Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json)
Hash identifier: kXBUADDzTeRJohyldJRDWkDaI6JMQdX3LxL6C9yOdNg=
Subject key identifier: 2C:F3:54:BC:BA:8D:27:90:C5:A4:CE:8A:66:8E:3A:D8:AA:F3:83:67
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 0199FE7D9DEF488C4ABC18A5F02D6EBBBD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
Manifest number: 1649
Signing time: Sun 19 Oct 2025 22:01:09 +0000
Manifest this update: Sun 19 Oct 2025 22:01:09 +0000
Manifest next update: Mon 20 Oct 2025 22:01:09 +0000
Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=)
2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: Sv/+iImmIi6HRRlm8BMgcZAlikmLSSpAprAsLafM2ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:9d:ef:48:8c:4a:bc:18:a5:f0:2d:6e:bb:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Oct 19 22:01:09 2025 GMT
Not After : Oct 20 22:01:09 2025 GMT
Subject: CN=2cf354bcba8d2790c5a4ce8a668e3ad8aaf38367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:ad:46:6d:7f:65:ee:51:ac:7b:84:1d:04:
d4:fb:21:37:11:c6:ef:18:b7:06:23:cf:14:ee:ca:
8a:b7:b5:56:db:61:4b:b1:3d:44:11:82:58:40:20:
f4:e7:81:7d:88:54:66:94:f8:6c:4d:aa:e3:cf:82:
5a:7a:c1:08:45:26:c5:60:1d:f2:b8:a4:47:c1:92:
76:79:49:4d:54:e4:26:cf:b3:5d:cb:b3:8b:39:fb:
45:0f:04:44:8c:48:34:e6:df:4f:63:2d:ee:c0:8c:
01:e7:5d:3e:25:18:bb:ec:7c:80:a4:d2:4f:69:04:
b2:e7:50:e1:75:90:25:48:e4:3f:0c:80:34:1d:88:
83:05:5e:9d:b4:8a:8b:01:fb:93:4f:30:21:a4:1e:
d8:77:5e:93:6f:79:60:54:56:67:ed:12:ba:6e:dd:
45:68:4c:a6:23:3f:0e:40:2e:25:aa:c8:4c:b7:43:
43:a7:84:e2:7b:66:57:94:24:47:79:18:f2:a4:ab:
00:f0:71:9f:c2:9d:5e:58:f6:74:eb:80:e7:d0:59:
60:52:36:f5:47:b7:18:91:fb:f1:ad:6b:7f:16:4b:
af:a9:82:67:9e:13:34:7d:97:ee:2c:e1:b9:17:f1:
21:97:e1:1e:3f:fa:ab:b8:88:40:e3:b8:2d:00:23:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:54:BC:BA:8D:27:90:C5:A4:CE:8A:66:8E:3A:D8:AA:F3:83:67
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9c:6d:d4:39:4e:fb:eb:c6:c7:9f:91:c9:ee:b9:73:fc:53:
b9:49:f6:72:f4:8c:10:5c:22:ec:67:9f:cf:c2:9a:0d:1f:64:
35:ca:17:56:2f:90:20:d8:34:34:8a:b0:8e:00:6d:bb:f3:f3:
f3:e5:d7:35:d6:ba:2d:91:c6:3a:2a:0b:37:fe:85:f9:ac:f4:
a7:e9:13:95:a3:57:a6:3a:5e:24:6d:d7:07:b0:1b:fe:27:73:
94:9b:12:9c:4b:8a:5e:96:43:f1:98:3a:fc:62:77:4a:af:82:
4c:46:50:6e:88:d4:be:a5:63:1d:ff:35:d4:44:2a:0e:e8:f8:
63:96:93:21:63:ea:10:07:82:41:6a:76:67:35:3a:6a:1b:e1:
e8:2f:0e:c3:77:7d:25:0d:25:8a:08:99:f7:9e:b4:49:f3:48:
70:c3:4d:9c:9a:cb:d3:11:7b:70:03:4e:81:d1:76:f7:41:43:
ac:f5:62:3a:fa:4f:1c:c3:d5:e6:d0:c2:38:ce:05:1b:93:1b:
c4:98:4f:c2:29:b5:67:1e:a0:32:93:91:ae:94:82:a0:4f:36:
f3:a3:dd:ad:0b:fc:fa:4b:7d:4e:ce:c6:cb:65:68:9b:18:0b:
6a:03:c1:71:ae:71:c9:49:28:15:78:21:d9:60:63:ff:ea:f6:
ab:cd:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:16 2025 by rpki-client