Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: QKzTqTk0F0HcjdDocti+dRNIKIQ8Dd0XGpjPOlJnnfs=
Subject key identifier: 14:3E:88:CA:72:50:C9:EF:C2:A6:D1:67:7A:A6:4F:8E:77:1E:16:89
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 0197B820E474DE88691281EC761C367A7E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 15A3
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: nvJtv1cWJyiWW5En31ZgQxjbPiFgu74VhKfA2uJc1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e4:74:de:88:69:12:81:ec:76:1c:36:7a:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=143e88ca7250c9efc2a6d1677aa64f8e771e1689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:dd:3c:96:fa:89:87:90:14:4e:e0:6a:ae:
70:83:16:76:f6:62:21:7f:d5:2c:d7:57:7f:03:ec:
66:4f:de:01:b8:c5:34:70:bb:bc:05:16:0c:99:9c:
0c:d8:42:7f:98:2c:36:d1:94:ff:5b:7f:59:1b:a8:
d7:a7:8f:bb:21:b2:fd:26:75:3a:b2:df:88:d1:78:
a0:69:23:da:5d:be:26:83:d2:83:1b:ee:c8:a0:05:
da:6b:ad:ed:54:9b:a4:41:96:a0:5d:15:83:03:be:
ab:cf:46:36:8d:fa:22:68:ed:aa:9b:8c:53:67:c1:
2d:b8:c3:cc:08:fd:da:ae:7b:e2:63:eb:c4:19:79:
1b:bf:89:8c:00:19:13:83:f7:2b:4a:c5:75:5b:58:
54:76:da:18:03:fc:9c:19:38:d7:52:15:6f:ee:fc:
79:94:8b:e2:55:70:57:f9:64:71:e3:47:c1:9f:fb:
f6:58:f6:ba:69:78:d2:e4:53:7b:6d:0f:c0:9e:ba:
1c:74:7b:98:55:54:18:fe:5b:d1:8d:08:2a:5c:56:
6a:39:d4:24:43:19:60:e9:fd:bd:81:4a:2f:ca:6b:
47:f4:60:b8:5f:8b:f8:ca:b2:a7:d6:ab:9e:4c:ea:
be:eb:59:82:91:71:75:42:22:1a:6b:02:e8:f6:57:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:88:CA:72:50:C9:EF:C2:A6:D1:67:7A:A6:4F:8E:77:1E:16:89
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:b1:b6:18:07:40:d3:95:c9:84:b9:66:7f:16:91:e6:16:
53:28:f2:32:bf:bd:74:5a:46:0e:ea:4e:9d:59:52:0b:80:ff:
3c:6a:6e:92:2d:34:b3:3c:a0:a2:b4:08:81:f1:be:ad:2f:f1:
f3:91:5f:58:78:4f:48:4a:b1:58:05:b7:58:02:bb:79:11:ca:
a0:43:c8:1f:fa:48:c0:b7:e1:82:c7:7b:5d:b6:98:88:1a:7d:
c1:b9:21:39:d8:4f:f9:e7:bc:f5:d7:33:a8:4b:30:99:d0:0d:
9e:47:8f:63:69:99:44:a5:d7:d8:50:65:86:bf:a8:e3:01:d9:
b5:a6:cf:96:77:3f:7c:81:f0:e7:f4:00:3d:95:30:5f:09:82:
a5:8c:d1:2b:2e:fd:db:e8:d6:68:75:14:0e:84:1f:b2:1c:69:
b8:06:59:ca:7b:c5:94:7f:2a:88:a2:48:51:b6:bd:d5:92:b0:
04:5c:e2:76:51:60:74:c7:5b:c0:85:ac:83:b9:f4:4a:73:a7:
a9:c1:de:e6:f0:40:5f:d3:ec:d5:d7:e2:7d:7e:92:e8:5e:95:
ab:9a:0c:a7:61:f3:2b:84:18:81:65:06:1f:53:bb:f5:fc:9d:
ec:c5:b0:5c:36:da:6a:d8:a0:d5:ae:20:62:63:ad:87:18:5b:
21:f9:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:43 2025 by rpki-client