Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: Mk/c6iIjUKOMz3OEIYC1K/H2K0A0eQiKf5hV6xg8TNw=
Subject key identifier: 96:8E:61:37:EB:D5:5A:E1:72:33:C5:07:3A:B2:1D:25:62:B7:22:7A
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 01984287E7314762F3FF77AA224CC81A03D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 0653
Signing time: Fri 25 Jul 2025 17:00:59 +0000
Manifest this update: Fri 25 Jul 2025 17:00:59 +0000
Manifest next update: Sat 26 Jul 2025 17:00:59 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: eB7M9cXUdPCdsOzCNZ1pBgVb4cHe+TBdgGQCu0nuFhI=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:e7:31:47:62:f3:ff:77:aa:22:4c:c8:1a:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Jul 25 17:00:59 2025 GMT
Not After : Jul 26 17:00:59 2025 GMT
Subject: CN=968e6137ebd55ae17233c5073ab21d2562b7227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:3b:ad:8d:5e:5c:3f:a3:18:c2:67:0a:7c:
3d:14:c2:84:46:70:bc:2e:8f:a9:a6:49:14:73:9a:
56:82:d7:f0:0e:fa:b3:d6:56:0c:ef:07:5c:b7:40:
58:d1:0c:76:58:40:91:7e:97:77:2f:30:f3:17:ca:
4b:36:79:1a:57:9c:6d:3c:d2:76:b7:2c:dc:aa:6c:
ca:16:ba:15:8e:0a:3d:38:45:61:47:b6:7f:28:e9:
7b:71:85:e7:42:34:49:6d:1a:76:f8:89:5a:21:fa:
91:ba:ed:fb:de:51:4e:91:d9:8a:88:43:4a:b7:9d:
3e:c5:0a:ca:55:22:a2:09:3d:24:b9:31:98:e4:60:
75:43:ba:43:1e:7d:16:5c:f3:e7:2a:70:1b:8e:a6:
1e:c9:1e:59:04:b9:ed:c1:d0:e3:4d:f0:1c:2a:ec:
1d:13:f8:3b:06:43:e6:fa:6e:a1:36:05:29:e7:ba:
4f:f6:a5:6f:66:7e:d4:2f:0b:c3:e9:ee:9e:55:af:
02:82:97:14:80:5d:a1:42:b8:26:7e:e0:e9:39:f5:
11:db:34:2d:bd:45:10:dd:2b:79:82:9c:a0:bb:07:
5b:f4:9c:bb:85:6d:1a:cb:15:94:f8:bf:2b:78:e7:
91:43:b1:f7:c6:9b:8d:6e:e4:05:da:4f:74:33:c5:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8E:61:37:EB:D5:5A:E1:72:33:C5:07:3A:B2:1D:25:62:B7:22:7A
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2d:c9:b6:f5:34:06:25:f3:96:ca:5a:19:49:96:c5:84:31:
6e:da:6e:70:c6:1b:63:93:04:8c:c5:c6:bd:45:3f:f8:6f:2d:
6c:bf:6d:91:12:20:fd:fe:57:55:f3:9a:f6:fa:ae:c5:08:f2:
d0:66:c8:f9:ea:5a:50:7b:b4:99:51:86:c5:f6:ec:bf:c5:3a:
b7:2e:b4:bd:35:2d:18:35:82:18:96:75:46:69:b7:0a:51:d3:
19:ea:4e:5a:7e:d3:d0:6e:38:3d:d6:79:ac:02:ac:cd:4e:c0:
ff:35:ae:ff:e5:46:1a:07:c7:cd:60:5f:5d:a9:a6:2d:15:75:
66:3b:59:ef:6c:9d:86:15:25:18:c7:fc:42:69:89:1a:17:2d:
d7:70:5d:60:1b:17:e6:ce:7d:5f:88:6e:8c:c3:56:14:b1:23:
54:ab:5a:1b:00:22:e3:65:c1:5c:82:a9:70:74:c1:7a:a2:d6:
18:0a:fd:f2:11:b5:1f:41:a9:eb:a0:8c:09:f1:57:04:e9:61:
4d:9c:b4:eb:7c:89:af:ed:d2:28:f2:0d:69:2c:4a:b6:06:0f:
c3:81:9b:70:2f:22:80:57:8f:92:9b:b6:fd:1b:a3:ce:cd:c4:
d9:57:34:a5:d3:9a:b9:f8:40:b5:6b:d4:a3:ec:ab:c1:f0:1f:
64:16:a2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:20:11 2025 by rpki-client