Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: A3ns4ybX6efwRVHhOkVLySbctOCRNGObsd6IhAevXd0=
Subject key identifier: 8C:DB:A0:D9:56:CA:9D:60:35:41:0D:01:C1:2F:94:61:8E:57:E5:30
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 0199FCC68B3C04F3D078F5899F600FA0217F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 0738
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: Mp1mxQLwt9zPvBxm8d8OK02OJyhBayUMU8F+XFaYu9E=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8b:3c:04:f3:d0:78:f5:89:9f:60:0f:a0:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=8cdba0d956ca9d6035410d01c12f94618e57e530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:ab:0a:c1:7a:b0:ae:2f:ae:b3:3a:20:6c:
b4:54:2d:8e:33:57:f0:a3:e7:10:08:a4:b7:b1:18:
a0:2d:6c:9e:0d:aa:32:16:39:2f:01:86:b9:1f:77:
e5:e4:cd:93:12:c0:20:7f:7f:5f:98:d1:b1:fb:3e:
e7:f0:31:45:2a:c3:0e:dd:10:9d:5c:db:9f:af:b2:
1f:b5:41:30:33:01:bf:4b:43:d8:53:6e:0c:89:7f:
12:79:53:31:3e:2b:25:2e:28:e3:f6:25:c9:00:a6:
36:75:60:7e:57:1a:93:06:0a:c5:c5:b3:5c:de:43:
b2:50:13:39:40:a3:ea:37:9c:83:88:71:f3:39:bc:
50:8d:4a:72:7b:de:2e:e8:0d:7e:53:de:c6:a6:70:
46:74:67:df:97:f6:fe:f7:a8:16:8f:2a:ba:14:2a:
ea:f3:30:27:33:90:5e:76:a8:9d:01:5a:21:65:e4:
58:ab:d6:0a:37:42:4a:4f:36:44:83:8c:ed:89:75:
21:fe:2b:d6:d2:2e:47:75:8c:14:0f:3c:84:33:90:
07:0b:01:ad:0d:b5:6e:7c:38:a0:76:a0:2a:aa:6d:
c3:ac:ee:69:a4:be:81:d2:e5:d7:c3:ae:53:2d:4d:
ab:8d:5d:dd:8e:2a:3c:dd:8e:de:00:c6:ea:ca:f7:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:A0:D9:56:CA:9D:60:35:41:0D:01:C1:2F:94:61:8E:57:E5:30
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:78:d6:46:c8:95:2f:74:71:bf:40:d1:cc:74:b6:8d:08:d7:
4c:a8:b3:a6:5e:f5:26:99:6f:67:ad:b8:56:be:9a:39:26:2a:
23:40:62:d8:21:fc:37:2f:69:cb:e1:91:c6:ce:2b:9f:c8:59:
74:20:43:7d:a7:bd:83:1c:08:9c:73:fe:74:e6:c1:0a:55:cd:
d5:80:c1:97:97:ba:8b:85:9a:3a:0d:b5:46:34:7d:88:b8:95:
b7:4c:00:c0:f6:c1:e2:db:94:1d:7e:e2:f5:ee:c9:89:2e:89:
ec:e1:c7:18:67:8a:ca:35:54:ed:74:b4:a3:30:65:51:aa:8e:
f2:2f:55:50:5a:f8:b4:87:cb:0f:5a:d4:17:9e:aa:1a:b6:e1:
ce:d9:df:a0:5e:b2:53:b4:64:24:89:14:d9:ba:9f:a4:cb:c7:
9f:e3:27:05:da:3b:a9:fb:c4:dc:b1:01:35:b3:a3:9b:c1:38:
75:2b:ce:54:ec:f1:4b:f6:2b:f5:12:5d:71:a7:96:c2:40:47:
0f:34:82:c8:6c:e2:c5:b1:68:a6:b8:9e:0a:7b:02:46:9c:02:
93:b1:77:81:bb:7c:3f:8f:cc:4c:e9:c9:15:58:cf:e3:a4:29:
ec:38:3c:a6:31:e1:4d:18:24:7b:20:69:98:e4:67:f9:31:63:
03:99:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:56 2025 by rpki-client