Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: 2hkNlregGi+DZJPT6oFta4mzvtc+YPvG9oaMJQC1we0=
Subject key identifier: 93:85:CA:FA:DB:D5:86:1D:0F:68:81:31:1C:40:6E:E9:89:C6:B1:2E
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0199FB0F16B63E95F2CFB52D41BB94B0B5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 1253
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: oS-zf8LykP6dfOwgBh2b6irIbAA.roa (hash: es5RiKPg30TZ9v6YIMiSfrSdGJ7vWC4nZhRx1zHM27Q=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: ayjwP1KHaaslCHzNTa421LDUS4k27TR2wvSeMw8KzWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:16:b6:3e:95:f2:cf:b5:2d:41:bb:94:b0:b5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=9385cafadbd5861d0f6881311c406ee989c6b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:b1:fd:bb:f4:c1:00:8c:05:68:b7:c7:2c:
e0:c2:ab:59:86:4c:ff:3b:7a:b2:4d:d2:75:d7:55:
c3:92:f0:31:44:06:8a:71:47:f2:9a:22:8c:0f:7f:
f8:e0:44:62:d1:fa:d0:80:80:0a:ba:ee:b1:b9:d8:
50:e5:b7:01:9a:99:0b:e4:90:3b:cf:7d:34:55:40:
7a:3b:08:d1:40:7e:e2:8f:bb:ad:3c:50:8b:c6:76:
5d:08:5b:40:00:34:aa:a9:dc:03:d8:89:56:e2:89:
92:d0:e3:91:25:29:dc:98:14:79:ac:f4:0d:46:75:
e3:88:47:2a:b7:85:da:7a:26:bd:e3:d1:ad:34:8e:
51:dc:d1:7c:aa:f8:91:2b:fe:b9:4b:20:92:b4:0a:
53:f7:6c:01:e1:96:45:33:94:b3:97:a1:9c:d7:9d:
f8:d7:a8:94:1d:c5:e2:b2:b9:bc:fe:5e:40:54:31:
c3:e0:25:c2:b8:88:c2:bc:52:44:f1:fe:39:44:93:
0b:99:b3:64:bf:a6:c0:f9:3f:91:5b:a9:1c:21:79:
61:a0:f7:52:5f:5e:22:2a:ac:ed:55:a0:b5:bd:4c:
6b:02:66:eb:9a:a0:40:cf:e5:b9:5b:c8:a1:1c:92:
6f:55:5c:3a:ef:8c:ce:5e:28:f5:b7:a8:36:5f:44:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:CA:FA:DB:D5:86:1D:0F:68:81:31:1C:40:6E:E9:89:C6:B1:2E
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:04:c1:ad:40:59:22:02:b3:e8:79:a8:38:07:2c:3a:ae:58:
fc:45:07:a2:c0:d3:ba:6f:a4:39:69:a9:37:72:ca:04:23:e1:
f8:07:b5:d8:e4:fd:b0:9b:ca:ec:20:8e:23:ca:60:4c:d1:19:
7e:eb:69:72:21:ee:db:97:bc:36:07:49:40:12:39:66:3a:2e:
6e:95:a8:bb:ea:e4:d9:fd:06:11:8d:1a:52:13:9a:d8:33:14:
6d:7e:cf:64:16:f5:19:37:40:f9:dc:d9:2b:5e:d1:8a:3c:1a:
59:a1:22:c3:26:0b:57:8d:ba:f4:9b:00:5b:f2:53:29:8c:05:
19:2f:b9:8f:f3:94:fa:a8:e9:29:d2:44:25:04:63:23:bd:4f:
9c:28:5c:70:2d:e7:1d:49:9e:5c:3e:f1:0b:ff:8c:eb:41:fa:
2b:aa:e1:24:67:5c:fc:b9:52:cb:f5:32:9d:d3:58:5e:f6:4e:
fc:48:40:96:24:5a:44:3e:0a:7e:b5:77:c3:be:2a:cb:94:d6:
81:03:ed:bc:a1:c0:77:fb:34:78:7f:80:46:11:5a:9e:d3:8d:
73:ee:04:f6:41:89:09:5c:c5:82:b2:1c:23:99:25:f4:9e:41:
37:c8:28:e8:41:be:bf:22:22:74:95:b1:3c:c1:85:b9:f0:96:
71:57:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:08 2025 by rpki-client