Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: ZyfboeAHp5GYHm7UNF7jHsW+mfElcLFuBEOkgdGXwKE=
Subject key identifier: 26:8E:CE:BD:A4:1E:6B:85:1C:18:D6:4D:C8:34:B2:CA:0F:A2:75:46
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 0198D404896C0C3B53D8B86D24BEB7EEB674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:03 +0000
Manifest this update: Fri 22 Aug 2025 23:02:03 +0000
Manifest next update: Sat 23 Aug 2025 23:02:03 +0000
Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: xpKHoPnPLr33O56DJ+Zoy7xxv8JkqYd6FG+VRgBXFu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:89:6c:0c:3b:53:d8:b8:6d:24:be:b7:ee:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Aug 22 23:02:03 2025 GMT
Not After : Aug 23 23:02:03 2025 GMT
Subject: CN=268ecebda41e6b851c18d64dc834b2ca0fa27546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:fe:49:36:02:cb:c9:8d:47:c0:8b:55:6f:
fc:44:2a:21:1b:d8:08:4d:1c:dd:80:21:b1:37:b8:
f9:75:89:4a:93:df:ca:8e:36:35:04:1f:01:d1:48:
b8:c9:43:ee:79:e2:b6:41:ab:51:d2:18:3f:1b:c8:
1b:02:db:f1:23:47:e8:fc:07:c8:d8:21:ef:9d:94:
7c:8e:71:2e:63:25:e0:33:88:c9:e9:8d:85:00:2d:
03:f2:8e:1b:86:71:e0:2a:db:f1:e2:78:3d:f2:4f:
4b:e9:a5:2b:8a:c8:e7:2f:48:13:61:a1:ce:48:31:
99:79:88:d2:e5:04:e7:4b:c8:0f:f9:b7:f6:7e:98:
20:ad:fa:bb:e9:7c:a5:cc:b4:f5:81:6f:a8:5c:b3:
73:dc:c7:c8:b7:d5:66:27:ba:a4:1a:86:f5:e2:93:
fe:9c:aa:02:07:51:0c:f6:a5:79:62:75:3a:81:47:
89:5c:a3:77:c6:49:75:35:1a:0e:22:36:65:3d:9e:
e6:eb:f9:cc:6c:5a:6c:6b:61:08:c9:54:3f:da:a6:
8e:50:57:20:db:69:01:19:60:47:d2:02:3c:78:f2:
19:f8:e9:08:33:5d:3f:7d:34:36:70:09:96:03:be:
65:19:7d:86:62:5d:4e:cd:74:f3:2b:fe:b2:4f:68:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:CE:BD:A4:1E:6B:85:1C:18:D6:4D:C8:34:B2:CA:0F:A2:75:46
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f0:18:1d:19:5b:49:e9:5e:7e:2a:26:bc:10:33:ac:ab:be:
71:d7:d1:5d:7a:c0:5f:00:3e:55:a1:f3:b7:98:48:a8:b2:98:
28:8c:72:ef:df:0e:61:8e:0b:58:0b:0b:fa:48:31:af:0e:f1:
32:f8:de:c2:5e:b2:ae:86:f2:61:25:d1:10:4c:7b:fe:45:2d:
c3:36:4f:a0:21:e5:b4:0a:d6:57:2c:8e:50:6b:1e:e9:d6:ce:
90:69:2a:bc:12:6a:1a:e3:33:f6:6e:59:57:f8:6b:3a:f1:35:
2a:db:7b:6e:ee:99:9c:23:10:61:17:2a:c2:9b:f7:43:c4:7d:
bc:ff:a8:da:49:f4:1d:97:fe:9a:ca:56:5b:c9:d9:c9:20:78:
47:c3:7b:af:32:60:44:93:e9:ef:8b:7d:12:ec:cb:16:30:91:
56:e0:33:37:ea:2b:cf:1c:84:72:67:a5:18:32:d9:6e:d3:55:
51:59:e1:d8:9e:dc:d5:7e:72:aa:65:25:f1:78:f5:34:56:ed:
41:4a:85:b7:36:b3:a4:62:94:27:fb:b9:c7:fb:37:b2:ed:a5:
1e:b8:aa:6d:54:36:ff:77:f9:c2:9f:b2:d3:3b:f6:5a:f2:58:
49:72:99:81:a6:cc:80:43:c4:22:1d:8a:7e:07:87:65:47:c6:
bb:47:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:39 2025 by rpki-client