Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: 8hXiFZ4krQ3ZGNSW5Nodjyl0T4hJEyVaiaURKmOJtxY=
Subject key identifier: 51:81:15:3E:CC:57:ED:3E:9A:0B:E9:1B:97:ED:5B:7D:D4:AC:BC:E9
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 01974742D660FFDDE638FA6931EB1022FA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 22:00:51 +0000
Manifest this update: Fri 06 Jun 2025 22:00:51 +0000
Manifest next update: Sat 07 Jun 2025 22:00:51 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: fI5jKjOA1IaPpjkc3leXeN3w8dCaZrn9rS6I7hCnGMY=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:d6:60:ff:dd:e6:38:fa:69:31:eb:10:22:fa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jun 6 22:00:51 2025 GMT
Not After : Jun 7 22:00:51 2025 GMT
Subject: CN=5181153ecc57ed3e9a0be91b97ed5b7dd4acbce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:e7:b8:f6:94:39:25:24:83:68:b2:90:ae:
00:e2:22:15:21:cb:75:d9:64:36:13:ab:37:bb:0f:
04:e2:fc:a3:52:6f:2d:9e:e6:8c:bc:fa:e1:c8:6a:
4c:13:dc:fe:ea:8d:dc:0e:fc:49:0a:05:df:b8:16:
6e:29:4f:c2:64:f4:91:9d:45:d7:f3:b8:2c:2b:8f:
42:37:b0:25:2e:5d:65:45:bd:14:06:32:91:d8:0c:
d7:3f:46:5a:ca:70:1c:b8:3c:45:b4:e8:cc:8c:a5:
04:20:ab:9e:dd:a6:64:65:3c:de:d2:f1:f1:8f:d5:
f2:93:fa:95:6d:74:c3:17:e6:84:7a:5f:8a:7e:5e:
41:91:d9:a4:cc:54:b9:09:c6:93:45:84:51:d5:17:
68:bd:23:2b:b3:bc:a8:9e:b8:ea:df:76:d1:7b:63:
53:85:52:1f:0f:e3:de:35:83:d3:ff:90:a8:d1:e6:
ed:57:92:77:e4:16:2a:b4:25:96:10:7c:52:b8:ca:
e1:bb:c7:f8:0c:23:7b:07:ab:0f:f2:d5:48:d6:a7:
17:f4:ba:96:50:c1:40:8b:ea:f6:1d:a7:2d:e0:d1:
c5:fd:b7:23:8b:4c:9c:1e:d2:97:d6:3d:21:b5:8f:
9e:23:e3:b6:cf:0c:89:8f:1c:8e:a8:13:08:74:c7:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:81:15:3E:CC:57:ED:3E:9A:0B:E9:1B:97:ED:5B:7D:D4:AC:BC:E9
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:bc:60:9d:b6:54:b3:be:f7:a2:e7:6c:d6:ac:31:9e:5a:
53:27:5f:e7:a4:6d:45:99:d6:54:19:67:c1:81:4b:c3:ec:36:
28:fb:cf:63:c7:ee:c8:77:05:26:df:08:e5:c8:1d:c3:c8:08:
1c:96:5a:95:df:a9:4b:20:ed:cf:d9:a2:b2:f4:b5:23:30:ea:
d2:02:e3:07:0d:3c:a2:91:8a:b9:3c:5a:e2:1f:e0:70:b6:e2:
7b:6a:92:44:1e:5b:88:42:fc:a9:b3:57:ea:5e:76:26:4a:99:
22:ce:45:ea:53:8a:3b:68:97:6c:da:d1:08:7c:57:c0:ef:24:
ba:de:f8:ba:ab:a0:85:e3:b7:ad:b3:53:e6:bd:c2:e4:fa:d1:
60:46:5c:b1:ff:af:f6:13:46:10:23:7c:4e:b9:b6:26:f3:8d:
d6:3f:c6:c6:44:39:bf:fa:35:66:6c:36:5e:cc:d5:5a:56:6a:
57:69:af:4a:d0:52:5d:d2:d7:9b:f9:d2:b8:07:49:34:46:42:
81:ea:21:6a:8d:b7:5f:c6:b9:7b:a9:44:f2:72:d8:4b:a0:0e:
94:7c:e7:54:c0:5a:16:35:74:61:23:16:6c:a3:65:9b:50:57:
af:55:09:6c:2f:a2:4b:74:90:c9:dd:b0:10:50:c9:5a:47:af:
9f:a5:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:55 2025 by rpki-client