Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: DC5ZjP7BOUuLwwCQNDr+3u567Zn+e0MXF9JwanQ5cRw=
Subject key identifier: E3:50:10:7F:24:3D:BE:BF:C0:BE:3C:01:C4:0B:A9:38:22:BD:71:7D
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 01993612C4280297A914D3B53527EA4B1FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 1554
Signing time: Thu 11 Sep 2025 00:00:23 +0000
Manifest this update: Thu 11 Sep 2025 00:00:23 +0000
Manifest next update: Fri 12 Sep 2025 00:00:23 +0000
Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=)
2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: ZyPP7gbsynEkF/Pz8FLvWBGL7yLcMbGCYTFZmjYwQfQ=)
3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=)
4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=)
5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:c4:28:02:97:a9:14:d3:b5:35:27:ea:4b:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Sep 11 00:00:23 2025 GMT
Not After : Sep 12 00:00:23 2025 GMT
Subject: CN=e350107f243dbebfc0be3c01c40ba93822bd717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:43:02:3f:ee:60:f8:2b:fe:2f:71:cb:6c:
f2:67:0c:df:ec:02:02:89:27:de:d6:e5:81:36:f2:
63:c5:10:a4:45:37:5c:5c:f1:af:a9:1b:d2:c1:ad:
fd:0c:e2:8f:23:6d:af:ff:12:10:1b:ee:0c:93:a3:
93:cd:6c:f3:7d:b3:df:f0:63:5f:74:0d:36:a4:87:
a4:b8:95:3c:29:ae:0c:37:65:3a:69:ff:e9:6e:cf:
c4:43:0a:3d:e2:d7:0e:0d:1b:d7:aa:00:bf:ce:4b:
46:56:23:87:19:5e:fc:d0:a7:66:ef:0e:b6:b3:9f:
f3:54:fa:aa:c8:55:4c:34:25:a5:87:81:d1:33:9c:
64:98:18:9c:1d:11:ae:ba:e6:db:9e:c7:05:5a:ae:
f6:45:43:13:a6:bd:ae:02:29:73:a2:9a:c7:2e:39:
04:32:4f:df:74:18:5e:be:89:35:54:77:d5:72:8e:
a2:50:ac:75:40:8f:82:23:ae:50:32:b0:4c:fd:cc:
23:f6:61:02:b6:e4:f5:f8:08:ad:57:12:6d:8c:3c:
ed:25:da:51:0e:25:20:05:22:9c:94:2c:4f:5a:d0:
1d:22:91:1f:c8:32:09:65:41:e0:23:48:4b:28:d0:
86:05:af:4b:de:3a:9d:75:5d:c4:c3:4a:41:18:d9:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:10:7F:24:3D:BE:BF:C0:BE:3C:01:C4:0B:A9:38:22:BD:71:7D
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ad:a5:bd:ac:0a:4a:6e:4e:a5:81:b7:00:bb:fb:3a:0e:d8:
06:9f:d4:7c:4f:4e:02:8c:22:bf:ad:f6:4d:7c:0e:6a:ba:43:
2c:3c:84:bc:bd:55:d1:b6:e3:a5:8a:81:f9:19:96:dd:db:62:
8e:a2:b6:28:39:ee:af:c3:28:36:d1:59:fc:b5:2a:d3:eb:4f:
1f:ef:ca:24:7c:04:ac:f8:ff:6d:a5:32:6e:7d:e7:63:fd:75:
d6:2c:9e:c0:b0:71:74:d9:08:02:e9:c2:a2:82:d4:7c:ff:50:
92:ea:04:fb:89:4e:74:f1:85:a5:a6:bf:fa:28:89:f6:89:b9:
46:3a:15:81:51:f5:59:3c:63:88:44:92:ec:25:21:c9:66:5d:
25:47:57:33:a3:b7:7a:2c:e2:28:95:39:5d:40:75:06:6f:8a:
5d:33:dd:68:d1:35:b4:2b:4c:2c:d1:7d:a1:59:dc:a4:b0:94:
4e:a7:ed:8b:cc:03:2e:2b:96:98:b3:82:e5:52:dd:5d:2f:b6:
c4:9e:da:15:d5:c7:a5:88:09:ea:33:bf:6f:5d:38:b3:8d:1e:
af:c3:ff:85:51:db:eb:82:a9:2d:96:87:22:aa:85:8a:8d:df:
58:5c:2d:b4:b9:ef:37:27:37:6e:a1:a4:95:04:29:e7:04:96:
1c:59:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:44:06 2025 by rpki-client