Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
File: RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json)
Hash identifier: Bo0j/kwb93B7kuFLRCTK6W5hDrpds3EPM1cQqda8qfQ=
Subject key identifier: 82:67:CC:87:25:CE:6F:A4:6D:11:32:A6:BE:7B:34:11:01:E1:30:10
Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
Certificate issuer: /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Certificate serial: 0198D47360F80AA2166A9EDB17805196ED21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:07 +0000
Manifest this update: Sat 23 Aug 2025 01:03:07 +0000
Manifest next update: Sun 24 Aug 2025 01:03:07 +0000
Files and hashes: 1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: ND8Cjf9/xsY54BF5BGSN6vCCNBC/J0Pon79YadUUNTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:60:f8:0a:a2:16:6a:9e:db:17:80:51:96:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3
Validity
Not Before: Aug 23 01:03:07 2025 GMT
Not After : Aug 24 01:03:07 2025 GMT
Subject: CN=8267cc8725ce6fa46d1132a6be7b341101e13010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:1f:40:1d:25:dd:38:07:be:ee:4c:30:d4:
7b:2b:2e:80:f5:27:d9:de:2d:05:ba:3e:e9:bf:c9:
c4:ad:e5:57:a3:ed:68:c3:13:42:38:2e:a3:28:ea:
26:7a:a2:ea:73:64:38:03:16:b3:fd:76:fc:7c:c8:
ce:95:25:e2:fc:a5:82:48:ec:26:98:44:76:41:77:
6b:f3:07:39:ed:5d:1a:94:e7:b3:e0:3e:f2:0e:99:
f8:11:8c:10:bd:05:22:1f:63:4a:b4:a3:b3:0c:cf:
1b:52:7a:2a:ab:8f:18:b2:e3:b6:de:16:ac:84:b8:
95:24:bd:82:72:e3:4a:f4:05:5d:b1:34:95:bb:47:
b0:ee:26:f9:29:65:99:1f:7c:ee:61:62:8b:44:82:
36:7c:ec:83:12:29:3f:b3:22:63:4b:fa:23:22:d0:
a5:0d:d1:3b:03:89:03:9e:0f:ea:e0:fb:fd:01:ef:
ca:65:70:6b:b4:48:bf:d0:b2:16:6b:1b:74:aa:26:
48:3d:9d:ca:fd:b2:92:ec:0b:ac:ac:85:8e:d4:36:
3d:cb:39:20:74:99:63:d4:89:9b:59:7c:9d:2e:e6:
6b:c8:8d:a4:1f:a8:a4:05:6a:4f:42:b4:34:7d:aa:
f3:75:13:62:96:3c:e4:24:f2:31:12:34:e4:06:f1:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:CC:87:25:CE:6F:A4:6D:11:32:A6:BE:7B:34:11:01:E1:30:10
X509v3 Authority Key Identifier:
keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:37:74:d0:6f:e1:25:7b:20:fd:0a:55:d0:13:7b:a3:76:ec:
25:63:a3:1b:d9:48:a6:99:f3:b5:26:20:87:54:22:8c:aa:ea:
70:5c:02:62:76:0c:6e:b8:38:f0:0d:1d:47:10:4b:c4:25:6a:
c3:08:dd:8a:b1:85:47:5e:0e:80:b1:48:4f:6e:8a:81:79:d6:
25:44:75:6a:f1:11:a5:56:9b:76:9f:d3:3f:9b:ee:c6:00:d0:
82:da:71:92:74:db:af:27:73:5a:1f:c0:d5:97:7a:47:bb:96:
33:32:36:84:37:0c:55:bc:fc:bc:6b:fb:1b:9c:a9:e5:65:79:
31:0a:6b:71:61:44:2e:91:df:dd:ce:c1:03:30:77:c2:b0:dc:
fd:b3:76:22:e7:c8:a9:3f:49:13:55:fd:64:b2:dc:dc:80:ac:
11:ad:74:f1:d4:83:fc:ab:c8:72:e4:bd:72:23:43:6f:24:f6:
85:86:5d:e2:66:4a:6c:0b:72:b6:06:84:29:54:6a:50:94:2f:
dc:18:a8:bf:bb:51:f3:58:11:94:5e:9d:51:66:50:d7:b4:b0:
91:28:cd:4b:27:e7:f0:81:be:c8:6f:52:3f:cd:e9:31:c0:8e:
bc:80:01:77:f9:d6:58:3b:38:fc:0b:2f:6f:df:e1:0b:6e:ce:
ab:40:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:49 2025 by rpki-client