Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: CXK2ZP8v80gAEcmCwdcjKtekcqV5rNwGHK+UXOvc2XI=
Subject key identifier: E3:29:B0:FF:E6:C8:41:3F:C7:85:56:7B:94:50:C5:D7:79:68:AC:E6
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 0198D54DF039374D8785D1EF886F7A7EA324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 069F
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: 0oeTl0kuS7iC9V1SbxWyNer1armCIYV5+T2khh6oe44=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f0:39:37:4d:87:85:d1:ef:88:6f:7a:7e:a3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=e329b0ffe6c8413fc785567b9450c5d77968ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:49:bb:eb:80:b4:e3:ae:20:29:52:28:a9:
d6:54:1c:48:aa:09:c0:53:1d:88:da:49:2f:5f:a0:
5d:50:52:05:50:ed:3c:f4:d3:b2:07:d4:1c:49:97:
b5:bd:13:19:fa:ba:e7:e2:97:42:d3:2a:7e:da:a8:
52:0d:35:2c:e9:ff:e6:44:f8:db:b1:1b:94:ef:46:
61:9f:77:6d:a2:4d:23:b5:b5:da:89:d4:cc:66:cf:
d0:74:8f:e2:96:bd:d1:f9:e2:54:54:5f:11:b3:f1:
cb:05:13:fe:8d:c5:cf:52:57:d8:86:84:82:f4:5e:
7e:b6:22:5b:82:02:c2:49:de:1b:2a:a8:e6:98:01:
aa:a8:39:ba:9e:7d:e2:53:fb:66:f8:11:8d:d6:c4:
e4:76:e3:52:b6:a6:62:b6:ff:b5:5f:bf:82:ca:a3:
de:8f:57:e6:4b:a9:8b:9d:bc:2d:ed:13:ea:7a:a6:
9b:15:ab:db:3b:9f:d7:e6:6d:bb:e1:a6:9e:67:40:
d5:84:38:1c:b5:c8:aa:c5:fe:f4:04:0d:15:f0:50:
63:ce:55:21:d9:e2:cd:0b:03:31:35:b8:8c:8b:7e:
03:f0:ec:91:e7:6f:ec:19:4c:8d:8c:70:af:9f:4b:
73:68:b9:1d:34:c1:43:32:69:c9:be:5f:a4:20:c0:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:B0:FF:E6:C8:41:3F:C7:85:56:7B:94:50:C5:D7:79:68:AC:E6
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c9:a3:e0:20:5b:e2:be:7c:41:3f:dd:07:c5:fe:be:ff:37:
92:06:d0:98:8a:f0:6c:a3:b8:92:79:90:ed:43:89:89:60:58:
c1:b9:5e:c3:61:b0:7e:66:b3:52:96:38:e5:2c:bc:4b:64:9e:
25:49:eb:cb:1f:cb:fb:ec:63:e4:8b:18:66:e1:f3:62:9d:63:
1f:52:6c:23:48:0c:2c:ce:60:4f:d2:c4:78:0c:56:de:68:7b:
53:1e:1c:93:60:90:cc:00:2b:e1:86:87:c3:22:0c:9d:64:0f:
7d:bf:92:14:80:f0:ee:16:3b:99:d8:53:b4:af:61:f8:92:0b:
96:67:95:e3:5f:34:26:f0:12:22:3e:65:58:48:e1:2f:4a:4b:
96:48:76:5d:c0:27:0f:4a:1d:f6:6b:ff:16:04:16:00:d5:10:
8f:7b:ad:c1:ff:7e:f3:66:0c:55:65:72:16:e3:1e:05:fb:04:
84:59:e5:a1:07:6c:0b:97:30:95:1e:80:45:4d:c2:d2:66:e0:
16:3e:07:0d:37:a0:8d:78:92:88:eb:6f:e6:63:92:00:ab:23:
97:aa:9c:43:9a:84:d9:45:1b:19:be:e5:ff:4f:0c:31:69:f3:
e1:ef:c4:32:f5:6d:ee:7b:bf:00:b7:8b:9d:79:c9:70:e7:98:
a0:77:c3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfA5N02HhdHviG96fqMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmFjZWJjNzYxY2FmMzc2NTZkYmQ3MTUzYzAwNDk5ZmI3
Mzc3NzcwHhcNMjUwODIzMDUwMTUxWhcNMjUwODI0MDUwMTUxWjAzMTEwLwYDVQQD
EyhlMzI5YjBmZmU2Yzg0MTNmYzc4NTU2N2I5NDUwYzVkNzc5NjhhY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/RJu+uAtOOuIClSKKnWVBxIqgnA
Ux2I2kkvX6BdUFIFUO089NOyB9QcSZe1vRMZ+rrn4pdC0yp+2qhSDTUs6f/mRPjb
sRuU70Zhn3dtok0jtbXaidTMZs/QdI/ilr3R+eJUVF8Rs/HLBRP+jcXPUlfYhoSC
9F5+tiJbggLCSd4bKqjmmAGqqDm6nn3iU/tm+BGN1sTkduNStqZitv+1X7+CyqPe
j1fmS6mLnbwt7RPqeqabFavbO5/X5m274aaeZ0DVhDgctciqxf70BA0V8FBjzlUh
2eLNCwMxNbiMi34D8OyR52/sGUyNjHCvn0tzaLkdNMFDMmnJvl+kIMA21wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMpsP/myEE/x4VWe5RQxdd5aKzmMB8GA1UdIwQY
MBaAFK8qzrx2HK83ZW29cVPABJn7c3d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYt
M2NlZjhhOGQ2ZWExLzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYtM2NlZjhhOGQ2ZWEx
LzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcmj4CBb
4r58QT/dB8X+vv83kgbQmIrwbKO4knmQ7UOJiWBYwblew2GwfmazUpY45Sy8S2Se
JUnryx/L++xj5IsYZuHzYp1jH1JsI0gMLM5gT9LEeAxW3mh7Ux4ck2CQzAAr4YaH
wyIMnWQPfb+SFIDw7hY7mdhTtK9h+JILlmeV4180JvASIj5lWEjhL0pLlkh2XcAn
D0od9mv/FgQWANUQj3utwf9+82YMVWVyFuMeBfsEhFnloQdsC5cwlR6ARU3C0mbg
Fj4HDTegjXiSiOtv5mOSAKsjl6qcQ5qE2UUbGb7l/08MMWnz4e/EMvVt7nu/ALeL
nXnJcOeYoHfDCQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:44 2025 by rpki-client