Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: obDxfwMnkLtmIW3f+bs66CWwOHizxF5hwMhKUNlVrOE=
Subject key identifier: D7:1C:8D:F3:C7:CC:7D:FE:9D:76:22:B2:E7:65:A4:DB:F8:23:E1:A8
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019676B0D77F3E3A94108D4D50A654596032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 10:00:23 +0000
Manifest this update: Sun 27 Apr 2025 10:00:23 +0000
Manifest next update: Mon 28 Apr 2025 10:00:23 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: GBDc0HLeE8GDCGJW+Kg9Iq+DqU1pFW0pfjZvEMOd8uQ=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d7:7f:3e:3a:94:10:8d:4d:50:a6:54:59:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Apr 27 10:00:23 2025 GMT
Not After : Apr 28 10:00:23 2025 GMT
Subject: CN=d71c8df3c7cc7dfe9d7622b2e765a4dbf823e1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:d1:57:c5:14:70:73:f9:5a:61:50:3e:f0:
b4:6e:fb:d3:b5:53:73:1f:24:91:49:86:42:41:43:
c0:dc:46:25:e5:8d:0f:8d:03:90:29:ab:2c:64:23:
29:e0:cc:8a:c5:40:44:8c:ba:fc:90:4e:4c:1e:61:
1f:99:2d:70:4e:42:f5:68:1b:46:27:9e:7a:3e:06:
c8:4a:c2:21:be:6f:24:30:30:be:a4:85:36:f2:34:
e7:4f:f6:2b:78:59:81:52:c6:96:66:ec:aa:b3:d7:
44:a7:63:40:a0:cb:55:ff:4e:69:c7:71:ca:37:d0:
1c:5b:25:93:9d:79:f9:45:10:87:6a:4c:1c:25:4f:
78:39:03:fc:d4:ef:6e:02:3e:af:f0:46:c2:9a:c2:
54:3a:e3:70:72:48:66:61:e6:b9:3f:2b:07:4a:ed:
c7:8e:95:12:64:a9:62:36:97:bc:80:dd:f8:81:c4:
89:2c:f8:d1:94:3b:3d:80:89:a3:40:42:b2:ac:88:
c7:9b:56:9e:ab:f3:e1:77:bb:6f:ef:a4:0e:fb:8b:
f5:90:8b:9b:d9:3b:f9:43:c6:06:25:e3:42:0a:ec:
c6:2b:09:61:12:1a:d9:be:1e:b5:2c:d0:cb:b2:8f:
82:5c:b1:3a:82:58:46:04:0b:19:c2:de:1c:d7:15:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:8D:F3:C7:CC:7D:FE:9D:76:22:B2:E7:65:A4:DB:F8:23:E1:A8
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e1:b4:f9:5b:48:e5:5f:34:bb:15:f5:d3:94:d0:3b:b2:4e:
e5:d6:01:8b:78:d9:ef:8c:8f:9b:6b:6d:ae:55:e1:97:ba:98:
d9:9e:f9:d7:54:e2:45:60:42:97:49:97:70:88:80:20:b3:97:
a8:89:c7:bb:42:ce:9e:44:6d:32:44:06:f9:0c:b8:32:e8:8b:
6b:b1:2c:bb:06:d0:d1:0f:5c:68:0c:c1:87:dc:8c:7c:43:ce:
da:0a:d1:f1:36:9e:b6:c9:4d:60:05:a4:db:44:44:d5:6c:e1:
1d:8b:e8:7e:21:32:01:a3:fc:08:79:04:96:bc:17:7d:5f:eb:
d6:5c:01:90:24:60:5e:73:98:f2:68:74:df:88:ad:c0:f2:d9:
95:53:d0:a8:e2:7d:41:68:ea:80:89:3b:f5:b9:5f:2c:1e:37:
80:59:5d:18:56:42:86:35:08:c2:76:98:fd:98:91:06:8c:d8:
78:84:7e:4e:d2:f7:d5:ee:03:b3:85:26:2e:1c:79:04:3f:33:
fb:d2:8e:a5:44:23:88:f0:1c:1b:73:b1:3d:f2:2c:13:0e:a1:
26:88:b1:ec:15:b5:0d:fb:07:75:77:c8:85:d8:0d:f0:a4:64:
89:6c:8b:16:e0:4f:2f:b1:8e:e1:35:2b:4f:85:e9:74:48:64:
00:4d:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:35:48 2025 by rpki-client