Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: 26k6kFyQ32hJUpPXfhWkhuAdtPS2ZLqN7iCH+0cajcQ=
Subject key identifier: 07:98:25:85:50:1F:D2:57:8C:53:50:7C:8C:17:3D:22:8D:1E:27:6C
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 0197B934035F1EFFDD257ADFD78946F517A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 151C
Signing time: Sun 29 Jun 2025 01:01:23 +0000
Manifest this update: Sun 29 Jun 2025 01:01:23 +0000
Manifest next update: Mon 30 Jun 2025 01:01:23 +0000
Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: 6ZWeN4D2o953Mc6icoN11D/tpj7tWJWWNiuZ5KdyCbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:03:5f:1e:ff:dd:25:7a:df:d7:89:46:f5:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jun 29 01:01:23 2025 GMT
Not After : Jun 30 01:01:23 2025 GMT
Subject: CN=07982585501fd2578c53507c8c173d228d1e276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:91:aa:aa:14:98:64:22:7a:33:bb:89:19:
fb:fa:19:57:1c:09:28:bf:c5:2b:e9:99:18:09:3c:
d3:64:7e:f1:46:eb:6f:fc:5f:c2:0d:52:f1:b4:8d:
36:34:6a:a5:6f:85:21:f2:5f:de:86:19:84:77:7a:
24:0d:ba:23:fa:60:db:7b:89:b5:e7:97:d8:9f:ce:
ef:7a:a6:71:18:06:a2:e7:24:f8:de:cb:cf:4e:03:
b2:9e:b6:57:cf:63:64:b7:41:ad:db:8d:fb:da:73:
bb:dd:05:f1:05:89:b7:f9:80:01:fa:ed:6d:76:0a:
6a:ed:e1:4d:f4:76:7d:fb:2a:9a:6c:55:32:d1:5c:
fa:8b:b6:5c:e7:88:f9:28:a6:45:88:43:cd:1a:8a:
3a:a4:56:33:55:76:cc:53:3c:89:c9:17:49:61:20:
04:76:79:79:87:55:ed:99:ee:04:9c:52:05:f6:8c:
10:9e:6e:e2:d8:df:55:c8:80:9c:c3:b1:61:3e:03:
15:92:f9:1b:9d:da:73:8e:1d:e4:1b:4b:74:8d:3d:
a7:7e:43:fb:4a:30:03:de:52:7b:f6:28:d4:62:a6:
f8:67:1d:b4:50:66:cd:61:65:aa:54:25:93:e4:f7:
3c:78:21:eb:56:ed:2e:bd:39:83:e0:1a:49:8b:65:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:25:85:50:1F:D2:57:8C:53:50:7C:8C:17:3D:22:8D:1E:27:6C
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:9c:6b:be:bd:4b:00:41:ea:80:9c:6b:7d:1b:e1:8c:54:
df:bb:f0:44:3f:7e:17:20:11:0c:8b:fe:eb:0c:05:99:1e:92:
ba:aa:a0:6c:5a:fb:63:df:7e:28:02:d3:dd:ba:27:9f:fc:4f:
86:68:81:1c:79:2e:8c:21:5f:65:21:e6:b2:b4:f9:3f:aa:62:
a6:39:0a:1d:bb:c1:34:03:c0:ff:26:10:7a:94:ec:bf:4b:6f:
d4:26:db:ab:7c:90:83:22:bf:23:5e:03:57:75:11:3c:9a:cf:
65:4a:2e:3b:5d:c8:cb:e2:7a:7b:19:4a:96:dd:7b:43:84:15:
7e:c9:1c:19:9b:da:76:a6:41:b8:7d:9f:e3:54:0a:5f:3c:79:
27:e9:1a:34:6a:d2:06:0c:d3:20:b6:e7:ba:69:d0:da:22:f7:
68:8d:33:c7:a8:53:38:0e:3e:46:d7:f4:51:91:0a:18:48:28:
c5:68:d7:7b:40:ba:e2:5c:b3:c4:31:69:7e:0d:32:a2:cd:bc:
64:7f:69:93:9a:d3:9b:2b:a9:69:c2:ec:9b:b0:da:a6:48:0e:
ce:1c:76:0e:f2:a0:53:e2:40:07:cc:3d:ac:6e:a6:ed:9f:92:
89:4a:72:e1:2a:73:31:8a:aa:62:ba:8b:73:f1:8e:d8:6f:d8:
84:75:1d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5NANfHv/dJXrf14lG9RelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjM1ODViZmNkZDA2MWNhOTQ2ZTJkOWVhOGI5N2U0NWI5
YzMxZDYwHhcNMjUwNjI5MDEwMTIzWhcNMjUwNjMwMDEwMTIzWjAzMTEwLwYDVQQD
EygwNzk4MjU4NTUwMWZkMjU3OGM1MzUwN2M4YzE3M2QyMjhkMWUyNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV6RqqoUmGQiejO7iRn7+hlXHAko
v8Ur6ZkYCTzTZH7xRutv/F/CDVLxtI02NGqlb4Uh8l/ehhmEd3okDboj+mDbe4m1
55fYn87veqZxGAai5yT43svPTgOynrZXz2Nkt0Gt24372nO73QXxBYm3+YAB+u1t
dgpq7eFN9HZ9+yqabFUy0Vz6i7Zc54j5KKZFiEPNGoo6pFYzVXbMUzyJyRdJYSAE
dnl5h1Xtme4EnFIF9owQnm7i2N9VyICcw7FhPgMVkvkbndpzjh3kG0t0jT2nfkP7
SjAD3lJ79ijUYqb4Zx20UGbNYWWqVCWT5Pc8eCHrVu0uvTmD4BpJi2WRZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeYJYVQH9JXjFNQfIwXPSKNHidsMB8GA1UdIwQY
MBaAFK8jWFv83QYcqUbi2eqLl+RbnDHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMt
NzkzNDRkYTNhMmU2LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMtNzkzNDRkYTNhMmU2
LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEOca769
SwBB6oCca30b4YxU37vwRD9+FyARDIv+6wwFmR6SuqqgbFr7Y99+KALT3bonn/xP
hmiBHHkujCFfZSHmsrT5P6pipjkKHbvBNAPA/yYQepTsv0tv1Cbbq3yQgyK/I14D
V3URPJrPZUouO13Iy+J6exlKlt17Q4QVfskcGZvadqZBuH2f41QKXzx5J+kaNGrS
BgzTILbnumnQ2iL3aI0zx6hTOA4+Rtf0UZEKGEgoxWjXe0C64lyzxDFpfg0yos28
ZH9pk5rTmyupacLsm7DapkgOzhx2DvKgU+JAB8w9rG6m7Z+SiUpy4SpzMYqqYrqL
c/GO2G/YhHUdBA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:03:46 2025 by rpki-client