Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: cfYzgSUa1lO331WZRm/LNzTfvgmw9Xj/Us4vPXgiKvc=
Subject key identifier: DB:0E:07:BA:FB:0A:53:8A:0D:27:6B:37:78:03:B3:E1:13:93:76:77
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 0199FBEB446338F315CA0549EF2A1FA04F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 0EEE
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: Pd5McJOw4ZXCLQuMqfcktr6s4Im8CjIVjfC3lcXAa0w=)
2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:44:63:38:f3:15:ca:05:49:ef:2a:1f:a0:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=db0e07bafb0a538a0d276b377803b3e113937677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:df:12:f3:de:df:d9:6f:26:25:68:1e:7e:
c8:2a:08:d1:49:92:5f:34:c5:aa:dc:24:2d:1e:91:
c8:c9:62:bd:74:6d:ab:dc:0a:8c:54:ba:83:68:1c:
4e:86:a0:d7:7c:d6:65:40:c9:a5:3f:84:7b:f0:77:
2f:78:5e:b2:26:36:34:86:76:93:bc:f4:0c:2b:fe:
19:20:83:43:50:72:9d:9b:bb:e2:f4:ad:57:2b:03:
9c:41:60:f7:86:e4:1f:96:a2:0f:e5:78:05:26:3b:
52:66:20:11:8a:e0:f3:95:d8:cb:e1:0f:7f:69:67:
fe:78:39:ec:76:53:f6:5f:f4:1f:ea:f2:8e:50:ca:
ec:9a:03:40:b6:dc:d3:04:2c:5a:b3:03:82:d7:8a:
57:59:d3:5e:f7:ee:71:ca:56:53:a2:c2:ac:fd:d8:
64:1d:6c:be:32:98:2b:1a:54:24:72:01:3a:2d:57:
0f:3c:3c:b6:e9:1c:b8:56:59:6b:e4:07:3e:d0:54:
0d:03:65:22:d4:5d:f5:6d:0c:f7:b2:47:f1:0b:d3:
cb:6d:da:f9:3e:df:77:ba:7c:e6:bc:48:65:2a:67:
ab:6b:33:3a:44:fc:ed:ec:5c:76:22:ee:0d:a8:58:
f2:d7:26:55:9d:0e:1e:5e:a6:77:61:83:08:c5:f6:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:07:BA:FB:0A:53:8A:0D:27:6B:37:78:03:B3:E1:13:93:76:77
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c1:24:06:6b:49:a5:35:63:6a:1d:bc:a1:9d:6a:01:0f:42:
ff:23:7c:e1:84:43:f7:15:69:c4:2e:d0:c5:91:f3:80:1d:4b:
ac:85:d5:23:50:b8:b8:bc:48:50:3c:3d:01:c9:4a:75:0a:11:
a0:e2:0e:ea:ac:a0:87:fe:ad:5c:31:38:4f:04:9a:cd:eb:03:
35:ba:dd:f9:35:cb:ee:12:b6:09:fc:46:ee:77:a9:e4:99:0d:
02:f1:69:c6:03:1c:f0:39:4a:db:e3:f6:a1:00:7d:45:35:24:
5b:9b:6f:a3:18:20:35:5d:05:56:54:ba:e5:cc:98:fe:23:ef:
98:d1:4a:8d:a2:ba:40:4c:9f:45:7d:9f:2b:30:9b:69:13:7f:
f7:4c:2d:5e:c9:24:d6:09:b7:24:fe:d2:7e:c4:7d:73:04:38:
5a:65:86:a5:74:98:a8:d7:a6:a9:1c:9e:04:c4:20:fb:5b:56:
04:a7:fe:25:eb:64:b5:74:a2:ba:5e:fc:31:d9:66:44:bf:d0:
89:d7:92:d9:fc:8f:0a:bd:2e:1e:20:c3:9b:e4:33:5c:75:a0:
2d:78:90:9a:7e:94:f9:b6:72:df:1c:27:0f:fe:24:7e:5a:a3:
f5:89:3b:5c:06:31:c0:c7:dc:b0:0c:73:a5:9a:a0:e9:0b:57:
40:43:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:58 2025 by rpki-client