Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier: UB6xxxU+8v1KJbik0aDoxvp1+2SAjHCEzuMZfbLbzU8=
Subject key identifier: 5C:18:00:60:4D:8B:7E:4C:F1:B8:05:7A:39:D0:95:A2:A7:9C:39:97
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 01987487685329D07AE94CCA90EF2BBCF3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number: 1623
Signing time: Mon 04 Aug 2025 10:01:27 +0000
Manifest this update: Mon 04 Aug 2025 10:01:27 +0000
Manifest next update: Tue 05 Aug 2025 10:01:27 +0000
Files and hashes: 1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: 2Sy5EO6qOoa/9sc6omV3HCeXioHgVBpjSGPNUquRqT4=)
4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:68:53:29:d0:7a:e9:4c:ca:90:ef:2b:bc:f3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Aug 4 10:01:27 2025 GMT
Not After : Aug 5 10:01:27 2025 GMT
Subject: CN=5c1800604d8b7e4cf1b8057a39d095a2a79c3997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:b8:4c:4d:80:a8:0b:30:c1:b2:01:31:f2:
5a:cd:78:95:fb:57:fe:4a:4d:54:59:dc:34:b0:9e:
ac:73:18:68:aa:e7:64:4f:dc:d6:c4:15:07:5e:7c:
2f:0c:ad:83:57:3a:41:cf:89:ae:c5:9e:03:23:15:
aa:b2:f4:c2:02:f7:58:ac:00:3d:5c:67:a0:40:f8:
6b:fd:d8:0c:6e:43:12:25:22:53:4e:59:8c:52:d9:
76:b6:a7:65:95:22:8e:6f:75:8f:c6:83:59:ce:f7:
23:90:53:76:1e:77:81:c0:6e:75:d4:c8:8d:e6:56:
49:83:b3:df:c7:9a:14:e2:44:c4:14:22:d3:9b:65:
5b:aa:d7:9b:d7:89:30:cf:dc:3a:f4:3d:7b:81:e0:
dc:47:96:1a:96:2b:7e:5f:4f:b8:e5:7b:ed:36:0d:
75:68:7f:c3:06:64:bc:ca:c3:6b:1b:33:ff:f3:3b:
e8:fe:5c:5b:5a:90:25:52:a1:87:7e:ac:23:fc:58:
bd:98:06:96:40:be:2c:33:62:bf:3c:ce:21:07:98:
cd:98:e0:fd:9a:5b:4d:96:86:bb:b2:46:3b:83:1a:
52:a5:8d:71:f7:d7:e8:ad:7b:d0:94:7f:77:7a:5f:
bf:10:3b:c7:e6:7e:b0:42:ab:26:eb:b5:1c:2f:00:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:00:60:4D:8B:7E:4C:F1:B8:05:7A:39:D0:95:A2:A7:9C:39:97
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:81:1e:95:32:49:6a:05:86:f3:8d:10:32:d8:78:14:51:
7f:f1:54:88:c4:ae:fc:ac:4f:5e:43:5e:91:10:3c:a6:34:45:
75:a7:ef:32:76:eb:8a:a3:62:e1:ef:14:e4:d2:c1:a1:d6:b7:
be:95:92:c9:2c:f6:e1:63:10:37:81:51:d9:3b:ad:f4:e9:45:
64:1e:90:6b:9f:86:83:ca:1a:44:2f:cb:35:ca:43:45:cd:ae:
e1:51:79:e2:76:22:b0:6d:43:8a:55:6c:85:57:fe:a9:ed:98:
8a:33:c0:e2:c9:76:d6:49:31:85:c2:9d:8a:b1:41:10:5d:8c:
9a:f3:9d:11:7f:7f:f9:38:d7:34:7e:48:5d:94:a3:fc:61:2e:
cd:cf:fa:49:14:f4:f6:bc:a3:94:af:39:fd:10:4f:07:c9:86:
23:53:4c:0e:82:41:79:65:be:53:8c:ee:d2:92:a6:7e:e7:ee:
a3:d2:aa:34:ec:4c:4f:50:9b:1a:0e:df:18:f2:95:41:23:2b:
ad:df:d9:9c:16:f8:dd:24:63:a4:51:8e:ce:82:71:62:4b:c4:
27:c9:89:89:aa:4c:d7:1b:86:ba:df:31:43:c9:c7:ae:e0:07:
6a:54:af:de:08:d3:bb:b1:2b:f2:c1:b2:fb:93:f0:1d:26:89:
59:a8:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:10 2025 by rpki-client