Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: XHCcmQgKUoG0kC+ZoICvdXuWovQASdioL6zAEs/Dsso=
Subject key identifier: A1:32:5D:A6:FA:D1:4E:BB:AD:E2:7A:ED:17:D8:5E:06:B6:83:78:AF
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 0199FFC71B08352ECED2ACC9C586AC75B41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0DAF
Signing time: Mon 20 Oct 2025 04:01:02 +0000
Manifest this update: Mon 20 Oct 2025 04:01:02 +0000
Manifest next update: Tue 21 Oct 2025 04:01:02 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: O5giUNAkric95Q1lZmBToOfT57YRDTh9/hJcN0DDqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:1b:08:35:2e:ce:d2:ac:c9:c5:86:ac:75:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Oct 20 04:01:02 2025 GMT
Not After : Oct 21 04:01:02 2025 GMT
Subject: CN=a1325da6fad14ebbade27aed17d85e06b68378af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:16:82:b5:ea:85:82:0b:4d:a1:af:78:13:
9d:99:22:42:61:ca:98:3d:d9:b1:ba:dc:d5:e7:1c:
f4:90:99:a6:17:4a:c4:21:b1:6d:bd:77:8f:ad:a1:
85:03:31:43:8c:b5:98:3f:b8:19:a6:67:08:07:8c:
27:e5:fb:b4:eb:b6:38:f6:79:0c:3a:29:83:88:fb:
ac:b5:2a:bd:da:13:82:2e:b3:50:81:90:6b:8e:f1:
a0:55:fe:41:bf:52:06:56:43:ce:c3:86:d9:42:31:
4d:15:a6:71:5d:c0:88:02:19:b1:be:68:4d:28:74:
43:86:ea:24:92:96:df:1d:5f:7a:95:e5:a4:17:6e:
c6:36:fa:1b:be:e0:f5:36:c3:1d:07:db:86:d0:87:
94:7d:c9:df:c7:75:46:e9:4c:d2:b0:1c:cc:4a:31:
ef:87:51:f6:11:92:9f:cd:55:f5:41:b3:bd:29:b1:
1d:d6:72:4d:39:b2:3d:d5:83:5a:08:ee:a1:b5:c0:
e4:b0:c4:89:5d:f6:ca:d5:ff:51:90:0e:4e:6c:1b:
2a:aa:06:96:8f:41:78:76:ad:13:9d:c0:43:c2:2c:
b8:b4:05:36:3b:1c:54:2a:ec:f2:b2:63:6a:ed:2c:
1b:67:5b:1c:8b:31:38:80:c1:df:97:a2:e1:da:a1:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:5D:A6:FA:D1:4E:BB:AD:E2:7A:ED:17:D8:5E:06:B6:83:78:AF
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:51:6f:07:b8:a9:57:e2:cc:6d:e8:9f:5f:d3:13:75:d4:
3b:97:b1:8b:0f:a9:f1:15:90:42:fc:e5:73:97:36:89:76:33:
e2:b6:59:bf:00:83:e5:ea:61:62:d9:a9:c4:f9:3a:1a:3c:d5:
cd:8c:76:78:f2:ca:40:83:5c:0e:44:7e:17:4b:3e:f1:2c:24:
dc:de:02:0e:49:06:31:04:37:58:bd:31:26:3c:c0:a2:3a:e8:
e5:fc:52:bc:46:3a:f1:47:55:9d:1b:1a:73:31:0b:5b:05:31:
5e:9e:0f:c7:3b:2a:1f:d4:5f:c2:82:e3:51:8a:b0:0b:40:96:
87:d1:56:c7:6c:5f:d3:16:ed:05:3b:1d:49:84:4c:f0:7b:ed:
8c:e7:40:56:9a:37:d2:c3:f4:54:98:8d:bb:66:e8:ed:68:ea:
42:ed:40:a8:3f:31:d4:ef:7c:b6:67:e1:24:03:1f:2a:e7:ca:
bd:64:6b:74:c2:a4:23:05:5b:c4:ed:3b:2a:22:30:8a:d9:f2:
0f:57:39:02:1e:0a:08:60:52:48:be:a6:36:88:06:f8:1f:45:
02:ca:ef:74:fc:05:6f:09:f7:a9:1d:ec:54:1c:16:60:e7:62:
e8:1f:1d:5d:f3:6c:34:88:1e:0d:90:4d:eb:b3:3c:62:62:b6:
ac:43:b9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/xxsINS7O0qzJxYasdbQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODYwM2YwZDQ0YTkyMDQ0MzM4YTJjYWRmMTg5ZTgxMDFj
M2JmNWYwHhcNMjUxMDIwMDQwMTAyWhcNMjUxMDIxMDQwMTAyWjAzMTEwLwYDVQQD
EyhhMTMyNWRhNmZhZDE0ZWJiYWRlMjdhZWQxN2Q4NWUwNmI2ODM3OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUIWgrXqhYILTaGveBOdmSJCYcqY
PdmxutzV5xz0kJmmF0rEIbFtvXePraGFAzFDjLWYP7gZpmcIB4wn5fu067Y49nkM
OimDiPustSq92hOCLrNQgZBrjvGgVf5Bv1IGVkPOw4bZQjFNFaZxXcCIAhmxvmhN
KHRDhuokkpbfHV96leWkF27GNvobvuD1NsMdB9uG0IeUfcnfx3VG6UzSsBzMSjHv
h1H2EZKfzVX1QbO9KbEd1nJNObI91YNaCO6htcDksMSJXfbK1f9RkA5ObBsqqgaW
j0F4dq0TncBDwiy4tAU2OxxUKuzysmNq7SwbZ1scizE4gMHfl6Lh2qFg4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEyXab60U67reJ67RfYXga2g3ivMB8GA1UdIwQY
MBaAFAmGA/DUSpIEQziiyt8YnoEBw79fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYt
YjczNjg2NDI3OTQyLzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYtYjczNjg2NDI3OTQy
LzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUFRbwe4
qVfizG3on1/TE3XUO5exiw+p8RWQQvzlc5c2iXYz4rZZvwCD5ephYtmpxPk6GjzV
zYx2ePLKQINcDkR+F0s+8Swk3N4CDkkGMQQ3WL0xJjzAojro5fxSvEY68UdVnRsa
czELWwUxXp4PxzsqH9RfwoLjUYqwC0CWh9FWx2xf0xbtBTsdSYRM8HvtjOdAVpo3
0sP0VJiNu2bo7WjqQu1AqD8x1O98tmfhJAMfKufKvWRrdMKkIwVbxO07KiIwitny
D1c5Ah4KCGBSSL6mNogG+B9FAsrvdPwFbwn3qR3sVBwWYOdi6B8dXfNsNIgeDZBN
67M8YmK2rEO5yQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:46 2025 by rpki-client