Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: 4ycNmpSf7qOcPjTeM6LW7dsXwuNRPTixAjaXS70bAfY=
Subject key identifier: BB:68:C4:40:52:0E:DF:EB:23:8C:4C:CA:3A:8E:3D:9D:18:CA:8A:96
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 0198801D090DD81F682D60A22E81CB44486A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 16:00:43 +0000
Manifest this update: Wed 06 Aug 2025 16:00:43 +0000
Manifest next update: Thu 07 Aug 2025 16:00:43 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: iv0WaQMeaHHnzrLu5jrhopRJk1YFKutxMfxZN2cdLn4=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:09:0d:d8:1f:68:2d:60:a2:2e:81:cb:44:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Aug 6 16:00:43 2025 GMT
Not After : Aug 7 16:00:43 2025 GMT
Subject: CN=bb68c440520edfeb238c4cca3a8e3d9d18ca8a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:4a:8c:d5:ef:26:c7:62:6c:29:57:d6:ab:
f3:ed:dc:10:bf:ec:29:00:e7:1e:9b:df:14:66:a2:
96:73:30:41:94:b2:17:7d:8f:df:f5:03:b6:16:08:
88:43:9a:58:e1:8d:d0:2a:b6:20:b0:3d:e3:fa:0a:
70:75:c4:23:a9:9f:ec:ac:21:19:e4:7f:36:3d:e6:
98:be:42:e5:e6:1a:a2:64:d5:e5:01:68:7c:97:3a:
db:2a:c0:e6:9f:59:1b:e8:7e:30:28:8c:a7:58:db:
08:1c:c3:55:bd:87:2c:83:6b:7c:7a:3e:f3:a2:e9:
ce:8e:43:bf:52:4c:ed:bd:f7:af:d1:ec:1e:3d:64:
2d:67:0a:84:8b:a9:a4:a0:54:dc:b9:a8:5c:42:1b:
53:4d:da:3d:9d:22:da:d2:97:6b:1c:e8:9a:36:6d:
e4:bc:9d:68:63:20:91:d0:0d:a1:aa:b5:37:1c:da:
3d:e2:d9:48:5c:7b:66:8d:ec:f1:1a:68:89:4b:96:
21:2b:a6:20:2b:e9:ed:e9:e5:30:3b:68:ea:a3:1c:
62:ae:01:a2:de:8d:cc:12:15:28:0a:bb:e6:7b:88:
a7:fa:02:b8:f3:af:ba:7a:a8:1e:60:df:f1:be:f7:
c8:bb:9c:83:a3:6d:3c:de:60:df:aa:bd:f0:2f:da:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:C4:40:52:0E:DF:EB:23:8C:4C:CA:3A:8E:3D:9D:18:CA:8A:96
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:5c:61:ad:85:50:c9:f0:cb:5a:ae:81:b0:9f:7b:37:29:
9b:26:20:a8:db:00:df:39:e0:2c:af:80:92:2b:e5:3e:30:c4:
12:14:b8:d9:5b:06:b4:b4:7d:0c:2e:1b:a5:aa:b7:d5:f3:ee:
38:f8:1a:55:07:a1:4f:b6:c3:ac:a7:4a:30:24:d0:dc:bc:54:
f4:bd:9e:44:6d:04:9f:f8:34:27:07:0e:22:e5:31:b0:9b:c8:
97:9c:bc:82:06:52:76:cb:ec:76:11:6f:d4:24:8f:10:3b:63:
5d:3f:c6:95:3c:c3:ea:0c:fd:4a:06:45:b3:b5:3f:d6:54:16:
a7:27:ad:47:f1:0e:2e:64:4b:d8:8a:61:59:5a:ee:d4:83:f6:
7d:1a:52:32:fc:80:af:fe:b8:1e:63:af:6b:25:20:59:8f:c4:
29:3a:80:e8:c4:57:53:c8:0c:ea:6d:9e:0d:ca:a3:da:09:92:
90:1c:94:34:45:ed:f3:2c:00:cc:a7:9d:e7:da:6f:b2:60:5a:
07:2d:6b:55:fb:d6:0c:3d:9c:04:1a:c3:e8:ca:91:63:61:c2:
37:40:68:8b:eb:0a:2e:33:75:33:3b:29:70:d6:73:a9:11:f6:
63:d4:f4:be:11:37:56:62:87:16:06:ab:17:4b:09:24:40:16:
ee:d7:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:12 2025 by rpki-client