
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: iZ0HXXl3SqVG97m4T0v76BR6HkL3jGgqS1Am1vLSY/o=
Subject key identifier: D1:1C:DA:68:85:AD:A3:DA:73:35:AE:3D:B7:19:96:75:11:BC:05:16
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 01984AE57A61048C0B1137A552982248D67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 15EF
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: Jo3upAxPon0AHxwFeIAst/yk5DOmqFLiFB6kDGJuysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7a:61:04:8c:0b:11:37:a5:52:98:22:48:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=d11cda6885ada3da7335ae3db719967511bc0516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:42:92:84:b9:41:86:80:93:6f:88:98:73:
56:d9:0f:2c:be:f3:21:88:4c:10:ae:f2:2a:f2:9b:
a2:c7:1d:c1:ed:25:2f:3d:0d:7c:d8:67:9b:a2:01:
70:77:0a:3a:c3:94:83:f2:32:53:04:65:05:db:5a:
0a:0d:7d:ab:ee:0d:d4:0e:b9:43:4b:c4:8c:ef:2f:
5d:e1:25:10:8e:73:7f:c0:35:2c:c3:0d:7a:ab:69:
28:72:94:a0:90:fc:db:82:48:be:bf:ca:ed:83:54:
70:87:d5:7a:aa:67:5f:c2:1f:46:85:7f:28:14:98:
c3:2d:6b:df:76:62:72:6f:73:cc:e1:84:47:6d:80:
26:2a:b7:84:94:b6:d4:7d:b6:4f:7e:4d:44:f4:85:
54:26:9a:69:09:23:b2:96:33:bf:22:be:b1:98:2f:
38:8d:e0:b3:cd:a8:13:17:7f:49:91:2e:91:72:29:
f1:33:fd:8d:66:d4:fa:ef:59:de:9d:02:48:a3:ca:
b7:51:16:8e:8b:c2:1f:52:2e:89:16:23:76:39:23:
86:05:9c:23:2a:24:6e:06:c2:05:75:0b:c3:d6:f0:
b3:25:df:25:a6:fb:de:15:e5:c1:fd:fd:2b:18:aa:
db:95:68:ef:eb:4f:1d:46:65:83:df:0d:4b:37:5b:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:DA:68:85:AD:A3:DA:73:35:AE:3D:B7:19:96:75:11:BC:05:16
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:54:f7:73:39:e7:57:1e:b6:e8:38:63:6f:84:a0:ca:2e:
13:19:e8:8f:b6:1b:d3:3e:fd:31:5e:bd:54:2d:12:56:ec:94:
bf:a2:1e:17:dc:d7:a4:1c:13:e8:73:61:de:b4:09:bc:7c:1e:
ee:af:be:61:eb:cd:75:20:a4:37:94:b4:d6:84:4d:82:b3:6a:
55:01:f9:11:27:a9:a6:37:c4:44:19:92:ff:ca:ec:c8:16:cb:
e1:21:84:69:6a:e6:94:73:9d:3f:a3:65:4a:e9:13:2b:47:ce:
59:07:f5:6e:89:eb:f1:ed:1a:fc:21:02:9c:fc:74:2c:f6:92:
40:d5:4f:af:14:a6:21:b1:d8:b3:66:a8:be:5a:6a:c6:4d:74:
18:50:0b:34:6f:6a:4b:de:50:b9:9b:9d:53:a1:17:d2:0a:e2:
1e:9f:c4:cc:c7:a3:58:88:d8:27:57:48:61:49:2b:78:98:51:
ab:a2:0d:69:88:11:fb:92:de:ba:3a:82:56:d8:57:7f:8f:3e:
2e:c3:5e:5f:6a:ae:9d:a6:5b:8d:a4:ac:71:40:ae:65:42:82:
7b:06:9f:4b:7e:2f:36:be:e0:fc:65:9d:74:ac:19:34:a8:cc:
11:77:5e:bf:65:48:d3:c4:50:c8:dc:9e:56:f2:e6:2d:2f:9e:
f8:00:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:22 2025 by rpki-client