Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: 7FGDEkjC3QuEW1DWLDAO1LPT6NMlNEBiaS2+6D88mV4=
Subject key identifier: 5C:0B:FF:FB:7C:1B:6D:1E:D5:4F:E0:DC:2C:CA:14:23:3C:E3:89:AA
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019A03356C8F969B0119EDC69D3948D2619F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 16D3
Signing time: Mon 20 Oct 2025 20:00:24 +0000
Manifest this update: Mon 20 Oct 2025 20:00:24 +0000
Manifest next update: Tue 21 Oct 2025 20:00:24 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: IzJW9/zZE86XPLsyf8VlAyBe52ScNox7NWhB8b4WG5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:6c:8f:96:9b:01:19:ed:c6:9d:39:48:d2:61:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Oct 20 20:00:24 2025 GMT
Not After : Oct 21 20:00:24 2025 GMT
Subject: CN=5c0bfffb7c1b6d1ed54fe0dc2cca14233ce389aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:59:62:0b:1a:b6:9a:5d:4d:0b:30:ef:15:
4c:2a:4a:ca:0d:6a:11:4d:62:f9:1f:22:bd:22:0c:
f2:d8:ab:55:3d:e8:72:8a:b5:2a:59:4f:06:11:9b:
a0:d8:1f:88:dd:3d:35:70:0e:10:a2:bb:c8:14:8a:
64:6e:29:bb:cc:ab:d6:7c:66:62:c3:04:34:c4:97:
cb:d9:42:1d:fa:29:c5:d0:05:01:09:8e:96:2e:92:
1b:54:a0:23:a0:39:86:48:72:25:87:d8:82:4e:6b:
83:16:c6:a0:de:34:2b:4a:3f:63:cc:4b:3d:c7:88:
3f:e1:29:08:5f:bf:54:c7:43:1d:2d:bd:7c:10:55:
14:1e:b5:0e:c7:77:35:93:82:34:25:84:98:4d:08:
c0:1e:67:6e:6a:2a:51:09:31:d3:95:f8:1d:6c:14:
73:7e:97:b9:de:00:8e:5f:db:f4:46:a2:8f:5d:af:
da:70:6f:17:31:cc:04:f6:7d:ed:3e:f3:d1:05:7b:
db:62:c4:f0:b3:bd:47:e0:93:f2:17:c3:50:7c:dd:
0f:be:b8:ba:77:88:d8:23:07:50:9c:6d:b6:9d:89:
03:af:52:6c:6c:a3:98:02:71:0e:65:95:ba:8b:a4:
80:1d:22:59:2c:32:c4:b4:1c:8b:39:25:9e:0c:0d:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:FF:FB:7C:1B:6D:1E:D5:4F:E0:DC:2C:CA:14:23:3C:E3:89:AA
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:41:e1:c4:a7:a5:2f:01:37:10:6a:eb:31:d8:a1:32:a2:56:
1e:63:3e:13:04:42:b2:a4:b0:a2:11:56:77:7d:20:84:85:aa:
2e:5d:bd:0d:cc:46:07:90:16:4d:a2:02:3c:a5:e2:bf:ca:da:
1f:95:97:a1:5f:c1:ed:e0:21:87:35:8a:da:8f:d8:ad:16:a2:
d2:a6:4d:d8:7e:6b:77:fd:00:1e:08:2d:06:f4:a1:ab:f3:85:
eb:4a:a8:99:79:a7:2e:83:44:9e:b1:73:3b:57:c5:1b:af:ea:
d6:be:30:e0:85:88:b1:84:7e:9f:64:ee:65:f2:42:27:54:ac:
e8:1c:a2:47:79:76:82:23:9e:74:1a:23:7d:0f:30:cc:40:8d:
ee:62:67:2e:7b:f4:87:81:48:5a:e7:00:be:8b:9d:7a:3d:e2:
10:e4:67:6f:55:98:4d:37:5d:87:f9:c8:8d:c0:b8:eb:50:8a:
71:60:09:27:f0:9e:ea:d4:c4:fc:f5:b7:a1:e7:d5:90:98:30:
4f:61:53:2c:10:d7:41:83:8c:49:ea:ba:c3:d4:0a:f5:b6:97:
eb:0b:7f:8f:15:f2:4d:95:f8:55:29:aa:65:db:05:a8:da:16:
72:ee:c8:e9:fd:44:af:4a:30:fa:63:3c:71:72:6d:17:06:8b:
e9:74:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:24 2025 by rpki-client