Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: LuP2/JCjb3jiDqZljzbSWqXhAXeXhZ3SaQ072WjocfQ=
Subject key identifier: BB:B5:DB:77:44:4E:3D:51:B7:68:D9:40:CD:80:08:19:D5:3F:89:B3
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 0199FB7CB3F23DC1B242DA2FF7EC0E8CF416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: EliASK4NClPuPrcJkQ6O/rhPJrjt2bXNBxTo/MDYe8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b3:f2:3d:c1:b2:42:da:2f:f7:ec:0e:8c:f4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=bbb5db77444e3d51b768d940cd800819d53f89b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:c5:77:69:04:ce:1e:36:e1:a5:e3:d7:4b:
0b:f5:b3:6b:33:d6:28:24:a0:cc:fe:20:fc:7c:a6:
b7:91:85:0b:dd:fd:48:52:14:68:bf:71:ff:3c:c5:
af:30:bd:3a:ff:d8:40:7a:f6:65:cb:9b:72:fe:38:
25:1e:ae:09:d9:db:c6:f1:27:43:2a:f8:52:d0:a1:
38:9d:02:86:5e:fb:b2:18:4d:a8:24:01:b8:41:c6:
f4:29:d8:0c:a2:6e:cb:4c:74:66:91:e5:84:4b:4d:
6e:49:5c:4f:65:6b:22:d0:ef:89:05:7b:35:af:59:
93:04:b2:c6:97:a3:00:3b:fa:1d:0d:dd:17:30:9d:
c0:e2:c0:15:47:67:9f:a1:6a:1e:58:76:6e:a9:0d:
06:39:62:9b:3a:57:ac:2f:87:4f:32:26:7b:80:c9:
5a:cb:dc:3c:e7:40:df:f7:13:f6:ec:a5:71:c6:77:
b8:85:2b:c4:ba:91:b1:c7:f7:7b:4e:6e:f5:43:3a:
b1:d8:c5:dc:5b:d3:36:f1:04:60:a6:67:09:ed:96:
ff:2a:b1:b8:d9:2e:4a:bb:c1:8a:66:c9:aa:df:61:
99:7d:32:b6:23:fa:05:84:b7:19:b5:d5:5b:90:5d:
74:cd:c1:cc:dc:15:50:09:25:0b:45:ce:67:6b:45:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B5:DB:77:44:4E:3D:51:B7:68:D9:40:CD:80:08:19:D5:3F:89:B3
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:e1:fe:eb:f1:dc:bb:b1:f6:3b:d9:21:d2:3d:da:17:54:
f7:31:e2:7c:83:af:15:d5:76:53:2a:2c:5a:a7:6e:a2:0f:2b:
dd:20:3b:6e:7a:94:9e:91:59:ae:e2:f2:d5:d1:8e:43:59:d3:
34:4b:5f:1f:a0:98:3f:ee:5c:18:0a:8a:2f:04:5e:fd:fe:da:
99:3b:17:0d:03:37:db:ee:f7:a9:c0:68:3f:a7:53:bd:b6:05:
40:4e:15:d8:bc:35:d9:a4:96:7a:cb:74:7e:84:eb:c4:94:cc:
f0:0f:ad:d5:23:82:63:35:ec:90:6c:ca:b6:83:42:00:d6:53:
c5:8d:1f:88:82:19:39:88:5b:3f:4d:76:59:2a:24:d0:40:04:
bc:20:e8:97:6d:c6:8e:31:7e:9b:22:c1:82:bf:3e:a2:21:60:
b3:90:20:73:ca:8d:f9:94:4e:d5:31:f1:cc:f2:0e:34:bd:4f:
ce:3c:29:24:ce:76:75:88:b7:4d:ee:0d:26:a1:e1:1c:f5:3a:
c2:16:84:18:43:d8:6a:ba:60:ea:67:7f:98:f4:82:c2:6b:0c:
f5:3f:0a:46:29:7d:6f:4f:89:b3:50:38:1d:86:93:13:ce:f8:
67:dc:53:f3:e2:84:6b:7e:31:8e:c9:c7:8f:b4:38:66:dd:f6:
ff:76:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:55 2025 by rpki-client