Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
File: cyrf7tpQvgNppSvklRoJOWh0T2c.mft (raw, json)
Hash identifier: HBwnc+v5c5rsdlDtIJVVk5Nk0BNqnGJyrKw/6MFZlaA=
Subject key identifier: 9F:0F:06:CC:F2:9D:46:22:16:DE:CE:26:84:74:9C:93:0D:A7:DF:FB
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Certificate issuer: /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial: 0198D73B23F5BF8DC73447FD1E14CFC4ECB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:33 +0000
Manifest this update: Sat 23 Aug 2025 14:00:33 +0000
Manifest next update: Sun 24 Aug 2025 14:00:33 +0000
Files and hashes: 1: cyrf7tpQvgNppSvklRoJOWh0T2c.crl (hash: TWMCY/DXUkgFeXkatqmccy9uunzjdrfclS/QtgeYrVc=)
2: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (hash: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:23:f5:bf:8d:c7:34:47:fd:1e:14:cf:c4:ec:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
Validity
Not Before: Aug 23 14:00:33 2025 GMT
Not After : Aug 24 14:00:33 2025 GMT
Subject: CN=9f0f06ccf29d462216dece2684749c930da7dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:be:83:41:45:08:99:7f:a5:d8:ff:6e:d8:
6a:f6:d2:1c:3a:3f:c6:f7:33:f3:b8:4c:44:85:fd:
39:97:a8:17:6c:bc:f5:1e:f3:5a:e8:a6:3a:2b:0d:
a5:af:fb:fa:d1:26:10:48:60:cb:83:cf:21:c6:e4:
94:a7:71:a1:ae:db:21:f7:36:b4:59:50:e0:73:75:
af:c8:15:99:34:8f:ff:9d:13:bc:7d:d5:de:5c:03:
3e:0e:75:34:5e:c1:ad:a0:14:97:f1:d6:d1:f7:14:
7b:08:67:aa:4c:00:dc:cc:f3:34:2f:0b:fb:75:e1:
bc:4d:8f:5b:d0:ee:01:38:40:74:33:65:5b:18:aa:
99:99:39:8c:19:be:eb:a1:3f:f3:07:43:41:8d:8c:
ec:2b:0f:e0:f6:5a:7d:7f:c8:9c:21:ab:cf:9f:26:
fd:a2:97:a5:6f:70:62:8a:a5:a4:21:96:51:96:95:
40:93:c7:6d:5a:a4:d1:8b:f1:d0:b4:97:de:86:c8:
5f:81:ad:f3:06:ac:c2:ef:48:e5:d1:ec:56:80:4c:
8b:36:22:ec:8e:5f:01:bf:d0:ba:d6:d8:d5:70:1b:
f5:34:bb:9f:ef:13:71:25:3e:99:15:04:7b:3b:48:
90:fd:4d:fc:5b:b6:05:e2:e5:1d:a9:a5:cf:2a:14:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:06:CC:F2:9D:46:22:16:DE:CE:26:84:74:9C:93:0D:A7:DF:FB
X509v3 Authority Key Identifier:
keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ed:d3:fe:ec:7b:aa:dd:75:d3:5e:3d:07:a8:b7:2d:d1:d8:
20:ed:7d:2c:3b:72:ea:87:b3:a7:e0:42:f8:84:6f:32:9b:89:
8c:6c:9e:5a:55:3c:2f:d4:d9:2f:cd:fd:65:2e:b0:1d:e9:90:
56:58:f8:7d:99:4a:73:32:73:04:71:6e:13:7a:1a:21:9c:15:
96:35:b0:36:db:df:08:eb:13:a7:c6:6e:b8:d6:9c:29:68:a8:
f3:af:03:74:06:90:3a:21:91:6e:2d:cd:9a:2b:3a:f9:7a:9c:
ed:42:71:15:fd:de:4a:71:44:de:df:9a:6d:eb:56:58:ba:de:
26:2b:a8:0e:cd:d0:7d:b1:3b:a9:34:30:84:a5:f3:c6:c8:3a:
75:22:94:ef:64:4b:76:0d:62:15:e3:ab:3b:6e:da:f8:5f:b4:
fe:7d:01:9d:26:c4:60:68:f3:f9:b7:61:20:6f:ed:c4:ee:0f:
6c:9a:00:28:2a:a8:b4:d2:37:7f:fe:85:60:ed:d2:09:8c:73:
05:cd:b5:c4:e1:aa:d7:01:c0:09:10:62:4a:60:a5:fe:bb:62:
c7:41:87:bb:bc:47:09:3a:38:e3:7c:1c:4b:a2:46:81:c6:df:
91:8c:c2:5b:05:a9:ae:29:28:50:4d:13:f0:1d:8a:fe:66:51:
26:67:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:56:20 2025 by rpki-client