Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: YNA6SwWTFn58q77GGsILcZ1y2QZyttsb42fS+mWjyoQ=
Subject key identifier: 65:AA:24:34:52:A8:C2:42:DB:4F:B1:8A:CA:BB:43:C5:9F:B6:70:2A
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0197D0CE581A3C48B4C41AF544CA42C7435D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 1134
Signing time: Thu 03 Jul 2025 15:01:13 +0000
Manifest this update: Thu 03 Jul 2025 15:01:13 +0000
Manifest next update: Fri 04 Jul 2025 15:01:13 +0000
Files and hashes: 1: oS-zf8LykP6dfOwgBh2b6irIbAA.roa (hash: es5RiKPg30TZ9v6YIMiSfrSdGJ7vWC4nZhRx1zHM27Q=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: Jpn3mkRlPUm2VQ0mDjb/FleVOd1NjOilnwpgYhqv2J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:ce:58:1a:3c:48:b4:c4:1a:f5:44:ca:42:c7:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Jul 3 15:01:13 2025 GMT
Not After : Jul 4 15:01:13 2025 GMT
Subject: CN=65aa243452a8c242db4fb18acabb43c59fb6702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:a2:a1:f8:14:b8:e9:c0:f1:89:e9:2d:34:
6d:0f:3a:d4:ef:d4:a2:1d:50:23:0f:b5:4f:45:f8:
a9:96:70:94:8f:7a:b5:e6:06:96:31:66:51:d0:7a:
d6:be:5f:2d:2c:a9:3e:1e:b7:4f:c1:21:5a:92:70:
7a:c5:67:7d:f0:da:5f:27:ff:b1:5c:8a:7c:57:c8:
50:89:70:7b:36:ca:11:24:b4:db:fd:d1:84:39:be:
fb:7b:d1:44:b4:f3:f2:3a:7e:e5:90:97:5c:5d:8e:
2e:5c:c6:f0:31:7c:af:39:e3:a7:34:69:93:5f:0f:
e8:98:46:9d:28:78:f7:98:e9:f8:a1:8e:4d:31:14:
44:9c:ee:4f:33:9b:0b:8a:c3:c2:e1:be:a1:f5:fe:
2c:54:4a:27:d6:23:8f:11:8c:41:41:19:6d:06:23:
22:61:0f:db:b8:ed:2d:c4:b3:41:da:30:b7:9e:f2:
37:3e:15:68:44:70:67:8d:d7:78:3f:0c:a4:65:85:
ee:2d:c0:b8:15:8e:ed:1d:07:cd:16:ce:5e:8c:71:
42:b5:15:3b:77:be:71:96:2c:e9:5a:fc:a6:71:f5:
5c:ad:a2:fc:f4:4e:c4:df:7e:f0:64:0c:c4:2d:e2:
75:ff:02:b7:7b:6a:64:4a:f0:9e:ad:03:91:38:d4:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:24:34:52:A8:C2:42:DB:4F:B1:8A:CA:BB:43:C5:9F:B6:70:2A
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2f:8b:fc:c7:a6:06:cc:cb:9f:a4:10:1a:ee:73:73:05:bd:
65:f6:8e:c5:38:fe:95:ff:73:2f:6b:3e:da:15:1f:c2:2b:38:
80:da:5f:13:cb:21:68:2b:06:ce:42:9e:fa:81:33:c5:b3:d9:
b3:d7:43:f4:f2:d0:bd:5f:2b:9c:ea:0a:c5:a9:ea:68:d0:e4:
e2:e0:b7:7f:f9:41:dd:b0:1a:64:ac:72:2d:73:d1:54:51:0b:
ae:fc:1a:3d:30:dd:62:f9:56:fd:7b:43:0e:51:2b:28:b8:f6:
df:87:d0:19:7f:72:6a:8a:54:e9:b6:5f:a7:db:33:6c:b6:23:
f4:eb:83:39:12:aa:fc:8b:52:5c:cb:20:07:ab:a1:c2:0a:ce:
21:15:30:fa:11:14:4c:82:d4:4c:72:51:94:43:a9:e1:bd:83:
34:ba:27:cb:d3:bf:b9:4a:ae:dc:82:52:70:4e:b8:90:9a:bc:
54:5e:f6:e5:81:f7:d3:9a:07:21:ca:4c:ed:56:29:d8:f2:f0:
1b:81:d6:bf:33:df:0f:7a:1d:6c:b9:d6:f4:d3:2e:1b:70:5a:
f0:1b:88:35:d8:60:ca:1e:f8:24:a6:8b:74:4d:26:62:19:01:
0f:20:ab:74:4a:ad:b8:4e:90:f4:15:c7:b6:31:bc:fc:33:22:
1c:5e:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:52:09 2025 by rpki-client