Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: cN0DJ2VLYS3PCj7l6pgP0FveOsWPQK82zO2vocBWBT4=
Subject key identifier: 3C:47:70:FF:8F:C4:AB:7C:42:7F:4E:24:DE:D9:07:05:C9:AB:D4:DB
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 01969F3F4CEA1CC7501ABD46301D5EA3C9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 148A
Signing time: Mon 05 May 2025 07:00:47 +0000
Manifest this update: Mon 05 May 2025 07:00:47 +0000
Manifest next update: Tue 06 May 2025 07:00:47 +0000
Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: +KtJ0I7CsjFVYBkuiTp1OS3ZzdT2fX1o0qiYCgDa9j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:4c:ea:1c:c7:50:1a:bd:46:30:1d:5e:a3:c9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: May 5 07:00:47 2025 GMT
Not After : May 6 07:00:47 2025 GMT
Subject: CN=3c4770ff8fc4ab7c427f4e24ded90705c9abd4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:8b:f6:48:7a:f1:6e:5d:02:45:92:f1:49:
cc:16:e9:ee:7e:f2:de:5d:c0:17:a4:b9:bd:79:1e:
95:f9:ca:9c:23:c4:56:23:9b:77:b8:75:23:4c:84:
5f:1f:d7:7c:9b:7f:0b:65:bf:c1:9a:36:62:61:7e:
4e:f9:eb:9a:9d:27:7a:e7:f4:e0:cd:19:d5:35:bc:
12:be:47:ed:4a:0a:0a:76:38:f2:5b:ee:9c:ce:61:
65:33:12:d8:fa:43:50:0c:92:8a:b1:52:99:37:71:
33:85:a4:ce:c6:07:30:2b:e5:0c:9b:eb:af:ce:11:
89:8e:da:3b:c7:1e:79:9c:6f:04:d0:82:9d:9b:68:
73:46:59:c2:ad:e0:d4:cf:fe:d4:59:46:f5:70:2e:
bc:93:db:7d:50:ee:07:00:16:95:5e:c9:b5:f3:32:
28:6e:78:3f:3c:16:88:a2:fa:0c:8a:d7:c2:24:27:
1b:83:b0:a2:ed:5d:4b:66:76:13:0d:45:85:03:99:
c5:5f:99:a1:05:b6:7d:04:93:6e:a7:c7:21:0d:0a:
4e:3c:6a:49:67:85:97:79:17:24:08:5f:d2:ec:ad:
62:f4:28:0a:22:6f:50:cc:59:2d:41:90:ff:84:4f:
61:95:e9:66:a4:37:6a:46:cc:f8:14:c5:2f:c4:da:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:70:FF:8F:C4:AB:7C:42:7F:4E:24:DE:D9:07:05:C9:AB:D4:DB
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d2:e3:19:3a:3e:11:9c:aa:73:b1:b8:df:ea:25:00:ae:6f:
f6:3b:28:97:13:65:13:6b:3f:fd:df:d0:66:c1:d5:dd:ea:fd:
00:61:71:93:d6:af:b9:a4:01:48:de:da:55:1f:16:6d:49:20:
f8:8d:33:60:0d:1d:bb:2f:11:36:93:96:6b:25:b6:0a:bd:3f:
24:a4:43:9c:d3:3e:92:e9:9e:4e:46:f8:bb:b3:a0:63:16:cf:
2b:c1:d6:6d:6c:9b:13:00:04:a4:0e:07:01:35:24:53:35:c1:
05:c6:8c:ff:48:4e:fe:e6:6b:72:c7:03:db:80:11:67:f4:b9:
fe:0d:3a:9d:ac:26:9d:36:b2:cd:95:c3:93:49:96:81:03:3a:
cc:d0:42:8c:89:1d:b1:1e:34:16:b3:9c:eb:e5:a1:c4:69:65:
c0:36:c3:e7:3e:8d:5b:d7:d1:30:9e:10:8d:f3:e8:9c:c2:21:
9f:8e:79:1b:b2:b2:49:14:ba:67:64:14:25:80:cf:03:5d:88:
67:df:78:b5:d7:a2:49:d5:45:1f:a2:91:b5:50:dd:b6:32:2d:
99:08:7e:55:cb:e3:20:73:69:6e:4e:d6:78:d6:7f:c7:95:21:
99:ac:0b:0a:87:30:3a:4f:8f:a0:c1:1c:fd:5b:2e:a5:e6:77:
64:0c:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:48:25 2025 by rpki-client