Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json)
Hash identifier: LhT/TB51LWPFwzujKeRIoUlimLL7O6EIrNZWH3Q7oAs=
Subject key identifier: C4:3F:F3:15:F6:93:11:E8:8F:0C:C0:F1:1A:A2:FC:01:99:64:C8:06
Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5
Certificate serial: 0198808AFE30772BB383928711DA78031D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
Manifest number: 0846
Signing time: Wed 06 Aug 2025 18:00:49 +0000
Manifest this update: Wed 06 Aug 2025 18:00:49 +0000
Manifest next update: Thu 07 Aug 2025 18:00:49 +0000
Files and hashes: 1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: A9+TSngS8TtbSvQW/8106h08hTZpDqQnSVf+0L4XawU=)
2: S3dIMaIh62_y7HmBxhlxOM_ScHc.roa (hash: wYfLcBDYpc1piz/XiUHEld94m4pY4RAv7rF1GCt4/I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:fe:30:77:2b:b3:83:92:87:11:da:78:03:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5
Validity
Not Before: Aug 6 18:00:49 2025 GMT
Not After : Aug 7 18:00:49 2025 GMT
Subject: CN=c43ff315f69311e88f0cc0f11aa2fc019964c806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:a3:d0:cf:ab:ed:e7:61:7e:68:da:20:13:
ba:28:e4:b8:9e:2a:5e:df:a1:52:b8:47:a8:80:b5:
29:e4:9f:3d:9e:ef:a2:03:04:ad:62:89:6f:63:d5:
08:a8:16:a9:95:e6:3a:b0:3f:eb:9d:c5:40:37:5e:
36:72:a8:44:c5:8f:85:df:96:52:c0:bb:43:d2:d5:
67:44:54:6d:8c:0c:ca:b7:12:b0:ac:1f:7f:1f:ec:
b5:3d:c9:0f:c7:2b:f2:aa:bc:30:de:24:39:31:0c:
7c:3e:fd:26:6b:ab:ee:f8:26:68:6f:3b:b4:83:54:
3f:bb:02:f5:fd:04:7a:51:c1:86:ef:8c:9c:08:64:
b7:32:cd:de:82:46:c5:29:5a:fc:ca:5d:44:fb:e6:
21:ca:28:14:df:ce:8c:30:3c:e0:c6:0b:2d:f0:e6:
82:62:9d:47:2b:54:c3:e7:de:1a:80:8d:e8:10:b8:
53:fd:b7:18:d7:51:37:b2:fe:5f:11:a8:7c:95:6a:
9e:92:23:54:df:84:87:53:21:b9:c3:0f:96:38:14:
e9:2b:67:25:bc:3f:98:09:87:56:27:eb:f1:ed:0c:
90:3b:39:8c:2f:13:73:7f:66:fc:ad:fd:c0:1e:ac:
45:96:d9:15:1a:c2:e2:d3:be:74:d3:2e:3b:ca:c4:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:F3:15:F6:93:11:E8:8F:0C:C0:F1:1A:A2:FC:01:99:64:C8:06
X509v3 Authority Key Identifier:
keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:25:6f:46:b2:25:d9:48:36:57:04:45:a6:48:75:4e:5b:3e:
71:10:0f:3b:2e:37:f1:39:03:c2:7f:cb:e2:75:01:2c:02:3b:
11:07:8d:d7:ba:54:41:70:6c:27:46:e0:32:ac:d2:86:c3:4e:
8f:67:17:bd:9d:17:97:4f:53:7d:e4:c7:f0:11:f5:1f:16:8c:
9a:b4:b9:07:20:71:24:90:63:27:e5:80:5e:77:c3:c0:d4:ac:
69:a6:87:23:80:0d:cf:77:cd:e2:6a:c8:9b:36:a6:d8:9f:b6:
bc:f3:56:bf:a4:4a:e7:c5:7e:43:ff:0f:d4:cf:2e:19:ab:62:
f0:b1:a7:83:29:44:79:3d:d6:6f:d3:9e:7b:2d:19:76:e6:0e:
c3:b5:bd:b4:7d:46:03:80:fb:3d:38:bf:5a:33:d2:5c:be:f2:
8d:1e:da:ad:80:7c:7d:85:dd:11:d6:3f:7e:da:5f:7f:86:d6:
b1:44:2c:7c:45:45:a8:94:65:65:49:b9:fd:11:fd:0a:c0:be:
68:35:3e:4b:c7:89:e7:0d:1f:5f:70:18:c0:e5:95:4c:20:2d:
33:5e:5a:85:9f:93:5d:2a:f9:cc:a1:12:aa:b2:f6:93:af:df:
4d:77:e6:ba:70:c0:84:50:37:0e:51:65:fd:1f:72:de:91:1c:
ba:72:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:16 2025 by rpki-client