Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: 7fo+leXWSzVlOx1yFoR2yKgUq1x96NlpyiacnBypOj0=
Subject key identifier: 32:07:B5:CB:48:D1:5B:39:2D:F6:11:21:DE:8A:2C:DC:83:0C:5A:CD
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0198353A3BFA29EF2990F5F02612DA155727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 074E
Signing time: Wed 23 Jul 2025 03:01:05 +0000
Manifest this update: Wed 23 Jul 2025 03:01:05 +0000
Manifest next update: Thu 24 Jul 2025 03:01:05 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: +dGe1sMBlaGlwJi1VN2Kyhswl8tTJnQxQ5gJ7JMfQeo=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:3b:fa:29:ef:29:90:f5:f0:26:12:da:15:57:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Jul 23 03:01:05 2025 GMT
Not After : Jul 24 03:01:05 2025 GMT
Subject: CN=3207b5cb48d15b392df61121de8a2cdc830c5acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:70:03:de:0e:54:18:2f:7d:d8:44:3b:af:
29:a9:05:75:26:ac:5e:e4:2a:49:10:27:ce:02:8c:
7b:26:e4:20:6e:48:ce:f6:c1:6f:44:e0:1b:04:6d:
4e:2b:b4:4a:54:23:0a:ad:73:a3:c5:40:06:53:c4:
51:a2:38:22:10:48:33:ff:34:94:13:80:85:4d:36:
c3:82:2a:49:ce:f4:0f:d0:7f:97:b2:e0:71:84:90:
55:b3:a5:53:a8:b4:e4:a1:a1:19:7a:ee:3f:aa:39:
a9:90:7c:5b:cc:72:90:c9:b6:4a:85:9f:27:c4:5e:
c6:68:dd:2b:d4:17:26:71:d8:36:04:8b:78:68:1e:
2c:41:99:ca:22:7c:59:c9:f0:18:72:fc:8f:bd:b0:
7e:d0:15:ac:1b:86:51:12:fe:8b:80:72:91:69:96:
a7:28:0d:67:5b:2d:e8:70:3d:00:75:0c:35:cd:8a:
62:8a:62:ae:1a:af:b2:90:d0:dd:69:c2:ef:d6:c9:
82:fe:0a:1c:8e:ed:58:56:e5:fc:c9:24:87:2c:c7:
da:f2:f6:32:34:35:0d:9f:a2:27:f2:15:bf:6f:9e:
21:d6:40:78:dd:4e:7f:a6:62:c9:61:f3:9a:5f:24:
6a:63:18:e0:38:05:29:5e:72:7f:a7:e3:5c:d2:00:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:B5:CB:48:D1:5B:39:2D:F6:11:21:DE:8A:2C:DC:83:0C:5A:CD
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:08:32:50:5f:21:eb:46:38:65:cc:14:4e:4e:55:d6:e1:28:
1f:0e:6a:da:b9:9a:ee:2b:25:34:ac:33:7a:ca:06:f6:a5:4f:
c8:d4:3d:fe:dc:e7:5b:6c:c0:f2:44:1f:3a:2c:4a:1e:58:e8:
5e:1b:24:2b:e4:7f:6b:01:0f:94:c1:fd:02:f6:79:74:d7:f2:
85:84:61:95:3f:27:b9:bb:ce:4f:ec:4c:43:a8:00:b4:51:a0:
0b:aa:2c:4a:e8:61:3f:67:ec:95:09:9b:71:84:f2:1c:43:10:
5c:88:7a:78:2b:6b:29:37:b0:f5:51:49:08:e5:e4:78:f5:56:
40:e8:45:ba:4c:58:07:4f:db:38:14:d1:db:6c:8e:5e:00:12:
a0:ab:1e:0f:8a:6d:09:ff:7e:46:74:7c:eb:96:0a:39:09:60:
36:ec:f3:b5:3e:38:d4:ff:98:7f:64:6d:5a:16:cb:82:df:43:
37:a0:c7:56:a2:a5:d7:47:98:3e:e1:3b:ce:38:34:8b:19:03:
f7:99:30:19:23:cd:a2:3f:8d:95:73:58:37:4f:18:e0:56:9c:
c7:37:24:bb:c0:ae:7d:77:ba:2c:e5:86:ee:f2:54:b0:bd:be:
0d:e4:7b:5a:43:36:1f:1a:1f:29:1c:de:48:4a:c2:0b:f8:21:
5b:ca:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:18 2025 by rpki-client