Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: gdChh2FwS6vM0oG95jbgFvQmKOHoK8vhw9dMkogbIEU=
Subject key identifier: 1E:67:92:70:C3:ED:A1:B6:9A:AF:27:0D:57:7C:54:9D:5B:41:DD:78
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 019855A07DEA978ABA4E197C9A9BD16C4F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 156D
Signing time: Tue 29 Jul 2025 10:00:37 +0000
Manifest this update: Tue 29 Jul 2025 10:00:37 +0000
Manifest next update: Wed 30 Jul 2025 10:00:37 +0000
Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: 8g45bvSXF8ABgt0Z6M1CvpRLmbVXcI31aRjw6ANRwJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:7d:ea:97:8a:ba:4e:19:7c:9a:9b:d1:6c:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jul 29 10:00:37 2025 GMT
Not After : Jul 30 10:00:37 2025 GMT
Subject: CN=1e679270c3eda1b69aaf270d577c549d5b41dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:50:d5:fa:17:47:33:f1:7d:12:26:88:2d:
24:43:8b:c2:1d:4b:6c:25:f3:43:38:58:61:b8:f1:
ac:12:10:e2:ae:a5:2f:a7:6a:31:cc:5c:f9:6d:0e:
34:09:05:86:af:8b:ea:7f:65:64:e6:0b:57:d5:9c:
8f:11:92:2c:96:b4:80:e0:e6:0a:90:78:7c:94:6f:
15:61:53:40:0c:27:c8:ae:ab:28:49:e2:58:ab:3e:
28:4f:66:e6:2b:3b:33:b3:07:82:01:89:b5:48:6e:
15:06:c0:f4:27:fc:44:f7:e6:5e:1c:93:ce:4c:ca:
43:7f:74:ff:b7:60:3e:59:c0:c2:36:99:48:d0:3b:
29:80:fb:1d:c1:a2:95:72:36:e6:c0:a3:e3:d0:ce:
72:4e:d9:20:58:7c:a9:b7:2d:87:35:9d:41:61:be:
c7:66:86:ea:45:11:eb:4f:8d:cc:dc:cb:68:66:e7:
f7:db:a3:27:92:6e:e9:fb:21:52:95:eb:30:24:b6:
25:4f:6f:20:4c:f5:d7:a2:db:c5:d8:f6:5d:a2:ae:
10:a2:b4:4a:a9:64:fa:32:98:93:0d:4f:cf:9b:f2:
e7:49:0e:a2:f3:ec:04:b1:3a:05:da:aa:65:3b:ac:
48:4a:cd:67:f1:53:b4:e6:5d:af:61:2a:a1:0f:40:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:92:70:C3:ED:A1:B6:9A:AF:27:0D:57:7C:54:9D:5B:41:DD:78
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:9d:93:06:b0:a3:28:e2:00:95:3a:34:35:6d:0d:6e:3f:
7f:6b:1b:92:1b:ca:db:b4:3a:f8:03:63:ec:d2:a5:0e:e4:27:
61:85:6b:d4:9f:a5:66:d1:9e:c1:f2:0e:94:c1:88:91:de:b5:
cb:73:3b:73:40:e4:20:66:a7:7b:18:e9:b9:26:ed:5e:0e:7b:
61:18:26:5f:99:00:11:9e:2f:06:87:d4:22:15:36:fd:4f:fd:
77:64:33:54:a4:e7:19:af:1b:8c:e3:b2:a2:40:25:ef:78:c5:
de:09:b2:ab:96:e0:b0:fe:91:f8:87:17:86:b9:c8:39:bf:ec:
1e:35:2d:17:69:b3:7a:4a:6e:18:fa:aa:99:ec:7f:8d:c1:0c:
36:fd:15:1b:2c:64:2e:e7:bd:6f:4e:74:6f:01:2d:f5:cd:9f:
a8:79:db:8c:6f:d9:86:43:bf:10:3a:6f:06:af:5f:c8:0d:e6:
6d:c9:e7:b3:aa:82:99:77:9b:d3:2b:2e:b9:e7:a5:ad:60:21:
26:7d:de:04:5c:83:61:55:ac:4f:0d:cf:80:5e:a3:fc:b8:a3:
0b:fd:cd:64:aa:61:97:a0:bb:86:bd:ce:e2:f3:31:6c:12:56:
0e:6e:d8:c0:6b:d5:9d:97:9a:d2:0e:b0:6c:d8:27:6e:4f:a9:
d1:48:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:57:39 2025 by rpki-client