Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: j5+5NVNXMl+WOWzBHYxP0iONK+VpOM4YhYjGyA+zDh8=
Subject key identifier: 23:EC:06:2A:DA:0E:38:83:74:C8:F1:0F:4F:95:F0:85:0E:6D:CB:8F
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 01974B8D8EFC4CEE60E8B6EAA760135D5C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 098B
Signing time: Sat 07 Jun 2025 18:00:57 +0000
Manifest this update: Sat 07 Jun 2025 18:00:57 +0000
Manifest next update: Sun 08 Jun 2025 18:00:57 +0000
Files and hashes: 1: 6f9DfsZDUzdPo3_6eNoeG4QK_-I.roa (hash: 4tclq8R1V/fdbnM4AvEGc3ZJVkHqia0uVMOBrni8yPk=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: c1b2ZgathtlORrq12CFltn5tpYJtpTcn6+zDmy9ThbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:8e:fc:4c:ee:60:e8:b6:ea:a7:60:13:5d:5c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Jun 7 18:00:57 2025 GMT
Not After : Jun 8 18:00:57 2025 GMT
Subject: CN=23ec062ada0e388374c8f10f4f95f0850e6dcb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:5d:5f:b6:14:85:24:e6:c9:17:9a:3b:52:
6e:3f:07:48:14:9c:2a:c8:f5:62:d4:ef:3f:16:3e:
2d:66:2e:f5:16:7e:9e:f8:37:9e:7a:2b:0b:00:ee:
c2:84:c5:23:e5:cf:15:ec:85:61:c6:86:08:c3:58:
c8:b3:0e:11:83:b9:9d:38:b6:1b:eb:d4:48:e4:3f:
0d:83:d7:cc:0d:d9:7a:d5:ae:2d:5e:50:84:1e:e5:
1d:a4:f1:42:8e:d3:ca:d5:29:b4:f0:10:cd:2e:6e:
c0:c0:20:9d:17:0c:6a:e3:ce:78:fb:24:88:a3:6d:
94:89:e3:d4:04:9d:67:30:3c:25:d5:5d:92:cc:7c:
88:85:59:a8:91:93:ac:b3:e6:3f:62:96:ff:02:78:
60:5b:11:b3:a1:5c:30:65:52:db:95:7a:db:af:cb:
00:73:0b:6e:51:a6:aa:29:b4:42:1d:e0:0d:5d:89:
ff:7e:e8:18:b5:f1:aa:ef:bb:16:8b:05:0e:22:c2:
13:60:3d:d6:e9:66:d9:36:99:0b:80:95:c0:fb:48:
d3:b8:27:1b:1c:93:6a:fd:cc:61:99:11:24:39:83:
d6:a4:46:8d:66:f1:ec:49:fe:03:8a:fc:95:70:90:
67:a5:1c:a6:9d:d4:50:25:e9:9e:13:dd:29:d9:a3:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:06:2A:DA:0E:38:83:74:C8:F1:0F:4F:95:F0:85:0E:6D:CB:8F
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:81:e4:74:ef:97:ef:a8:e2:b3:cf:2f:04:7d:f7:a7:82:5a:
10:69:57:12:fe:b4:c6:f6:c3:0d:c7:a6:90:21:04:c9:e3:57:
37:ac:42:09:92:f5:28:12:d3:3b:e7:99:0d:b2:a0:f3:c3:5e:
82:70:aa:d3:48:ad:4b:f6:7d:d7:7e:08:43:96:93:24:4d:d0:
37:87:43:fc:91:0f:5b:59:96:7f:63:eb:0b:9a:68:7c:35:68:
9d:7f:17:f3:b4:05:d8:26:33:20:50:89:17:ea:3a:7d:e1:5b:
93:6a:43:bb:4f:e4:03:73:25:1d:a3:eb:2f:c6:65:c3:1d:c3:
65:15:91:ea:be:d3:14:1b:b6:18:94:a7:67:0f:7e:e1:c5:bf:
47:26:98:21:83:aa:71:cc:7e:6f:de:90:8c:4b:46:55:d1:4f:
88:86:f1:eb:1d:60:75:48:53:9c:f3:fb:e8:d4:dd:d8:46:64:
bd:64:5e:30:90:04:ef:eb:3b:b9:ba:fe:d7:9a:eb:be:cc:c1:
db:77:cf:8c:a3:97:a4:09:47:e8:46:7b:15:8e:9f:eb:91:38:
f9:47:9b:fe:cb:1e:ca:da:a9:4b:89:e5:1c:91:f3:10:b8:94:
17:e9:b5:36:20:ae:5e:98:9f:40:85:19:3a:89:f5:1d:b8:5b:
a7:01:61:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjY78TO5g6Lbqp2ATXVx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjFkZDJmNzcyYTViYjQ3OTI1YzI4YmI1ZDE2Y2Q5MzBm
MjA2YjEwHhcNMjUwNjA3MTgwMDU3WhcNMjUwNjA4MTgwMDU3WjAzMTEwLwYDVQQD
EygyM2VjMDYyYWRhMGUzODgzNzRjOGYxMGY0Zjk1ZjA4NTBlNmRjYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIhdX7YUhSTmyReaO1JuPwdIFJwq
yPVi1O8/Fj4tZi71Fn6e+DeeeisLAO7ChMUj5c8V7IVhxoYIw1jIsw4Rg7mdOLYb
69RI5D8Ng9fMDdl61a4tXlCEHuUdpPFCjtPK1Sm08BDNLm7AwCCdFwxq4854+ySI
o22UiePUBJ1nMDwl1V2SzHyIhVmokZOss+Y/Ypb/AnhgWxGzoVwwZVLblXrbr8sA
cwtuUaaqKbRCHeANXYn/fugYtfGq77sWiwUOIsITYD3W6WbZNpkLgJXA+0jTuCcb
HJNq/cxhmREkOYPWpEaNZvHsSf4DivyVcJBnpRymndRQJemeE90p2aMb0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPsBiraDjiDdMjxD0+V8IUObcuPMB8GA1UdIwQY
MBaAFK8h3S93Klu0eSXCi7XRbNkw8gaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEt
NTUyZTUxNTQyZDRkLzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEtNTUyZTUxNTQyZDRk
LzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzoHkdO+X
76jis88vBH33p4JaEGlXEv60xvbDDcemkCEEyeNXN6xCCZL1KBLTO+eZDbKg88Ne
gnCq00itS/Z9134IQ5aTJE3QN4dD/JEPW1mWf2PrC5pofDVonX8X87QF2CYzIFCJ
F+o6feFbk2pDu0/kA3MlHaPrL8Zlwx3DZRWR6r7TFBu2GJSnZw9+4cW/RyaYIYOq
ccx+b96QjEtGVdFPiIbx6x1gdUhTnPP76NTd2EZkvWReMJAE7+s7ubr+15rrvszB
23fPjKOXpAlH6EZ7FY6f65E4+Ueb/sseytqpS4nlHJHzELiUF+m1NiCuXpifQIUZ
Oon1HbhbpwFh3w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:01 2025 by rpki-client