Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: bJM/RkjSAJgPN7G9dOJgaw/91EIC4mmB8gw4kq9ryEk=
Subject key identifier: 2F:95:D4:13:E6:37:F3:A4:F8:A6:81:1A:F8:EC:CB:CC:44:F9:57:0D
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 0196A12D793B1A629DB8397230B9C11721A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 16:00:33 +0000
Manifest this update: Mon 05 May 2025 16:00:33 +0000
Manifest next update: Tue 06 May 2025 16:00:33 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: JcjYw2YhRu/wx2eGqoKKM5Fjmmr72if9uUqhN+MupAM=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:79:3b:1a:62:9d:b8:39:72:30:b9:c1:17:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: May 5 16:00:33 2025 GMT
Not After : May 6 16:00:33 2025 GMT
Subject: CN=2f95d413e637f3a4f8a6811af8eccbcc44f9570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:9c:cb:cb:29:1e:90:a7:6d:7c:2a:4a:bf:
c3:be:7d:dd:04:59:ca:69:a7:7a:ff:24:0f:77:10:
48:2c:e9:62:1c:0c:f2:30:62:c6:47:77:89:a7:ee:
09:eb:22:ab:5f:29:45:60:06:e7:b8:1b:f0:a6:f9:
4a:42:68:62:0a:43:d8:86:67:81:30:98:b9:52:f8:
5b:65:fb:5e:5f:7b:44:d1:e3:30:34:66:db:7e:a5:
8b:99:02:53:bb:73:e8:e1:d8:f0:1c:a5:d2:6e:09:
7a:99:4e:f4:a4:d4:97:0a:18:d1:aa:fb:97:30:a7:
1e:cc:0c:36:a5:31:9c:13:94:f2:d2:ff:60:90:1b:
8b:34:2c:67:a6:85:b5:fe:98:8b:f4:d2:66:a5:98:
d1:36:e9:b7:cd:73:ba:20:eb:fb:f5:56:e4:7f:10:
54:5c:ed:e0:8d:9d:15:9e:f9:e7:34:4b:1f:eb:e9:
d1:e4:d5:bb:97:bd:cf:7a:f8:82:80:56:8e:d8:d5:
15:44:08:da:e2:5d:e0:34:b8:be:ed:30:ce:75:2d:
94:ee:4a:bc:61:f8:74:2a:8f:bc:e0:5c:79:1a:3d:
c7:88:b2:0c:93:85:9b:84:90:87:fe:e8:c8:f7:3b:
d8:3f:16:c8:d0:93:ed:b2:88:4d:4b:e3:f4:72:7a:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:D4:13:E6:37:F3:A4:F8:A6:81:1A:F8:EC:CB:CC:44:F9:57:0D
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:09:5c:c9:e7:15:16:2d:1c:4a:22:cd:4b:cf:5a:05:c8:
d7:73:0a:1c:a3:41:f3:e4:a9:51:7b:d2:55:5d:26:38:93:cb:
76:cc:27:d9:4f:57:02:1f:1f:55:00:7c:2d:d0:c9:6f:ee:1a:
c7:3a:91:68:57:d4:52:de:ce:d4:fc:9e:4e:de:09:e2:c7:32:
d8:e3:f5:67:7b:9e:ef:9d:66:36:f2:f0:47:16:77:65:f9:10:
eb:6f:d0:91:7e:0a:5c:e6:a1:25:41:e9:c5:7c:c2:52:94:18:
e5:58:4d:cf:30:5b:95:b2:5a:3d:ef:de:10:c4:df:fc:e7:29:
55:f5:88:2b:d2:f7:15:8a:e7:8b:38:58:01:58:d4:0d:ce:a2:
f7:56:75:b9:13:aa:c3:24:e2:5f:07:6b:fd:15:e2:8b:52:fb:
21:a2:99:6c:7e:ed:86:8c:76:65:eb:4e:df:01:0a:4e:c2:8a:
6b:6f:16:e6:fa:83:91:bb:2a:14:d9:08:f3:66:5f:03:5c:42:
dd:cb:49:c4:0f:06:96:7b:73:19:11:96:87:91:45:68:fe:37:
65:58:35:64:c6:b4:bc:52:de:ec:bc:2d:9e:37:f0:44:f5:7f:
64:5d:fa:d3:52:e6:33:14:18:ce:51:13:4c:8b:0a:9f:c6:4f:
f5:c0:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:27 2025 by rpki-client