Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: RmIADB0wJZ3W2ocTxPKyWS4Yy8veNK9Qdewxzh29/vU=
Subject key identifier: 1A:2A:18:29:15:55:09:56:12:1F:7F:60:26:78:3D:07:11:EE:55:CD
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 0198D5F14B88D5A0E8679558889B937178B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1637
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: p3M3IM/IXZG02C4BROYSYH75ZxwIENRKc0s41LVzMrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4b:88:d5:a0:e8:67:95:58:88:9b:93:71:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=1a2a182915550956121f7f6026783d0711ee55cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:c2:37:09:83:2e:f8:9a:c1:d3:82:50:54:
44:96:03:63:d2:c5:e7:7f:67:a8:d4:24:e3:a6:1b:
47:25:73:1e:d7:a7:67:83:9f:7c:02:17:41:27:d7:
ae:fb:0e:36:35:c2:3d:e3:7f:5f:50:ab:15:ce:02:
af:e9:94:d1:1f:11:85:27:a3:04:f1:70:a9:e1:bb:
7d:9c:b3:d9:78:48:01:7d:e5:ac:6b:49:02:28:93:
d8:d5:3e:de:22:64:42:35:2f:4f:56:82:6a:d3:d2:
0b:dc:a6:a0:f3:07:87:ed:ca:8b:a5:1c:91:97:57:
7a:07:24:5f:ec:78:89:ad:df:8c:ae:19:a4:0b:a1:
e4:56:41:f3:0b:7b:35:eb:90:89:05:a3:2c:8a:c1:
ed:3c:69:c2:79:37:68:f2:6e:1e:e8:28:fd:cb:5b:
03:26:41:82:d8:c4:68:18:a0:6f:95:bf:13:54:99:
39:be:f9:f7:a3:e0:14:61:02:a7:a6:25:fc:68:bc:
04:cd:74:48:7f:b6:a5:ab:9b:17:8e:b8:46:70:86:
8d:fd:25:70:e3:ff:f2:29:3e:b8:54:4e:03:90:2f:
7e:2c:5f:0a:10:be:cf:6a:fe:d7:30:36:40:60:24:
7e:fd:72:f9:04:fa:78:7e:3d:3f:4a:d7:5f:99:a1:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:18:29:15:55:09:56:12:1F:7F:60:26:78:3D:07:11:EE:55:CD
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:3f:77:be:0a:4a:d3:c8:8a:44:1b:8b:70:9d:24:fb:78:
03:7c:62:8b:6e:3a:6f:2b:c1:91:30:a9:2b:41:3d:3a:63:2b:
a6:ea:aa:c5:1e:ec:f4:1b:7e:a7:d0:fa:f3:ce:1f:4e:49:7e:
bb:c2:80:e9:22:0e:ab:a8:91:1e:18:94:78:6d:79:6e:20:bd:
95:a8:ca:fd:5c:38:79:e4:62:27:b5:a0:d5:39:c4:c5:63:5a:
dc:5a:4e:b0:eb:68:a3:f8:e5:32:fd:20:6b:b1:d0:30:ef:2f:
dd:b0:fd:56:29:b6:1c:44:bc:65:ef:dd:ee:b3:87:61:df:89:
3f:85:dd:f3:9f:af:35:f8:36:b5:73:ee:d8:84:24:96:1b:44:
3a:f9:38:73:25:97:2e:91:a8:16:ae:34:c3:83:87:b3:97:f4:
22:1e:14:19:8b:dd:45:21:a9:c8:8b:6b:ac:3e:aa:89:42:76:
f1:71:a2:5b:df:14:96:6a:11:01:c3:e8:ff:20:5b:16:8a:b6:
a1:94:82:1e:9c:34:95:96:e4:04:ee:84:6b:86:ea:94:9f:fb:
c9:b7:f9:d4:70:64:c4:a6:9b:af:51:76:99:a6:14:07:11:44:
1e:d3:1d:1c:e5:9e:eb:d4:00:6a:d9:00:d0:dd:af:5f:85:d5:
d5:7e:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:14 2025 by rpki-client