Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: v6ySaNPb+1angLLs4T8p8M8tkL5AaS6wsRvatjJ7Sgo=
Subject key identifier: 6D:F3:C1:E8:AC:5C:EE:4C:44:E6:A9:E7:60:7C:DF:EF:A0:64:CC:93
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 0197B745B58AE5497C2A3A714A87AB35EBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: JMm4WvKboJ6s5102S8uKrhX3OIl/Idtf8NNjjNNa3BU=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b5:8a:e5:49:7c:2a:3a:71:4a:87:ab:35:eb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=6df3c1e8ac5cee4c44e6a9e7607cdfefa064cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:1f:db:13:2e:64:db:3e:28:98:94:96:69:
21:c9:b5:d8:3c:5b:b0:93:c8:fc:74:c6:df:60:59:
a6:da:37:d4:2e:fb:32:e9:90:c8:83:5f:52:bd:14:
9a:cb:3d:33:16:32:28:88:e9:72:36:8f:38:fc:d7:
d3:32:1f:e5:c9:17:62:7e:13:6e:8f:b5:32:b6:76:
8f:54:d7:68:5f:c3:12:d3:a1:ea:a0:11:92:c5:fb:
31:9e:28:da:c3:e6:f9:15:b9:c8:e2:dc:23:c8:b6:
76:d8:e8:1a:12:27:65:64:c6:56:67:6c:8b:13:1f:
58:83:81:71:2d:6c:07:d7:6e:5d:e4:81:1d:3d:46:
40:2f:27:ea:4b:df:8c:93:9b:91:82:9e:19:e7:9a:
b8:9b:c9:2c:da:de:5a:7f:3a:70:79:4b:36:56:a1:
64:c6:de:8b:fe:6e:de:24:78:41:4b:03:7c:df:45:
90:86:14:15:ba:7b:2b:7c:97:81:f6:66:cd:22:da:
6a:c5:50:6b:29:27:29:f9:d6:3e:86:f0:c4:a9:fe:
5a:40:61:90:71:84:e7:d2:fc:4c:5d:08:37:26:66:
fb:ea:50:2b:96:09:5e:33:22:15:2b:c0:f1:71:13:
40:8f:9f:86:4b:dd:fb:f4:32:ee:59:99:cc:b7:03:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:C1:E8:AC:5C:EE:4C:44:E6:A9:E7:60:7C:DF:EF:A0:64:CC:93
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1c:10:52:15:2c:9d:de:17:ff:9a:cc:46:0b:88:bf:a4:07:
77:70:de:d7:df:a5:f7:9f:ce:3b:b5:1c:83:68:f6:44:10:d5:
bd:f1:7a:3d:c9:54:e9:d0:5c:88:4e:14:f6:c9:01:a7:c0:04:
9c:a2:83:a8:3e:cb:57:82:a9:1b:ad:76:77:4e:c5:07:2b:9e:
63:43:83:b7:15:71:a3:a3:cd:a6:47:bb:3c:c5:0d:06:2f:dc:
35:48:04:e3:f7:cc:42:60:e1:fb:c0:d1:6c:98:89:b8:b2:f4:
fd:39:27:18:83:71:d5:cd:74:f8:15:12:bd:d0:c7:55:fe:69:
8c:a1:27:e9:63:48:43:92:71:aa:ac:ec:74:dd:07:a7:a0:c3:
cd:66:4a:32:0c:af:b4:5f:80:56:86:07:b6:ec:28:f8:07:aa:
7f:d2:f8:31:91:5f:d2:22:cc:5b:44:7b:26:ff:d8:71:95:30:
00:a0:60:e2:be:a1:27:aa:8c:ca:be:a7:0e:3d:9b:9c:eb:54:
30:10:e6:e8:b3:02:55:a4:6f:28:e5:c1:d3:b6:de:59:f0:f7:
92:0f:22:99:be:9b:fa:dc:ae:9f:a2:4d:b8:ed:c8:f3:02:5e:
6d:21:57:a6:cf:44:f6:4b:12:7f:cb:9d:e5:b5:a7:a5:7e:a7:
4f:61:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:41 2025 by rpki-client