Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: i2Ojt5eIzZ57SYuW/m6nWU+poIV+0c8vHCmYEbALwaw=
Subject key identifier: 83:81:2A:62:CC:6F:9A:AC:9E:8E:12:EF:20:12:0F:00:0A:81:F5:52
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019636F6115B397B3306004BFC0CAC346F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 14F0
Signing time: Tue 15 Apr 2025 01:00:17 +0000
Manifest this update: Tue 15 Apr 2025 01:00:17 +0000
Manifest next update: Wed 16 Apr 2025 01:00:17 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: RrTD1dbQu3i2D4jDVySePuU7XfTIcaDAAlTuibBCuSI=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:f6:11:5b:39:7b:33:06:00:4b:fc:0c:ac:34:6f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Apr 15 01:00:17 2025 GMT
Not After : Apr 16 01:00:17 2025 GMT
Subject: CN=83812a62cc6f9aac9e8e12ef20120f000a81f552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:fb:74:bd:03:97:51:eb:2a:6f:fb:f0:5f:
f0:a3:4a:06:76:4c:61:66:b1:da:22:7a:9a:74:dd:
f8:27:17:ad:16:16:81:e9:6f:5f:75:aa:af:08:e2:
22:1e:bd:96:b4:21:6f:ab:b0:48:52:2a:5d:91:3a:
d2:a9:47:84:f0:61:81:8a:45:13:03:f7:55:00:18:
19:d5:a5:48:32:a5:48:79:5f:ea:e8:13:a2:b5:9b:
5c:41:dd:49:3b:ab:d6:2f:08:cb:60:cc:67:a0:a8:
81:ab:ef:bb:65:c6:19:0f:7c:92:ff:eb:e2:7e:08:
1e:bb:20:43:42:f9:86:28:20:20:44:d7:37:81:89:
89:62:8c:81:04:69:0e:b5:71:fd:ff:e9:66:1c:a8:
fe:ce:45:26:0a:71:d0:90:dd:00:af:13:12:b3:87:
10:5b:1b:2d:8b:ad:99:4b:01:a2:17:b1:15:cb:e3:
5b:40:8c:3a:31:98:c6:14:7a:83:83:c9:36:03:e2:
43:3f:78:a1:68:2a:a1:58:d1:d1:b1:60:3f:b0:0a:
88:40:d8:ca:1a:ec:19:34:0a:cc:7a:d4:9d:95:ec:
b7:4e:ab:d2:0a:68:99:aa:fc:83:0a:91:c6:a6:bd:
51:f6:8f:be:25:f1:94:26:f1:7a:a5:88:f5:0c:ba:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:2A:62:CC:6F:9A:AC:9E:8E:12:EF:20:12:0F:00:0A:81:F5:52
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:3b:8d:e8:61:e7:3e:43:55:9c:1e:87:21:fd:ba:16:88:
e4:bb:72:60:8b:26:13:9f:86:9e:f2:0a:ea:51:17:86:96:75:
77:7e:17:dc:e0:d7:61:4c:f0:13:8a:a9:ec:1d:fa:d6:46:8d:
39:70:e1:0e:15:37:31:15:c9:ea:03:80:26:f0:7f:d0:5e:99:
02:b6:2a:a9:b8:3a:f1:f5:d0:f6:dd:4b:7b:80:67:77:b7:1e:
49:12:e6:1e:0c:ee:62:37:1d:9e:cb:4c:38:83:0c:71:e7:22:
50:d1:22:5e:64:70:6a:61:f2:92:f4:28:af:9a:ef:82:f2:17:
4d:a8:f4:85:30:c4:27:f0:1f:b5:c5:00:59:38:7a:b1:b6:e6:
d7:9c:d8:be:a8:12:14:8a:5c:42:db:62:9e:54:d6:99:5e:33:
11:a6:b3:20:5a:47:92:e8:d2:fa:95:37:b6:f6:fc:a6:79:3c:
b6:a6:b8:d0:b9:a5:af:59:45:aa:19:3f:60:b9:1c:47:12:b1:
08:3a:29:80:f7:43:55:73:b8:f8:80:12:1a:ef:3e:a3:16:cb:
10:d3:22:e8:9e:05:53:73:76:8a:5c:da:36:c9:c0:86:18:90:
ab:dd:c9:20:de:7b:8a:a3:00:9c:67:07:65:45:5b:a8:03:90:
d1:7a:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:12:03 2025 by rpki-client