Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: yZVUt64Bd+WAzXeUiHkgM8IuhPBpCbyOGYxV1/NnuzE=
Subject key identifier: 96:9B:53:F3:3D:C8:65:EC:4A:05:53:80:AE:97:9C:57:A6:25:9C:55
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 0197B6A104173269F36B99D0BC7DDB0583AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: A2
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: nL1wvJn6E3YTBqVynX6F137bpEGZNLw6SF8vm5wgoYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:04:17:32:69:f3:6b:99:d0:bc:7d:db:05:83:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=969b53f33dc865ec4a055380ae979c57a6259c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:e5:74:ef:c9:b6:5f:c2:02:95:02:8f:52:
b5:30:ca:86:c7:c3:3b:ea:5d:ca:45:75:6a:26:78:
bf:ea:1b:15:13:e9:e1:22:56:5d:9c:df:10:3d:91:
a1:34:88:0c:5a:92:41:bf:46:3e:73:98:90:27:0d:
40:2a:7d:57:ba:52:fe:62:6c:14:d9:77:b8:b2:72:
25:cf:7f:84:c3:42:40:91:ac:04:86:a3:d5:c9:cb:
e8:5d:72:9c:ce:e8:12:36:17:e8:cb:d7:a1:b3:f3:
fa:62:00:05:d4:34:e1:11:78:18:fc:7d:3e:4f:93:
17:c7:00:cb:c4:c7:32:9d:18:e2:59:aa:ce:a1:2b:
c3:ac:47:98:20:2a:3d:9a:06:03:60:ed:7c:b1:80:
42:fc:93:3f:8f:e1:e3:56:be:39:03:cd:aa:20:f0:
9d:d7:42:7a:0b:87:be:c9:39:d7:a7:38:d1:3b:6b:
5b:6f:cc:ff:13:1a:78:a2:e5:ef:6c:b5:ea:89:8f:
e0:a3:b1:cf:81:ce:d9:5b:6e:e0:5e:cf:ae:9f:0c:
67:6f:f1:f6:45:2d:69:59:72:20:72:74:84:ed:64:
9e:f8:ed:50:93:f5:cd:02:bc:0c:0a:be:76:b5:57:
88:76:57:2b:fb:71:28:9e:60:3a:47:81:a7:76:96:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:53:F3:3D:C8:65:EC:4A:05:53:80:AE:97:9C:57:A6:25:9C:55
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3c:63:d8:33:12:94:6a:e5:a8:e0:4d:d8:6f:0d:bf:fb:1b:
5a:80:e7:b8:c2:b6:00:e2:05:9c:40:a2:e0:5f:75:7e:05:05:
41:87:74:6f:c5:13:b7:e8:68:45:79:b2:f3:ba:4f:8b:82:eb:
a4:ba:89:79:ca:df:cd:86:25:95:63:8d:6d:93:40:8e:98:3d:
11:24:04:2a:6b:fa:bd:fd:13:3c:a5:69:e9:3c:a1:f5:27:c2:
55:73:e5:f7:b7:98:c9:53:f2:73:a3:1d:fa:f3:19:c6:6f:82:
01:ed:dc:b9:e4:1a:29:3f:38:8a:4f:94:27:d6:bd:fe:56:bb:
27:b7:60:bf:6c:33:e5:c6:03:53:7b:59:89:72:36:3c:05:bc:
89:1d:a2:d4:39:f3:94:70:6c:d4:bb:5a:cf:12:01:f1:13:e8:
2f:e1:59:8a:d9:ee:ae:50:1d:bb:fc:7f:20:19:84:79:f7:b7:
60:b2:ea:74:c3:0e:9a:fd:13:46:10:0e:f9:21:51:06:b5:f5:
21:0c:2e:ff:62:f4:ae:97:db:cd:17:01:ca:ab:d5:24:6b:02:
09:03:e5:ac:d8:b3:47:62:5b:14:53:b0:0d:50:c8:c0:e8:64:
84:7d:4d:73:13:79:94:d3:49:0c:fe:86:c1:c9:85:13:bb:88:
c5:23:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:23 2025 by rpki-client