Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json)
Hash identifier: Hx3ferCw2cvXuQHzioBhTBYmE7C6sR0S7WDCil6RS1s=
Subject key identifier: 6E:56:E3:33:F4:07:07:D8:5C:4C:FB:AA:FE:73:DB:55:FB:07:F5:00
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 0197B632AAD8BB33624AD7ACAD7AE9995DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
Manifest number: 10D0
Signing time: Sat 28 Jun 2025 11:01:03 +0000
Manifest this update: Sat 28 Jun 2025 11:01:03 +0000
Manifest next update: Sun 29 Jun 2025 11:01:03 +0000
Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: R2y4zlOP66gMMoAlLdrLBMqzR8L73ofYoYZGrpo+cQA=)
2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:aa:d8:bb:33:62:4a:d7:ac:ad:7a:e9:99:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Jun 28 11:01:03 2025 GMT
Not After : Jun 29 11:01:03 2025 GMT
Subject: CN=6e56e333f40707d85c4cfbaafe73db55fb07f500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:61:8e:b6:d0:44:0f:f9:bb:42:72:b1:dc:
54:e8:f3:59:bb:4f:17:b7:3b:fd:f7:25:be:9b:ab:
7b:27:4c:5a:1b:b3:f6:cd:0c:db:cf:7a:55:e7:f3:
c6:fe:f4:98:db:f1:c8:63:6d:a2:4c:4e:45:19:b6:
3f:88:57:70:86:02:04:37:cb:c5:fb:7c:44:98:34:
2d:11:c1:ad:24:6f:7a:c8:42:4c:14:a4:df:fd:b2:
cb:ad:0e:ee:70:f5:95:c3:5b:e1:0f:6c:13:1b:1e:
b7:29:7a:19:e5:78:44:f1:77:ea:24:7f:7c:85:3b:
74:b7:a9:8c:01:54:0e:0d:86:f5:a2:72:13:12:52:
a2:c9:9b:1e:9b:8d:f5:a0:eb:fd:85:30:b6:da:21:
c2:7b:cb:cc:8e:6a:7d:d0:0d:25:ee:78:83:74:66:
8d:a1:5e:46:f3:14:83:c3:7f:17:06:bb:8d:5f:08:
82:fa:fc:4a:89:e5:da:5f:1c:b5:59:05:b7:d2:e9:
bc:70:1b:d0:14:d0:42:aa:1a:2a:eb:71:98:2f:7e:
72:aa:75:7f:e9:fb:97:7e:82:d2:af:9e:a7:c1:c0:
4c:c7:08:0c:33:f9:0a:cc:9e:fd:c2:0f:a3:87:c1:
91:d3:3c:93:11:8f:10:30:80:ff:c8:d1:6e:ff:8d:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:56:E3:33:F4:07:07:D8:5C:4C:FB:AA:FE:73:DB:55:FB:07:F5:00
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a0:c9:60:08:1b:8e:f1:a1:81:a4:d0:34:a7:0d:b9:2f:da:
80:31:e9:cb:06:91:c8:ab:8d:73:9e:12:14:57:e3:8d:bd:13:
87:00:62:53:87:c8:c2:d6:1a:f3:23:08:cf:47:c7:55:49:38:
44:f8:4f:1c:7d:50:27:e3:7f:75:47:18:3d:ca:11:79:6f:76:
fe:56:b8:57:a1:37:57:2e:4d:86:06:14:93:17:07:9f:57:0a:
25:cb:79:12:db:d4:df:14:0a:f9:9f:b6:f3:f4:b5:a2:b1:f8:
fa:9a:93:21:7d:cc:4b:bf:70:97:4b:a3:e7:f6:63:c9:03:4e:
11:b9:39:f8:ae:65:75:ec:2b:05:e9:b4:f1:bc:69:c7:cd:ad:
c7:b6:75:a3:f0:2a:e2:d9:ac:a3:84:c0:ee:e8:78:a3:b9:d2:
7f:22:d8:06:8d:8f:40:96:0a:f3:e8:86:53:02:83:2d:4f:5f:
14:9f:28:41:36:1d:d9:24:3b:61:ce:60:43:08:95:c8:8b:d4:
1f:98:e1:c9:1d:89:4d:d4:72:1c:26:68:68:e8:76:70:ca:bf:
d5:84:f7:f3:58:90:d5:22:8a:f9:31:1f:e3:96:68:c3:0d:61:
96:e6:66:47:09:5d:5e:85:e4:42:3f:d1:26:ff:74:13:1a:36:
a2:1d:e4:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MqrYuzNiStesrXrpmV3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi
ODVjNmUwHhcNMjUwNjI4MTEwMTAzWhcNMjUwNjI5MTEwMTAzWjAzMTEwLwYDVQQD
Eyg2ZTU2ZTMzM2Y0MDcwN2Q4NWM0Y2ZiYWFmZTczZGI1NWZiMDdmNTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7thjrbQRA/5u0JysdxU6PNZu08X
tzv99yW+m6t7J0xaG7P2zQzbz3pV5/PG/vSY2/HIY22iTE5FGbY/iFdwhgIEN8vF
+3xEmDQtEcGtJG96yEJMFKTf/bLLrQ7ucPWVw1vhD2wTGx63KXoZ5XhE8XfqJH98
hTt0t6mMAVQODYb1onITElKiyZsem431oOv9hTC22iHCe8vMjmp90A0l7niDdGaN
oV5G8xSDw38XBruNXwiC+vxKieXaXxy1WQW30um8cBvQFNBCqhoq63GYL35yqnV/
6fuXfoLSr56nwcBMxwgMM/kKzJ79wg+jh8GR0zyTEY8QMID/yNFu/41FuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5W4zP0BwfYXEz7qv5z21X7B/UAMB8GA1UdIwQY
MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt
MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My
LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6DJYAgb
jvGhgaTQNKcNuS/agDHpywaRyKuNc54SFFfjjb0ThwBiU4fIwtYa8yMIz0fHVUk4
RPhPHH1QJ+N/dUcYPcoReW92/la4V6E3Vy5NhgYUkxcHn1cKJct5EtvU3xQK+Z+2
8/S1orH4+pqTIX3MS79wl0uj5/ZjyQNOEbk5+K5ldewrBem08bxpx82tx7Z1o/Aq
4tmso4TA7uh4o7nSfyLYBo2PQJYK8+iGUwKDLU9fFJ8oQTYd2SQ7Yc5gQwiVyIvU
H5jhyR2JTdRyHCZoaOh2cMq/1YT381iQ1SKK+TEf45Zoww1hluZmRwldXoXkQj/R
Jv90Exo2oh3kCA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:20 2025 by rpki-client