Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 7sAFHKMgrr/zI+3vcovyS4YRJ5RL+wsbQx0mtAhz27Y=
Subject key identifier: 62:3C:3B:B3:F6:ED:B2:E9:2A:73:A2:0E:0C:53:A0:47:86:12:9D:1A
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019849D2D2C1D4F08848581A94FDCA04D2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0508
Signing time: Sun 27 Jul 2025 03:00:09 +0000
Manifest this update: Sun 27 Jul 2025 03:00:09 +0000
Manifest next update: Mon 28 Jul 2025 03:00:09 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: RCbqQMSAsvkUQIDf9dcU4bsIRoWoccscniGrdeggw6A=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d2:c1:d4:f0:88:48:58:1a:94:fd:ca:04:d2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jul 27 03:00:09 2025 GMT
Not After : Jul 28 03:00:09 2025 GMT
Subject: CN=623c3bb3f6edb2e92a73a20e0c53a04786129d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:20:ea:e9:85:4c:53:e6:7a:6e:d6:ac:f2:
a4:b8:3a:1f:a8:d1:ed:76:f6:7e:7b:c7:34:28:d4:
da:6d:06:a9:a2:fb:c4:a7:db:fd:13:f7:54:14:a2:
66:6f:64:a2:95:33:01:02:d3:eb:5d:9d:7f:09:29:
ee:ac:0e:8c:30:9f:0c:d8:5a:48:8d:a3:94:dc:03:
87:33:32:57:f3:b2:68:ea:cf:03:1d:ad:79:a9:a1:
5a:9b:5a:02:2b:3d:17:44:d9:ee:fd:52:50:4e:3d:
ad:6f:c5:d4:c7:a5:65:52:1e:7c:61:7c:15:ec:bb:
ae:90:95:48:07:b0:cc:92:5f:a6:50:c1:dd:f1:3c:
87:a0:93:b5:6f:24:c1:64:fd:31:23:06:e0:ec:dc:
c2:b5:6e:62:67:35:db:21:f0:f0:a7:ce:cc:1b:c1:
60:a0:c5:39:58:6d:9a:08:65:a9:61:69:0d:49:f2:
0a:c6:05:02:c9:89:67:55:23:c6:d9:85:5a:f4:d3:
5f:59:e8:f1:68:a9:f0:78:31:f8:06:03:83:cc:37:
7e:dc:e5:03:a8:25:c6:b9:97:fc:79:7d:c7:6d:3f:
bc:bd:d6:ed:80:4f:b7:cf:9d:55:c2:6d:6c:3f:28:
36:f3:8e:bc:eb:bd:de:61:2c:e5:77:1f:6b:a8:5e:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:3B:B3:F6:ED:B2:E9:2A:73:A2:0E:0C:53:A0:47:86:12:9D:1A
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:50:d1:4a:c9:ab:03:36:c8:0f:5f:db:37:5d:66:68:63:22:
76:ea:8d:d8:89:6e:88:5d:52:08:7b:e7:34:dc:fb:54:cb:ae:
48:02:57:9e:cb:02:23:9b:e6:5c:e3:50:84:f8:d3:6c:e8:7e:
7b:ab:f9:83:61:c9:dd:0a:c1:40:09:0d:e5:b0:9d:0c:3c:8b:
2d:2e:d2:8f:91:55:7a:70:27:5b:af:c4:d2:73:ab:de:e6:86:
da:4b:78:2c:19:95:06:40:82:83:22:30:7f:ba:7f:cb:46:2a:
5f:c5:da:12:5f:41:e6:8b:0b:7c:40:14:a0:ca:84:32:30:57:
44:0c:1e:b1:0c:45:20:88:a0:76:e2:ac:02:21:d6:35:f2:96:
b1:20:48:fe:c6:32:55:36:39:dd:fe:7f:f3:ff:06:c6:da:3e:
58:8b:19:bf:ae:36:7d:bb:9a:0d:4e:5e:1f:e2:2c:a9:3d:08:
cc:7f:37:8d:cb:a9:71:b4:bf:90:da:c0:5e:5a:92:55:1a:6f:
6f:cd:b2:9f:2b:37:85:e2:ab:fd:15:72:e8:3d:19:af:ea:b2:
a2:7d:17:6c:12:5c:10:b6:29:e6:b0:a3:14:c7:91:02:a0:09:
3f:5e:a5:22:9b:31:28:2c:1b:b3:a8:33:a3:ae:54:b5:45:a8:
c9:4a:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:38 2025 by rpki-client