Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: kWjG6rXrqyYE/mHIXLL+4zMcfzYhrLPs3rG90awidrc=
Subject key identifier: A9:A2:C9:32:36:63:FF:E4:62:89:8D:7C:12:4F:4F:CD:21:18:6A:EE
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 01984A77D9C7AA2D4537B5B5651BAD6EEFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 14DA
Signing time: Sun 27 Jul 2025 06:00:25 +0000
Manifest this update: Sun 27 Jul 2025 06:00:25 +0000
Manifest next update: Mon 28 Jul 2025 06:00:25 +0000
Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=)
2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: e5VNya/9z1x6igafAHz93CoOlXa13Lc600HHtyqBQqg=)
3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=)
4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=)
5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d9:c7:aa:2d:45:37:b5:b5:65:1b:ad:6e:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jul 27 06:00:25 2025 GMT
Not After : Jul 28 06:00:25 2025 GMT
Subject: CN=a9a2c9323663ffe462898d7c124f4fcd21186aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:b3:dc:dc:2e:a3:24:bc:7c:45:d5:0b:2a:
fc:21:03:3c:b8:e5:40:04:ca:20:43:63:bc:c5:0f:
0a:c6:7f:df:d5:d5:13:a7:61:33:3d:eb:ba:50:0b:
eb:e9:b3:e7:98:b2:0b:a3:d2:af:9d:22:45:4f:a9:
e7:a6:d3:0c:9c:b7:a7:94:5f:fa:2a:a1:9d:f1:14:
50:16:e4:bd:32:ca:a1:07:8c:4b:b5:f1:98:09:6b:
c4:2e:92:cb:fc:3c:83:04:7f:ce:09:4d:e6:fc:ef:
e7:b8:b2:9a:b3:d3:3e:b3:e2:e8:dc:00:c1:6b:6f:
49:44:f8:8f:32:f2:be:a9:00:73:48:08:35:7a:3c:
86:c1:71:00:ef:e0:f6:5b:0b:7f:c7:46:a6:84:5a:
92:fc:d5:a9:1b:2c:2f:80:7b:a0:fb:21:80:20:fb:
f8:85:49:b4:0d:93:d1:18:95:fd:fd:4a:ae:8f:2c:
79:fb:22:40:ab:eb:b3:60:3e:7f:a9:7e:4c:47:e5:
42:a5:8d:1e:28:31:af:67:84:5d:c6:d2:1c:25:b3:
83:d8:37:a9:89:b1:2e:08:e6:01:d8:b7:a5:23:12:
69:eb:a5:29:35:73:2e:a6:9c:12:cd:39:13:88:85:
b5:4f:fa:e9:10:ec:65:90:de:7c:70:84:a0:a3:51:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:C9:32:36:63:FF:E4:62:89:8D:7C:12:4F:4F:CD:21:18:6A:EE
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:37:fa:a1:de:c2:ca:15:33:39:77:c2:b2:25:16:a6:be:
50:90:13:31:04:4b:ee:af:83:65:4a:7e:91:27:a3:2f:30:db:
82:32:7c:7e:bb:2d:97:ee:81:0c:40:42:fb:c6:8c:28:b7:25:
da:ea:04:43:69:fa:38:bf:c2:f9:04:15:28:ba:2f:69:f6:28:
58:5b:5f:fb:18:04:90:1f:15:b3:79:34:43:e8:f1:0c:26:0a:
9b:d5:a4:6d:3e:f6:24:07:9d:0d:9d:51:fd:44:a9:4c:a1:ff:
7d:5a:fb:91:d5:d4:dc:cf:df:b7:62:b9:a5:d4:f7:45:ec:1c:
11:6d:c5:08:56:e9:27:77:dd:c2:f7:50:bb:31:99:5a:b3:90:
51:e4:20:08:5b:28:7d:4e:9d:59:1a:44:5a:82:79:dc:90:9f:
50:18:5d:6a:8a:ca:23:0e:59:ed:88:9a:43:41:37:66:35:c7:
00:a0:82:eb:ce:b1:ce:42:b0:c3:4a:d4:db:a1:7d:60:96:02:
0b:81:f5:34:41:84:d6:0c:ce:f7:4f:ad:7c:0c:0e:c7:88:f6:
40:98:dc:c0:93:db:1c:41:52:39:0f:b1:b2:af:fc:bc:d6:49:
1a:5a:dc:dc:7f:89:a2:cb:94:8e:48:1a:0c:47:6a:1e:5f:aa:
c6:f7:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:19 2025 by rpki-client