Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File: RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier: FL2s9V7qeXkiljfoiiKG1F9elble+plFeMVx3ml5mL0=
Subject key identifier: 8C:98:1D:0D:36:6E:41:22:CE:E2:10:90:6A:A9:FB:C0:2F:34:97:E4
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer: /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial: 0199FBEBD160D44A3B60D8B9EBF915679201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: tY4M8GdhQR+htlhahckJ+6rZKOZu2ayTbzmUkF8Ktbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d1:60:d4:4a:3b:60:d8:b9:eb:f9:15:67:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=8c981d0d366e4122cee210906aa9fbc02f3497e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bb:3d:5a:27:2c:1a:ca:e7:f6:d5:7d:91:ce:
af:98:95:4c:dc:1b:0b:9a:0f:cd:3a:18:14:36:42:
d8:62:fd:d7:13:31:5f:c4:e2:1e:e9:bf:58:cc:1d:
ca:01:9b:d4:0e:7c:15:2c:80:49:a4:f2:97:ba:c0:
a1:75:20:be:61:86:50:55:4e:33:d7:ac:d7:46:b2:
c7:90:9a:22:57:73:90:8c:56:18:5c:8b:e4:c5:a8:
5b:4a:f6:f2:bc:d1:16:29:cf:9c:67:9e:69:73:75:
ae:cf:49:3b:4f:08:04:0b:7a:35:c4:b6:43:99:ef:
99:cd:4c:ef:cb:be:a7:9c:fc:a8:4a:48:68:c6:b9:
23:df:94:e5:70:f2:2c:81:4e:8a:47:9a:e3:a2:c5:
22:dc:58:54:ed:50:19:4c:38:8f:bd:ec:75:5e:22:
c6:d4:d3:4e:d4:eb:72:a4:12:e7:d9:97:03:22:9c:
45:e7:4c:0f:b1:f7:f2:12:5b:13:a5:ba:01:ac:e1:
58:6a:58:c8:41:ca:1c:7d:83:a3:fe:bc:92:89:bc:
a2:ab:58:23:03:42:48:d2:28:fe:45:70:10:4a:1c:
88:ed:0d:b8:ff:f0:47:da:f9:80:52:b1:aa:e0:1f:
e1:d8:fa:2d:41:55:53:f3:61:dc:ae:9e:17:bc:6a:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:98:1D:0D:36:6E:41:22:CE:E2:10:90:6A:A9:FB:C0:2F:34:97:E4
X509v3 Authority Key Identifier:
keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ee:77:92:be:aa:0b:71:d8:72:5e:f5:a5:e5:07:b6:3e:7e:
9c:15:4d:a6:02:ea:92:a8:22:7b:a1:82:8d:ff:08:aa:83:c0:
2b:11:64:69:44:66:37:43:e8:bc:90:3b:27:ec:1e:c9:13:b6:
29:ea:83:6d:a4:7e:fb:31:d4:95:76:a1:e0:d7:3c:41:a8:ba:
6f:ca:e8:09:4b:f4:8f:49:8e:dd:d7:5b:03:77:5c:ac:8d:16:
36:b6:2e:79:ac:28:31:b9:ef:6c:67:5b:6a:7a:7a:dd:d0:75:
97:01:1d:5f:6c:8e:11:66:ac:38:0d:f7:85:d7:59:6b:6d:8c:
5c:3c:b7:76:97:84:e0:a7:e9:23:d6:6c:39:3c:40:51:82:9a:
ad:60:68:64:ad:cc:d4:24:ea:7b:59:cf:a9:ca:83:80:c8:54:
0d:7d:bf:d2:cc:2f:bd:e2:a1:66:8a:47:97:d3:05:6a:f9:74:
61:a6:cd:58:ae:07:7e:6c:d2:21:db:ad:db:2b:9e:24:2f:ed:
09:93:5f:7c:24:6d:9a:77:43:67:1a:83:30:8f:53:5c:a6:5b:
52:98:79:d7:7d:0d:96:e8:44:d9:c5:ea:65:2b:42:c2:5f:8c:
94:b8:f2:b1:68:6d:0a:cd:d3:e8:02:c1:8b:7a:27:40:5e:4a:
fe:52:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:36 2025 by rpki-client