Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: onv2YH7qpv4bqxqy8MRbZmdWRIDIfJ4hMTsvjCMtO+s=
Subject key identifier: BA:33:29:53:8B:68:B8:B3:03:13:C1:7F:A7:37:CD:46:92:29:86:C8
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 01984A09D486C72146B740E713DF40BD57A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: E3y0aMDrULsxVyWn0V8cTj9lqfkFDYeyz50fBTJEHf0=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d4:86:c7:21:46:b7:40:e7:13:df:40:bd:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=ba3329538b68b8b30313c17fa737cd46922986c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:55:6b:24:36:cd:18:ee:ab:84:dc:f2:dc:
15:85:0a:0d:a2:33:d8:26:d1:f0:44:60:7d:61:0d:
d1:f8:69:7d:27:37:25:87:49:26:f2:68:ff:92:21:
2a:14:b8:b7:02:84:f3:e8:20:6d:09:ee:8d:e2:2f:
01:8e:13:c9:ee:c8:cb:eb:41:66:9a:0f:f0:56:32:
77:2b:78:4f:bd:96:61:20:cd:c2:87:23:6e:a2:ce:
41:f7:ae:c7:fe:73:49:c3:3a:33:6b:61:b1:c2:b0:
6b:d8:37:98:fb:49:71:19:7d:e4:a9:92:73:d5:96:
37:5a:e8:12:f4:df:f9:c4:07:cd:59:7c:eb:d8:d0:
78:fe:e1:18:38:fb:70:b6:dc:22:59:7a:d2:1b:a3:
36:96:3e:6a:99:5d:ea:a9:61:23:83:68:f8:2a:f0:
cd:c0:92:6b:d5:b5:5a:5a:68:ee:df:3b:11:c3:25:
28:fc:38:26:d4:9e:bd:8e:1e:47:03:83:4d:af:e3:
c7:e2:6e:57:ff:79:0b:81:91:a9:9d:8e:18:4c:bd:
03:31:4a:06:c3:84:b0:c8:58:fa:64:20:3b:8f:0b:
6b:46:8b:cf:53:6e:83:6b:3f:b7:5a:4d:ac:8f:0f:
b7:9c:23:34:58:96:ae:54:85:cf:f8:42:88:84:ab:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:33:29:53:8B:68:B8:B3:03:13:C1:7F:A7:37:CD:46:92:29:86:C8
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:14:f4:94:a3:fb:92:5e:c6:a2:2e:24:e6:b9:80:cc:5c:7c:
91:3f:c2:c0:f2:93:91:6b:58:ab:6e:4b:47:5d:0e:8d:04:b9:
41:79:ef:0b:d6:aa:da:54:17:89:aa:29:57:a5:bc:41:84:b0:
1a:4f:44:c7:4b:00:24:14:c2:33:0f:9d:d3:2b:a8:46:d5:7c:
5e:60:27:05:68:c1:e5:2b:13:a0:49:a6:d9:1c:67:98:40:b2:
be:75:9d:55:15:9e:24:f9:21:15:75:55:d8:00:64:9b:22:15:
07:11:bf:cb:ac:c8:89:7b:b8:a3:6a:39:ae:3b:ef:5d:06:af:
31:c6:ea:b0:b0:6a:4e:30:bd:36:c7:64:72:9f:92:1c:42:20:
8c:e3:27:fa:15:8b:22:fe:a0:43:fd:34:79:f2:d2:c3:06:74:
17:98:3b:90:11:8a:39:b5:46:27:c1:2f:93:e0:2b:3f:63:88:
a8:ef:1e:29:d7:fc:ce:82:47:11:17:32:6f:22:95:70:26:10:
de:7a:ad:cb:e2:30:90:57:c7:c0:60:be:f7:23:61:23:6b:da:
cf:e1:70:0c:ab:62:4a:e2:47:dc:e1:38:23:b3:2c:94:7e:ec:
cb:e4:af:a3:12:b4:2e:dd:c4:a4:fb:61:41:ec:01:ac:3f:f4:
7a:64:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:51 2025 by rpki-client