Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: 92za0JKU4jVU0ENJX55kjKuqHUTNc1xg4m7c+59PdSM=
Subject key identifier: 7E:BB:84:F6:7B:C6:D4:C5:A9:32:CC:CD:4B:25:FA:EC:0A:CF:32:94
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 0198D473A9AFB8DFD18A75C6771C9D755E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 0D14
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: iByzNu2NXh8QWZA164dygiaPvfrcdHQ5KZMgm3LdteM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a9:af:b8:df:d1:8a:75:c6:77:1c:9d:75:5e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=7ebb84f67bc6d4c5a932cccd4b25faec0acf3294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:3b:cd:76:1b:e3:be:44:d9:7c:51:f5:dc:
5f:73:a5:a8:11:e0:80:d8:be:7d:25:44:d2:50:55:
22:00:d0:8e:63:8e:fe:20:a5:fb:b1:23:74:3c:0e:
4b:4a:cf:1e:2f:37:4d:d5:c3:65:a6:41:9e:7f:79:
71:24:ca:a1:6a:bd:f1:ca:85:25:c0:90:ef:4b:03:
c4:15:07:7a:57:45:1f:9b:1c:45:59:dc:5a:1a:37:
17:f9:5c:ea:41:4f:cb:17:b3:8b:69:10:39:38:2a:
14:0d:5b:50:18:e2:68:f1:17:06:4f:8b:08:fb:69:
b5:8d:5d:de:17:81:d6:e3:b6:a1:9e:cd:e5:be:5f:
dd:a1:3f:34:2c:3b:45:7f:c3:b3:b5:35:aa:fe:33:
7d:5f:cc:90:91:3e:9f:e1:74:9d:bc:44:f8:32:d1:
32:fd:64:53:a2:e9:9f:38:71:64:68:47:c0:e6:2d:
07:e0:9c:8a:7d:80:6d:02:62:9f:48:04:86:35:43:
8b:b3:0a:6c:76:5c:2f:54:4d:49:c3:02:7a:52:75:
6e:ef:64:7e:38:c6:c9:59:38:88:f8:4b:03:34:cb:
03:98:c5:9d:5f:95:13:f0:7f:5e:66:24:63:4a:c4:
36:79:84:a8:50:72:e8:01:ee:7e:09:54:5d:0e:d8:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:84:F6:7B:C6:D4:C5:A9:32:CC:CD:4B:25:FA:EC:0A:CF:32:94
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:67:c0:3d:ad:98:ba:39:8c:53:6b:b5:e7:e2:aa:a3:23:f0:
df:f0:ca:82:14:17:22:ff:b2:8b:c9:ef:df:9a:fb:f8:49:2d:
28:4a:9f:d6:bb:06:22:1e:94:7d:91:95:5b:97:e0:40:d0:38:
3c:4b:11:c7:63:96:91:20:e0:6d:70:e9:fb:b4:31:8a:11:95:
7f:9d:e1:4e:d5:74:30:ac:56:1c:86:73:e2:b0:e5:2a:87:cb:
6e:5c:cb:a7:7a:72:66:da:7f:b2:e5:1d:e0:90:cc:00:19:10:
38:86:b2:f0:3e:33:f8:39:97:4f:d4:89:77:4f:0d:2d:c9:4d:
92:f1:b8:d9:35:4b:07:90:c1:88:33:e6:4a:81:6e:ba:22:88:
94:dd:f6:b8:fe:fe:61:36:25:3c:c6:70:ec:98:2c:d8:0c:2e:
63:6e:ab:0c:37:a5:f8:af:6d:f6:c3:7d:f9:f9:fb:55:76:75:
ba:f2:7a:c2:42:11:84:77:30:84:58:58:d0:7b:67:a1:b8:ad:
43:ca:9a:19:11:18:bc:3e:08:ed:6c:77:a7:48:a8:f6:e7:22:
28:d5:10:b6:5b:28:ab:05:6f:8b:93:96:f3:95:c6:4b:02:f4:
7d:67:c0:23:35:56:e1:8b:64:8a:2a:45:ad:eb:5b:0f:fc:fb:
98:5d:d7:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc6mvuN/RinXGdxyddV4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ODYwM2YwZDQ0YTkyMDQ0MzM4YTJjYWRmMTg5ZTgxMDFj
M2JmNWYwHhcNMjUwODIzMDEwMzI2WhcNMjUwODI0MDEwMzI2WjAzMTEwLwYDVQQD
Eyg3ZWJiODRmNjdiYzZkNGM1YTkzMmNjY2Q0YjI1ZmFlYzBhY2YzMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7s7zXYb475E2XxR9dxfc6WoEeCA
2L59JUTSUFUiANCOY47+IKX7sSN0PA5LSs8eLzdN1cNlpkGef3lxJMqhar3xyoUl
wJDvSwPEFQd6V0UfmxxFWdxaGjcX+VzqQU/LF7OLaRA5OCoUDVtQGOJo8RcGT4sI
+2m1jV3eF4HW47ahns3lvl/doT80LDtFf8OztTWq/jN9X8yQkT6f4XSdvET4MtEy
/WRToumfOHFkaEfA5i0H4JyKfYBtAmKfSASGNUOLswpsdlwvVE1JwwJ6UnVu72R+
OMbJWTiI+EsDNMsDmMWdX5UT8H9eZiRjSsQ2eYSoUHLoAe5+CVRdDtiSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH67hPZ7xtTFqTLMzUsl+uwKzzKUMB8GA1UdIwQY
MBaAFAmGA/DUSpIEQziiyt8YnoEBw79fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYt
YjczNjg2NDI3OTQyLzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYtYjczNjg2NDI3OTQy
LzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2fAPa2Y
ujmMU2u15+KqoyPw3/DKghQXIv+yi8nv35r7+EktKEqf1rsGIh6UfZGVW5fgQNA4
PEsRx2OWkSDgbXDp+7QxihGVf53hTtV0MKxWHIZz4rDlKofLblzLp3pyZtp/suUd
4JDMABkQOIay8D4z+DmXT9SJd08NLclNkvG42TVLB5DBiDPmSoFuuiKIlN32uP7+
YTYlPMZw7Jgs2AwuY26rDDel+K9t9sN9+fn7VXZ1uvJ6wkIRhHcwhFhY0Htnobit
Q8qaGREYvD4I7Wx3p0io9uciKNUQtlsoqwVvi5OW85XGSwL0fWfAIzVW4YtkiipF
retbD/z7mF3XEw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:10 2025 by rpki-client