Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json)
Hash identifier: ikwm+VOMAU6tQ5Z+CotEk1m85fC8ws/WninUOSJDLms=
Subject key identifier: C2:03:C8:A4:03:57:BF:D8:19:0E:C0:CE:40:58:6D:38:18:A0:51:BF
Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Certificate serial: 0199FBEC6C5B438B1FC15B7828BE579AE007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
Manifest number: 01CF
Signing time: Sun 19 Oct 2025 10:03:19 +0000
Manifest this update: Sun 19 Oct 2025 10:03:19 +0000
Manifest next update: Mon 20 Oct 2025 10:03:19 +0000
Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: pgXDqT1XlXJRt9xpJfQCwZu6C9/zL/Nl9+yWu7PvLnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:6c:5b:43:8b:1f:c1:5b:78:28:be:57:9a:e0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767
Validity
Not Before: Oct 19 10:03:19 2025 GMT
Not After : Oct 20 10:03:19 2025 GMT
Subject: CN=c203c8a40357bfd8190ec0ce40586d3818a051bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:0f:a7:2f:f1:87:2a:14:ec:da:07:28:5b:
11:c2:7e:3c:70:20:ad:13:cc:54:a9:47:2b:d9:6e:
b7:88:18:b7:fe:d3:da:b3:76:c8:db:67:06:0e:f8:
17:6c:82:d5:6c:a8:1c:0b:79:39:ad:cc:16:b0:ea:
0e:d9:3c:f0:a7:9a:be:e6:7a:cc:57:52:8b:1c:19:
15:ac:39:88:47:37:96:77:7c:de:72:76:92:90:c7:
7b:92:a0:92:c7:47:a5:66:95:67:e8:17:0e:bb:7e:
ba:33:8e:6e:a5:04:3c:16:6c:c2:e4:c4:d4:e1:5d:
ff:4d:23:35:a1:ed:5c:af:34:1d:88:11:2b:19:88:
eb:1d:63:ec:25:cb:dc:2f:58:8f:20:eb:89:48:c9:
41:8b:28:96:18:15:3c:3d:11:d7:2d:06:fa:6d:5b:
71:ad:7b:fb:db:c1:6b:1f:0a:4b:f4:1c:e0:67:2c:
e3:f3:28:af:2d:fb:0a:37:0a:c6:03:ce:f7:d9:99:
06:ab:22:6b:a5:8e:ab:c0:8c:e9:d7:a6:c3:01:db:
24:0d:02:c1:12:5b:96:72:46:37:0f:1c:6b:50:0b:
6a:cd:2d:fb:02:4b:70:fb:5d:be:e9:12:84:d7:5c:
c3:32:c4:92:4d:60:c6:70:7a:83:26:4e:03:88:b2:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:03:C8:A4:03:57:BF:D8:19:0E:C0:CE:40:58:6D:38:18:A0:51:BF
X509v3 Authority Key Identifier:
keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:c3:5c:9f:0c:6d:e9:3a:86:bd:53:bd:7f:b4:55:90:53:
fb:d6:11:b2:d0:58:6f:e8:37:b2:51:c0:d7:70:32:96:73:1d:
7a:52:b6:47:ec:97:61:8a:ea:b2:7a:ac:60:f8:7c:dc:36:21:
f6:ba:23:1f:bf:1c:3c:a3:4a:db:75:b9:b8:27:3a:c9:49:09:
2f:ff:5b:54:81:28:9e:cc:fe:d0:fe:ee:7a:f1:49:da:e3:6c:
e7:a3:ad:d2:f3:3d:1b:ba:87:05:2c:16:9a:95:c2:dd:9b:02:
e2:0f:e6:2d:df:57:50:77:66:fc:83:4b:b3:34:b5:f3:a5:15:
db:27:f0:9a:9a:f2:c2:ef:79:87:e7:09:03:89:b1:4a:38:35:
83:5a:47:ac:79:ee:79:30:90:4e:3e:50:eb:5b:ba:54:76:80:
f9:20:d5:ce:6e:43:71:06:9d:0c:d7:01:ac:1c:3b:b7:a2:18:
9a:8c:06:35:78:85:e0:f6:4e:cc:8f:62:00:f7:87:fa:5b:41:
b8:bb:fe:fc:c9:47:88:00:ab:6c:d6:4b:bf:fe:02:ba:c2:2c:
49:9a:1e:1e:f1:15:67:4b:a3:67:df:a6:c5:45:22:6c:74:a6:
a7:14:cc:28:56:12:c8:25:79:b8:f7:25:a7:e3:60:ee:ea:76:
83:51:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:05 2025 by rpki-client