Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: zUtk7inkICFfJR7TxWtCOATUk6GkrrAwmbVOZqb4P8U=
Subject key identifier: E6:92:48:AF:EC:25:80:D2:93:C5:D1:F8:AB:56:ED:EB:21:31:4B:C0
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019875625A59A21DBF76861A22C102222286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1605
Signing time: Mon 04 Aug 2025 14:00:36 +0000
Manifest this update: Mon 04 Aug 2025 14:00:36 +0000
Manifest next update: Tue 05 Aug 2025 14:00:36 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: xDJR/nvLL6J8ZhJIX5cIfVfgI7F7rLvDncv64upjFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:5a:59:a2:1d:bf:76:86:1a:22:c1:02:22:22:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Aug 4 14:00:36 2025 GMT
Not After : Aug 5 14:00:36 2025 GMT
Subject: CN=e69248afec2580d293c5d1f8ab56edeb21314bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:64:5a:01:1e:1c:9a:12:07:1f:3f:78:db:
93:62:5c:78:08:b0:74:89:6b:71:33:9f:88:5a:99:
28:49:34:e2:5c:36:a8:1d:9d:6a:51:9b:78:d3:fa:
39:50:6b:3e:a0:90:21:8e:76:f0:ad:f5:9b:76:49:
34:49:b7:39:f7:67:1b:0f:ad:73:70:55:41:8f:20:
3f:0e:2c:9f:eb:57:39:c0:5d:c5:a5:27:9e:80:98:
6c:27:39:df:bd:47:68:b4:ba:7b:ad:b7:ea:95:ce:
68:3d:44:50:d3:68:92:f8:d6:76:d7:40:27:27:3d:
02:c1:5b:9c:e5:46:d4:5f:40:7c:94:27:87:aa:cc:
06:d2:aa:d8:ad:30:ea:38:69:1c:66:aa:a3:73:a3:
b2:f0:ac:b6:38:39:40:dc:5a:f3:e5:2a:31:5f:67:
ec:6f:51:d5:77:95:85:14:01:c8:65:27:3f:b2:1d:
05:92:6f:df:7a:4a:5b:13:f3:f3:57:30:36:2a:0d:
0c:ae:e2:46:c4:b2:18:60:cf:af:0e:cf:0d:31:e6:
9c:b4:63:de:77:06:01:61:69:1a:ce:6a:1f:73:a7:
9c:c9:98:1f:13:7e:53:21:0d:b6:c7:75:57:df:bf:
9e:83:8b:8a:5e:22:51:3d:66:d1:0f:5c:c0:93:48:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:48:AF:EC:25:80:D2:93:C5:D1:F8:AB:56:ED:EB:21:31:4B:C0
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:12:20:b5:e1:2c:c0:80:99:92:0a:03:4a:c8:8e:33:dd:dd:
4d:3b:e5:2a:02:0a:2b:e5:0e:00:49:ad:2b:9c:f1:20:72:c2:
50:c7:6d:b5:4f:35:8c:06:97:a4:09:23:ff:6d:83:af:cf:e2:
91:e7:4e:e3:42:1f:df:51:c4:8f:0d:2a:fc:d6:bf:21:df:ad:
99:ab:a5:d7:d9:f5:28:3b:a1:5b:f9:e7:c0:6d:86:cc:d0:aa:
2c:d0:6e:c0:2a:b7:07:de:9a:ca:10:41:4b:9f:a2:c8:a6:bc:
0e:98:b8:7d:6b:8a:e0:e5:34:49:6b:07:79:72:48:b0:57:70:
16:60:c5:66:ac:f4:94:36:d1:05:12:f0:7c:2a:43:cc:f8:21:
42:3c:cd:3d:37:6a:2f:e3:aa:60:16:f1:cf:15:55:16:aa:a0:
39:e1:18:fc:c9:97:bb:82:d5:ae:be:6f:5d:77:ea:5e:6d:34:
00:86:14:4a:55:c6:b5:21:52:51:6c:ff:37:47:c8:d3:8f:f3:
3d:e9:0c:56:dd:bf:21:82:63:5a:b2:25:7c:70:2c:f2:c2:a6:
17:a6:a6:4a:f7:c5:95:06:36:11:ac:42:46:46:e8:da:b5:f1:
4a:6d:bc:b3:2d:75:60:19:e2:c7:e0:ad:d3:f8:3f:3b:90:e7:
23:10:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:48:27 2025 by rpki-client