Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: vpKh2dFbJww63y/2Iq1uOFii4jv+A/+anNeW21LISEk=
Subject key identifier: 3C:C5:94:29:B7:8B:05:FB:1F:AC:BF:C3:C4:BD:61:C1:22:21:D3:34
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 0198D5161406EB8BFE92A002690E1C532396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 15AF
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: tP3cODNTasH9FHVr0c8OpAEFNKxUnSbzpePPyT1LhhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:14:06:eb:8b:fe:92:a0:02:69:0e:1c:53:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=3cc59429b78b05fb1facbfc3c4bd61c12221d334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:93:01:f9:67:b1:2f:69:34:ce:ec:49:e7:
04:d9:5b:e8:50:77:70:06:a5:e0:48:8e:8f:10:5b:
c6:d9:71:48:2d:44:47:bb:96:3f:d5:15:3a:f6:69:
03:1a:db:c0:82:b9:ab:41:e3:c4:28:f7:90:e0:1e:
3c:3e:3f:00:1c:ba:b5:fe:ad:3b:58:ce:87:c4:0d:
b1:60:6e:15:0f:7c:5c:1f:0c:79:8c:4f:9e:a4:7e:
d3:d3:da:99:a9:21:03:11:f9:f5:dd:fd:cb:da:9e:
77:6a:25:0e:30:ab:d1:cf:78:10:84:ef:21:e8:cf:
dc:7e:47:58:53:75:28:ad:70:63:09:ba:00:f3:35:
3e:e6:a7:bc:e9:43:b7:45:5e:e0:4a:cd:28:90:9c:
a8:df:7e:51:e6:5a:84:dd:f2:67:3b:b4:78:31:fe:
d8:97:40:82:08:04:47:52:06:d4:39:20:f9:d0:14:
bb:c0:53:61:0e:6d:a0:8e:d8:fa:4f:29:cb:1c:e0:
d9:5d:6f:77:b3:64:d4:ef:41:7e:cb:54:d8:28:f4:
b5:6e:18:53:44:c5:9c:a2:87:dd:6a:14:77:23:49:
64:7d:97:da:59:b7:d1:1c:01:51:eb:b8:49:dd:97:
60:ed:c1:ca:a9:47:aa:ad:01:06:bd:b4:83:df:9c:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:94:29:B7:8B:05:FB:1F:AC:BF:C3:C4:BD:61:C1:22:21:D3:34
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:29:af:25:0b:ef:80:e7:5c:30:77:07:aa:3a:74:68:ac:2c:
99:8d:d1:2a:51:f4:04:85:dc:02:76:e1:b2:3f:14:c0:e1:e3:
90:38:b1:e0:6c:73:11:69:9a:32:47:d3:bb:9b:7f:c6:34:53:
54:19:f8:90:ff:fd:d3:6e:c8:e0:b7:9f:33:8b:de:6c:e6:34:
9b:9e:0f:1b:79:af:95:a1:f4:e5:5f:27:37:f4:dc:88:2e:7f:
ff:e7:74:ac:5b:b2:ca:58:3f:ee:3b:13:17:9f:c2:dc:e4:c4:
29:1d:7b:c5:7d:56:5e:3f:d9:71:43:ba:68:31:16:79:e9:1d:
6b:87:0e:67:71:7a:12:1e:4d:9a:e4:97:56:b1:3e:c9:1a:49:
84:bc:4a:83:a7:74:66:f0:9d:6d:aa:f4:40:af:5e:78:22:4a:
50:03:5f:b2:70:0c:be:39:8d:94:68:94:e1:b6:55:f8:25:48:
a2:16:97:28:86:9f:ec:f2:78:0a:d7:c0:37:58:ec:87:e4:22:
9a:42:1c:a2:0a:49:86:b0:5c:ef:f5:82:49:74:30:df:ef:a5:
36:97:88:eb:b9:54:0a:1c:20:87:08:a5:3b:2e:b5:58:1d:33:
0c:c8:c1:a0:75:fe:ba:7b:f1:60:fa:bb:83:66:18:94:3f:66:
8a:40:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:33 2025 by rpki-client