Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
File: rysOIXo1FoOSIGvac85hlTWgLzU.mft (raw, json)
Hash identifier: 3XN4hRdNbKYj6/YhXCNtHkcfb2+X/TzqgmSmUFgE0dc=
Subject key identifier: C0:94:50:5B:94:F0:99:BE:80:23:38:76:DD:BA:63:CB:52:29:A1:EC
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial: 01985C474FDC649E4EF8847C79F26C7652CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
Manifest number: 0AB2
Signing time: Wed 30 Jul 2025 17:00:33 +0000
Manifest this update: Wed 30 Jul 2025 17:00:33 +0000
Manifest next update: Thu 31 Jul 2025 17:00:33 +0000
Files and hashes: 1: rysOIXo1FoOSIGvac85hlTWgLzU.crl (hash: cxWffeQ2Bn/fHwOxn6dAQambeeFzjaxdqPP1C8VHDqU=)
2: tKwKl17jXwIeAtAZEyALLLwTexA.roa (hash: E9CmZ9NzF2HrbXjpDzFF0Gs0klh/PHaYx1PKsYvWrwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:47:4f:dc:64:9e:4e:f8:84:7c:79:f2:6c:76:52:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
Validity
Not Before: Jul 30 17:00:33 2025 GMT
Not After : Jul 31 17:00:33 2025 GMT
Subject: CN=c094505b94f099be80233876ddba63cb5229a1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:7f:d6:8c:c2:d9:86:e5:a8:d0:da:bb:79:
9e:ab:cb:fa:fe:45:1a:ad:52:45:b2:63:dd:ee:ab:
7d:f4:52:71:38:eb:a5:fc:e6:7f:ec:31:bf:77:db:
f1:a8:2b:9b:ed:fa:35:c3:1b:83:4e:e6:86:69:be:
fe:08:d2:16:ef:99:a7:9e:df:d3:1e:a3:56:e1:2d:
fd:8d:91:b5:c9:2a:ff:32:70:bc:6c:ef:b8:3c:38:
0a:3e:aa:ef:a1:3c:c3:a9:c4:5a:7b:57:62:61:d5:
c6:9a:18:ce:1a:31:ff:ae:d9:79:01:99:6b:56:d6:
13:48:b6:00:97:ef:52:eb:3a:60:28:77:79:27:cf:
95:81:19:61:73:88:12:27:fd:ab:79:a2:83:c7:4c:
0a:b7:29:21:3c:86:fc:46:ea:2f:13:6f:f6:de:22:
94:28:91:54:e0:f7:8e:0a:b4:98:32:0c:a9:1f:65:
7c:7c:1d:99:da:14:12:f5:42:03:36:9c:7a:e2:84:
3e:a5:d3:85:be:64:4c:c1:18:2f:e1:8c:4e:ff:96:
b4:88:8e:d5:d7:d9:0f:89:50:6a:86:f1:27:df:98:
3f:a4:5b:16:b6:23:e0:15:07:8a:80:41:b2:20:0a:
f2:47:84:d7:1c:55:e5:f1:8a:15:9d:90:84:5c:27:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:50:5B:94:F0:99:BE:80:23:38:76:DD:BA:63:CB:52:29:A1:EC
X509v3 Authority Key Identifier:
keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:8a:c0:93:3f:a5:87:05:94:15:28:56:5b:de:0a:63:17:
36:3e:c5:31:ff:d6:20:3d:1d:ea:24:f1:1f:9b:27:80:cc:95:
c3:14:39:50:66:db:3c:37:d5:57:9d:d5:02:0f:3e:74:61:fe:
d7:e2:be:46:64:07:85:f4:b6:40:0b:df:55:8a:bb:de:2d:35:
a8:b7:8e:40:36:49:e9:af:d5:90:b5:61:93:8b:b6:86:86:99:
34:ef:77:df:0d:b3:44:01:fc:08:9d:54:dd:9f:6b:57:04:7c:
d8:11:71:0c:5c:9a:b9:d8:70:48:f3:b8:44:5d:24:b0:a9:a8:
2a:39:af:2a:8b:06:57:26:4e:bd:9b:af:67:e3:7e:ed:2d:59:
38:a3:31:66:01:7e:3e:00:2d:b2:4e:da:62:46:e1:60:a6:47:
4e:18:86:d2:ff:5e:f5:f4:24:c0:6e:70:65:0c:47:ab:b9:f1:
b3:7b:71:ec:5d:62:3f:42:2f:2a:d6:f5:c7:84:e2:05:e2:14:
26:d2:f5:89:a8:36:a5:96:1b:97:ab:f1:3d:67:23:83:ff:85:
a0:43:f6:2e:f4:22:27:40:ce:89:b6:de:ac:a8:65:9e:ce:d9:
f8:e2:cd:66:2a:b4:1f:b0:01:34:ef:12:64:48:0c:9e:4c:8c:
97:78:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:16:54 2025 by rpki-client