Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: eo3bfdHQgxPRbBeTRcmH1coBZ5UCoiT7fQOa0hpz8kE=
Subject key identifier: 26:EB:B8:8C:27:9A:9B:90:96:13:9F:39:2A:04:48:EF:D4:E2:31:87
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 01988FC7CF6E80E997DF5F51E65DAE49E9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 067B
Signing time: Sat 09 Aug 2025 17:01:33 +0000
Manifest this update: Sat 09 Aug 2025 17:01:33 +0000
Manifest next update: Sun 10 Aug 2025 17:01:33 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: yCXUXt4bOUx2ewQ+jSClUOcWK2x4L2WsdXeEfypQOBg=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:cf:6e:80:e9:97:df:5f:51:e6:5d:ae:49:e9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Aug 9 17:01:33 2025 GMT
Not After : Aug 10 17:01:33 2025 GMT
Subject: CN=26ebb88c279a9b9096139f392a0448efd4e23187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:a1:34:db:de:4e:b1:83:10:4b:65:b7:d2:
c8:68:02:a4:12:fd:a2:cd:69:88:22:77:90:5a:bc:
5d:d5:69:fe:dc:96:47:34:c9:c9:6e:b1:23:78:15:
2e:9a:df:d1:13:fb:0f:07:de:39:fb:bd:af:4f:21:
93:51:8f:c1:5e:24:ff:bb:01:df:56:70:ab:94:4b:
09:73:a3:15:87:df:ac:b4:80:2f:aa:21:ce:0b:95:
1d:6d:87:f7:27:05:2a:e4:f4:0f:e3:83:81:28:9d:
2f:e9:36:72:61:a3:06:3d:cc:a8:54:27:93:6a:d0:
e9:a1:59:16:bb:d9:ca:41:2b:93:0b:65:f3:37:67:
74:5e:08:23:3a:76:0f:30:f5:54:5f:75:9b:e9:f0:
73:60:10:c9:8d:73:ae:57:ca:57:99:d4:49:5f:fe:
97:be:22:5c:ce:eb:af:bf:1c:49:15:e4:6c:7d:d3:
31:7e:b1:c9:ae:af:90:77:54:fa:5b:8e:2b:26:4a:
81:75:e4:bb:72:89:bc:fc:71:06:68:ea:be:0b:5b:
01:32:62:44:05:a6:c6:dd:e7:18:c0:73:58:14:a1:
38:8e:d3:0d:ec:f6:e2:80:87:fb:34:10:f4:1b:bb:
2f:dc:62:e5:9a:db:83:c9:c1:23:ae:a9:50:9d:3d:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:B8:8C:27:9A:9B:90:96:13:9F:39:2A:04:48:EF:D4:E2:31:87
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8d:5e:50:13:52:57:a5:e3:83:bf:b5:18:84:14:56:d7:dc:
5f:f2:f1:b3:cd:f4:2a:b9:ff:1b:22:23:f4:f7:5b:6e:44:46:
67:d7:5a:9b:3c:bc:92:d1:b4:63:f6:8c:fb:1f:bb:85:f8:29:
6d:e5:a0:83:64:f5:15:61:4a:99:14:47:98:3b:33:90:03:d1:
c1:a7:f3:b4:fe:1b:43:04:f1:82:21:ac:df:05:b1:75:a7:bd:
9c:9f:ff:96:18:b4:69:14:54:05:9f:2f:98:fb:c9:05:38:b4:
cd:c0:36:e6:66:12:3c:0e:58:f9:c1:6e:4a:1c:9c:73:19:1a:
55:29:20:01:ef:bf:61:c8:80:16:f6:27:4b:2d:4d:76:c1:5a:
35:27:98:f7:61:12:0f:0a:cb:cd:0b:03:15:c9:54:98:50:6b:
36:b1:42:53:e2:28:7b:d9:bf:7f:7c:27:7c:5d:05:2c:07:b6:
4d:51:b3:3f:08:6c:8e:45:f6:ff:85:ce:53:74:14:59:bd:e7:
60:2a:a2:d4:55:bc:59:58:42:ff:ba:52:18:cd:49:94:a0:14:
ba:0d:81:12:ee:69:f1:cd:f0:06:43:5d:0f:f5:8c:8e:a9:1a:
88:1e:bf:85:25:49:1c:74:d6:22:66:55:59:7d:e1:a7:9b:59:
8f:14:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:33 2025 by rpki-client