Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: CrXvLfsaSThjOiJXwUGgfIuyMapt8I8uJXbP1vc8s6Q=
Subject key identifier: 49:22:02:90:56:A9:4F:CB:37:CC:63:3B:5B:B4:36:11:D8:ED:C2:07
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0198D5835E8B5F2E31DCD05852BE5E8D136A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 11BB
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: oS-zf8LykP6dfOwgBh2b6irIbAA.roa (hash: es5RiKPg30TZ9v6YIMiSfrSdGJ7vWC4nZhRx1zHM27Q=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: 5gWvrmnAKbKFpFvFSSrWNjt/Qjh+miiCkFhhAmBXHIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5e:8b:5f:2e:31:dc:d0:58:52:be:5e:8d:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=4922029056a94fcb37cc633b5bb43611d8edc207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:b0:5d:26:7a:65:38:94:2e:e8:fa:4c:0e:
1c:ae:be:fc:c9:c4:68:e9:24:46:46:ff:73:e9:04:
15:a9:a3:5b:13:d7:42:1d:ae:f3:44:db:dc:1f:6c:
0d:7e:9d:a3:9f:76:f9:32:71:20:93:8d:e7:71:d9:
47:ec:fd:f4:f4:0d:45:c8:1a:44:0a:03:cf:4d:50:
3f:74:68:f1:50:b0:35:b0:9f:f6:b8:4e:92:cf:c3:
b0:2a:b2:52:08:21:70:93:36:02:29:bb:57:8c:11:
43:f2:5f:96:3d:0c:36:ee:c5:1f:56:8b:a2:36:95:
12:97:94:48:93:86:8a:cc:bc:26:8b:00:4d:1e:6b:
8e:c5:43:a2:de:3d:79:42:c1:31:34:d1:6c:8a:ea:
6f:0c:aa:97:1c:c1:1c:01:e4:41:10:be:dd:1f:24:
57:b9:65:9e:87:7f:e2:c5:93:c2:fc:b0:e0:fb:1b:
b5:52:d3:4c:cd:10:ed:aa:6c:ec:0d:ba:b1:b1:e2:
51:23:0e:6d:07:76:18:51:b0:77:b9:97:7d:89:16:
f7:11:93:13:d7:bc:e7:ce:d2:2a:59:66:2d:49:75:
34:cc:41:f3:3f:1f:fc:45:c3:31:1b:3c:d9:cf:07:
ec:c8:69:35:c8:45:43:b1:a2:0f:41:83:65:82:3e:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:02:90:56:A9:4F:CB:37:CC:63:3B:5B:B4:36:11:D8:ED:C2:07
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:fd:6c:cd:4d:c9:0b:ab:2a:9e:36:d9:eb:3a:c9:74:cf:
0b:81:3e:af:95:43:d3:d0:7b:18:0a:b6:a7:eb:8a:c3:d5:61:
a9:56:02:0c:14:8c:88:04:e3:96:b1:44:09:bd:da:37:88:6a:
f2:57:45:fa:58:ff:ee:8f:9e:4b:86:ee:4f:8c:31:ff:fb:d2:
a4:da:7d:10:49:41:0f:f4:90:61:36:72:ea:36:f1:ea:8c:76:
8c:14:0d:e1:f3:7b:68:63:e5:dd:ee:23:c2:e8:39:d3:e0:42:
fa:fa:88:8e:a1:c9:15:f2:2a:d7:28:58:e7:e2:e2:03:be:f1:
1a:00:41:97:71:ca:3b:56:2a:c5:19:30:17:b9:43:47:13:46:
43:2a:dc:d9:2d:e7:12:ae:9a:01:31:4d:d4:46:10:ea:e6:83:
c9:6a:82:48:df:f0:f1:9e:ff:14:01:67:5a:13:73:1d:a9:07:
50:9e:47:7c:08:be:85:cb:df:62:d9:9d:52:59:f1:94:eb:9c:
65:2d:86:7b:27:9a:cb:25:9c:c8:d2:df:81:64:b6:c4:de:06:
df:16:74:3b:5a:0f:4c:78:81:27:aa:e1:55:f3:93:a6:43:7a:
16:c2:e8:6b:4d:c5:52:84:5d:bb:6c:7d:a5:9e:82:f0:35:d7:
9a:01:a4:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg16LXy4x3NBYUr5ejRNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmI2OGYwYzgzYWRkOWEzYTNiODZhYjI0ZmI5MTBhOTYw
MjYyYzYwHhcNMjUwODIzMDYwMDEyWhcNMjUwODI0MDYwMDEyWjAzMTEwLwYDVQQD
Eyg0OTIyMDI5MDU2YTk0ZmNiMzdjYzYzM2I1YmI0MzYxMWQ4ZWRjMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xWwXSZ6ZTiULuj6TA4crr78ycRo
6SRGRv9z6QQVqaNbE9dCHa7zRNvcH2wNfp2jn3b5MnEgk43ncdlH7P309A1FyBpE
CgPPTVA/dGjxULA1sJ/2uE6Sz8OwKrJSCCFwkzYCKbtXjBFD8l+WPQw27sUfVoui
NpUSl5RIk4aKzLwmiwBNHmuOxUOi3j15QsExNNFsiupvDKqXHMEcAeRBEL7dHyRX
uWWeh3/ixZPC/LDg+xu1UtNMzRDtqmzsDbqxseJRIw5tB3YYUbB3uZd9iRb3EZMT
17znztIqWWYtSXU0zEHzPx/8RcMxGzzZzwfsyGk1yEVDsaIPQYNlgj5z0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkiApBWqU/LN8xjO1u0NhHY7cIHMB8GA1UdIwQY
MBaAFK8raPDIOt2aOjuGqyT7kQqWAmLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWIt
ZWRhMzE2YTJhZmI4LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWItZWRhMzE2YTJhZmI4
LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxn9bM1N
yQurKp422es6yXTPC4E+r5VD09B7GAq2p+uKw9VhqVYCDBSMiATjlrFECb3aN4hq
8ldF+lj/7o+eS4buT4wx//vSpNp9EElBD/SQYTZy6jbx6ox2jBQN4fN7aGPl3e4j
wug50+BC+vqIjqHJFfIq1yhY5+LiA77xGgBBl3HKO1YqxRkwF7lDRxNGQyrc2S3n
Eq6aATFN1EYQ6uaDyWqCSN/w8Z7/FAFnWhNzHakHUJ5HfAi+hcvfYtmdUlnxlOuc
ZS2GeyeayyWcyNLfgWS2xN4G3xZ0O1oPTHiBJ6rhVfOTpkN6FsLoa03FUoRdu2x9
pZ6C8DXXmgGknA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:57 2025 by rpki-client