ed:c9:d4:f3:
e8:81:fe:3e:c5:a1:1c:46:29:9e:50:69:56:94:96:
61:80:9b:aa:c1:cc:6f:01:05:41:63:8e:68:f6:da:
3d:dc:b4:5d:25:ba:a2:08:09:88:d6:08:ed:d8:9c:
ce:19:09:dd:95:28:b8:22:94:60:45:b5:81:a3:ca:
84:cc:2b:cd:fb:aa:f9:d0:66:b8:9a:c7:e4:53:85:
de:95:05:ba:de:72:18:fb:19:d4:8e:5e:d4:5e:12:
bb:12:bd:6c:9e:cb:85:37:5f:f4:6d:a5:67:e3:c5:
70:70:e1:f4:7a:54:b9:d5:2a:c1:c4:e5:d8:9b:be:
2f:b2:b0:27:70:de:e8:12:ba:ee:71:29:d1:d0:e4:
47:b9:f7:5d:ff:a6:b5:e3:ff:92:0a:8a:43:61:a6:
03:c8:d9:60:95:d4:20:32:36:92:e5:93:9f:55:85:
87:d0:3b:8a:a4:07:5f:9a:1d:6c:c7:e3:99:17:0c:
80:53:34:7a:a7:34:4b:0c:3f:70:d4:dc:bf:a0:41:
14:86:74:74:83:b2:4b:b1:0f:7c:39:7b:be:12:e7:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:BD:B8:A1:13:34:0D:1C:E4:61:3E:EC:90:43:11:39:1E:C8:A2
X509v3 Authority Key Identifier:
keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ec:7b:5e:87:33:84:1f:65:3f:09:28:d8:1b:e8:bc:40:66:
60:b5:91:85:e3:e3:49:ac:cb:ab:48:f5:af:c1:72:ca:9b:5c:
92:a7:55:f9:63:08:0a:04:ad:e8:4c:9a:be:ed:c5:63:eb:2c:
29:78:1f:89:ca:4e:80:1f:4c:e9:35:32:fb:ad:8f:8b:be:68:
4f:9e:70:a4:ea:bc:46:ed:ed:5a:c5:1b:b4:75:77:b4:1d:b5:
5c:e9:de:d3:09:6e:b5:8a:47:4f:14:77:5a:16:1e:e6:98:2f:
18:b0:45:b9:ab:62:5d:ca:17:5f:98:99:18:98:14:41:b4:d9:
fb:a5:ec:be:d4:36:ed:98:b2:ea:a7:31:e0:70:40:fc:1d:19:
0f:bb:08:7e:a9:4e:a8:31:13:a8:f9:09:17:24:ca:e8:03:4a:
6b:7e:d9:8f:73:17:2f:25:fa:c9:d4:76:42:00:4e:92:03:be:
75:43:bd:1f:bd:9e:f7:d8:1a:73:c1:45:5f:34:f0:69:f9:a8:
1c:82:99:49:ea:56:81:4b:13:92:d0:4d:0e:d6:b4:e1:02:c2:
ec:07:88:9f:39:8d:8c:3e:2f:7a:5d:00:4f:cc:b7:28:2e:86:
39:ce:e7:e4:ff:c7:6b:41:36:42:b9:ad:d3:d8:a5:2b:b7:26:
45:a2:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:39:18 2025 by rpki-client