Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: 3cNVHptcZcDGUBQFtXGkBTN44lkWFZUYRSmcMTTjYkE=
Subject key identifier: AB:9F:E4:A1:23:29:CF:44:1E:6F:35:60:C7:D3:DE:E3:BC:7C:FD:94
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0196C53AEABCDA4A3C51A7C6D80A872629F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 10A7
Signing time: Mon 12 May 2025 16:01:34 +0000
Manifest this update: Mon 12 May 2025 16:01:34 +0000
Manifest next update: Tue 13 May 2025 16:01:34 +0000
Files and hashes: 1: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: q8Z7SRfYTfFocOb4eRprEkI6ivk8sEk6gIC2BbsToAg=)
2: ya12EPtNrcF0udvEcU2cfD6dvXE.roa (hash: JqrMXae8q96ruf/DmoCDw76yVSkMluiHBgpoAg21vqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:ea:bc:da:4a:3c:51:a7:c6:d8:0a:87:26:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: May 12 16:01:34 2025 GMT
Not After : May 13 16:01:34 2025 GMT
Subject: CN=ab9fe4a12329cf441e6f3560c7d3dee3bc7cfd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:c6:0f:eb:fd:63:c5:c5:e3:84:27:82:bd:
19:71:a9:68:15:33:fd:8a:0f:fe:d6:2b:11:2d:26:
e3:40:d7:f5:8d:96:a6:e2:1c:a0:9e:89:39:b4:7f:
9c:f2:b9:40:bc:11:40:d2:67:36:af:b4:61:9e:68:
49:85:45:de:a7:3d:2d:1c:35:c2:07:9a:cf:cb:2d:
06:bc:3b:48:73:23:33:8b:81:e3:01:79:9b:25:ca:
be:c1:00:13:d4:64:1c:31:a5:27:15:ef:78:0c:23:
56:33:a9:c2:53:13:87:ee:66:92:35:f9:75:e0:e3:
6b:83:48:bb:65:a9:22:bb:ed:ac:16:31:35:b4:a1:
c1:ef:81:45:7f:a9:0d:8e:4b:91:28:d2:44:a8:fb:
7d:a6:65:7e:f8:ac:7a:37:a8:33:68:33:ab:ca:8d:
8f:30:0c:bf:9f:5e:54:69:e9:af:7a:f8:2e:f6:de:
fe:8e:8b:91:1b:d4:2f:64:74:ca:80:15:5b:79:8f:
16:85:3a:a2:80:b3:dc:02:37:a7:ad:23:63:c3:2c:
4a:10:a6:de:a6:6a:e7:3a:cd:f5:e2:67:0c:76:fd:
7b:94:21:5f:5c:7a:ae:78:9d:e2:8d:1f:b2:b3:6d:
4c:92:06:8b:f1:e0:4d:a4:4d:15:ae:42:2e:16:e7:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:E4:A1:23:29:CF:44:1E:6F:35:60:C7:D3:DE:E3:BC:7C:FD:94
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:61:a1:9a:32:70:11:a7:07:93:2a:84:a7:52:8f:6f:1d:d6:
47:b5:b0:7c:20:fc:60:92:14:21:2c:fe:4f:f9:fe:c7:74:67:
ec:27:41:26:37:be:f7:d0:97:80:53:8d:f4:82:b5:e1:d6:87:
12:2c:28:ae:39:00:76:1a:a1:23:9a:5a:92:a7:82:85:c6:29:
13:92:e3:25:01:c4:e9:2f:a2:b7:cc:26:69:6a:cb:dc:fd:e9:
9f:67:57:3a:35:c5:e8:41:90:0f:c4:01:66:f5:fe:dc:f3:09:
0d:b5:d8:f7:f7:fc:e9:65:95:b8:b0:2f:06:7a:d8:f5:b7:0f:
a7:47:0b:bd:42:92:70:c2:40:5b:3a:87:24:6a:f0:6a:ed:bd:
a5:e8:ca:14:be:42:e4:51:a8:5d:0f:12:40:99:47:2b:4e:32:
46:54:03:c5:55:73:5d:94:17:a2:30:97:d2:de:21:a5:67:01:
12:75:c5:a8:5f:5f:42:5d:b8:1f:b5:c8:62:d4:82:e8:18:10:
16:5f:fa:36:8a:51:4e:f7:d7:62:b3:60:91:6d:83:f6:3f:28:
37:5f:49:bd:de:d0:0e:22:a1:5f:0f:a6:87:d2:e0:37:00:56:
5e:16:5f:26:58:4a:dc:e4:24:48:4c:25:ef:c7:de:38:b4:00:
a0:14:3c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOuq82ko8UafG2AqHJin3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmI2OGYwYzgzYWRkOWEzYTNiODZhYjI0ZmI5MTBhOTYw
MjYyYzYwHhcNMjUwNTEyMTYwMTM0WhcNMjUwNTEzMTYwMTM0WjAzMTEwLwYDVQQD
EyhhYjlmZTRhMTIzMjljZjQ0MWU2ZjM1NjBjN2QzZGVlM2JjN2NmZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kbGD+v9Y8XF44Qngr0ZcaloFTP9
ig/+1isRLSbjQNf1jZam4hygnok5tH+c8rlAvBFA0mc2r7RhnmhJhUXepz0tHDXC
B5rPyy0GvDtIcyMzi4HjAXmbJcq+wQAT1GQcMaUnFe94DCNWM6nCUxOH7maSNfl1
4ONrg0i7Zakiu+2sFjE1tKHB74FFf6kNjkuRKNJEqPt9pmV++Kx6N6gzaDOryo2P
MAy/n15Uaemvevgu9t7+jouRG9QvZHTKgBVbeY8WhTqigLPcAjenrSNjwyxKEKbe
pmrnOs314mcMdv17lCFfXHqueJ3ijR+ys21MkgaL8eBNpE0VrkIuFudh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuf5KEjKc9EHm81YMfT3uO8fP2UMB8GA1UdIwQY
MBaAFK8raPDIOt2aOjuGqyT7kQqWAmLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWIt
ZWRhMzE2YTJhZmI4LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWItZWRhMzE2YTJhZmI4
LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWGhmjJw
EacHkyqEp1KPbx3WR7WwfCD8YJIUISz+T/n+x3Rn7CdBJje+99CXgFON9IK14daH
EiworjkAdhqhI5pakqeChcYpE5LjJQHE6S+it8wmaWrL3P3pn2dXOjXF6EGQD8QB
ZvX+3PMJDbXY9/f86WWVuLAvBnrY9bcPp0cLvUKScMJAWzqHJGrwau29pejKFL5C
5FGoXQ8SQJlHK04yRlQDxVVzXZQXojCX0t4hpWcBEnXFqF9fQl24H7XIYtSC6BgQ
Fl/6NopRTvfXYrNgkW2D9j8oN19Jvd7QDiKhXw+mh9LgNwBWXhZfJlhK3OQkSEwl
78feOLQAoBQ8ew==
-----END CERTIFICATE-----
Generated at Mon May 12 18:53:03 2025 by rpki-client