Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: 8oujPEiAg8eKJqGWkwulJ61leHloVPkdukgJygLu7MU=
Subject key identifier: CE:A7:B0:A5:50:34:EF:81:06:8B:C5:AE:88:C2:4F:F0:8B:36:B9:9D
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 019873E21CE3832AA941F087DD72415333CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 07AA
Signing time: Mon 04 Aug 2025 07:00:54 +0000
Manifest this update: Mon 04 Aug 2025 07:00:54 +0000
Manifest next update: Tue 05 Aug 2025 07:00:54 +0000
Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=)
2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: nB6x0gMOxVooItvB+44PjuBZIYJ01tR0QVKYXxmJ9d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1c:e3:83:2a:a9:41:f0:87:dd:72:41:53:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Aug 4 07:00:54 2025 GMT
Not After : Aug 5 07:00:54 2025 GMT
Subject: CN=cea7b0a55034ef81068bc5ae88c24ff08b36b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:54:12:e8:5f:0f:38:0a:c0:7b:fc:9a:92:
0b:69:55:1a:4d:f7:fe:e7:4c:b3:4f:03:20:ce:c9:
51:ea:ad:98:05:55:61:b0:57:51:2e:5a:d5:32:5e:
41:3a:f2:d0:15:bb:c9:bd:cb:16:fa:ef:ab:9e:a8:
86:44:d7:4c:85:06:cf:a8:28:f3:66:c4:b4:8d:6e:
35:db:08:dd:25:33:26:2d:05:52:f4:92:15:70:5f:
b4:11:e1:fc:5e:46:4c:d4:ca:41:46:c1:78:5c:83:
5e:21:ea:33:f2:d1:e0:d2:53:31:3d:b6:aa:13:84:
f2:64:3a:42:fd:a7:20:0a:a7:22:fb:22:72:eb:7f:
4f:12:d8:f4:6b:54:e8:fa:00:d4:49:75:c0:f7:50:
fb:45:46:4d:8e:de:97:00:93:71:04:e5:b5:fb:5c:
ba:3e:aa:a0:63:1d:50:84:14:ca:7f:d7:1b:cc:f4:
b2:9b:1d:71:4d:ac:e6:d3:c5:a0:95:01:84:20:12:
0c:5b:e3:5b:06:83:a1:9b:8e:ce:16:68:09:f4:ee:
3f:e1:58:cc:4d:da:31:69:54:59:83:cc:a8:d5:5b:
3f:fa:54:1d:3c:0a:21:90:69:87:f2:89:0c:d9:02:
48:8b:47:68:15:d0:db:61:ef:79:0c:e2:6e:df:52:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:B0:A5:50:34:EF:81:06:8B:C5:AE:88:C2:4F:F0:8B:36:B9:9D
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:2d:2b:02:43:1a:03:05:5a:82:e8:f2:17:54:ca:e7:22:
06:b3:b9:36:39:91:fd:b1:cf:8f:0f:9d:b9:2b:53:64:6f:b5:
0f:b4:3d:05:fd:fd:f1:a2:a3:53:ce:6e:75:ea:e3:e4:95:f9:
d4:d6:14:0c:6e:7f:b2:0b:14:ce:98:b5:57:d0:32:e6:ce:e0:
de:d9:be:b9:1a:33:5c:92:79:86:5b:33:fa:39:cd:c6:3b:45:
82:32:b8:3c:20:5b:93:f9:49:30:01:c9:01:4a:c8:c3:79:7a:
a9:c5:65:d8:e6:23:24:b5:50:03:c9:d0:0a:1c:75:9a:ad:7b:
85:21:9c:7c:1b:b5:57:64:da:7e:70:e5:c3:76:dd:52:6f:3d:
f3:42:68:b4:86:71:c3:bc:e8:5a:03:f1:06:ab:c9:d2:1b:63:
c1:8e:08:a4:bf:67:89:db:62:16:b6:8d:40:d5:7a:a6:89:14:
b4:b3:3e:88:1a:7c:d6:bf:0e:a9:10:e5:ab:84:64:8b:cd:52:
32:83:5c:18:d0:4b:8a:42:1c:9c:93:8d:e6:ad:3c:6f:37:06:
7f:c6:a0:59:b7:f3:dc:e3:f1:87:db:94:ec:d1:99:6f:84:13:
f7:c4:2a:23:83:83:d3:10:90:8a:89:14:78:d1:2c:b5:ed:1f:
0b:54:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:38 2025 by rpki-client