
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: Nv3TpzKJAxCDIezcy16rdpp9Y/+qrpO056slshWX33E=
Subject key identifier: 97:D8:44:1E:B6:C5:15:75:A8:75:7D:62:BB:D0:C9:2E:AA:2E:60:FA
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 0198D66087A451DBE559181E59323C5B4803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: F7WN2zGbunL2PLpK8dA5nZGv+3vdnrDLMUu+HpZyCAo=)
2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=)
3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:87:a4:51:db:e5:59:18:1e:59:32:3c:5b:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=97d8441eb6c51575a8757d62bbd0c92eaa2e60fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:4f:e1:99:71:2e:45:46:c1:a9:d4:cf:10:
97:56:9b:c3:29:6b:14:7f:1c:26:08:d7:c5:6b:f0:
76:1f:a1:d6:c7:dc:6d:84:31:9c:d8:2a:35:87:c2:
68:4b:a5:ef:b2:9d:b9:69:28:45:f9:7c:4c:ad:da:
4c:68:9c:22:4f:9a:c3:e5:75:3d:c6:9d:4d:3f:4f:
04:7c:ec:71:28:88:da:cf:2a:97:29:8f:e1:df:81:
26:c1:4d:a9:e6:9b:23:66:2d:5b:60:03:59:6b:5c:
0b:8d:36:58:c4:bd:b2:b6:ac:7a:77:7d:0c:fe:28:
ac:08:1a:ef:68:37:b0:db:12:70:44:df:49:9a:4f:
87:f2:5e:b1:60:db:a7:81:70:8e:f5:06:1c:f2:ad:
7f:44:5f:03:75:55:30:06:91:87:d3:97:ac:30:fe:
44:fa:4e:d1:f9:a4:d1:42:2f:64:c6:26:51:7f:17:
da:1e:8b:78:25:9f:dd:1e:3a:a9:b0:6c:ad:d6:c9:
df:f3:44:34:8e:2c:46:b6:23:de:68:0f:a7:db:70:
c6:78:aa:c9:8c:61:4b:e6:f4:b1:c6:bf:b1:e1:d9:
3d:99:9b:6c:c8:aa:39:30:b3:b7:3b:64:6d:7b:ad:
81:d8:3f:28:59:8b:32:ba:c5:d3:ef:26:67:6a:18:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:44:1E:B6:C5:15:75:A8:75:7D:62:BB:D0:C9:2E:AA:2E:60:FA
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:90:22:26:f8:64:a6:cd:ff:d4:1f:f4:73:e4:a1:eb:65:47:
d8:f0:e3:a2:5c:7d:e7:5e:c0:7f:9f:09:30:74:da:92:36:e6:
b5:18:5c:f0:cf:20:e4:01:2f:28:54:2c:08:ad:36:d9:bc:11:
39:52:cc:55:c7:55:cc:33:ba:32:84:6a:36:e0:46:a0:3e:e6:
1d:7f:75:e7:79:07:a1:a7:db:db:b7:ed:a8:8f:4b:92:fa:a1:
db:03:bb:c3:83:12:44:39:f2:71:bd:96:df:08:c6:8f:cb:f0:
d9:28:ea:13:fe:6c:d0:f4:43:3b:79:84:b4:a1:b2:a5:10:90:
b1:a2:aa:63:34:c5:16:b1:51:28:eb:0a:ad:09:47:e4:10:6c:
e7:ee:43:f5:7d:19:62:e5:ed:95:42:c3:4f:7e:95:23:14:da:
5a:06:47:f4:de:71:27:4e:16:34:c4:e6:84:09:aa:67:3c:f8:
81:f2:f3:64:3f:79:8c:52:26:8d:d2:2b:16:a5:0c:be:b1:16:
29:32:3b:81:d9:cf:f9:39:60:73:d3:e5:bd:b6:1d:94:1c:8e:
5d:66:2a:95:6d:5a:e4:dc:5f:5b:24:d5:d1:30:6a:be:87:9a:
62:d4:92:b4:b1:1c:61:88:12:14:60:25:28:7d:10:3c:49:da:
06:12:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:52 2025 by rpki-client