Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: kEddUEEOUXcPpRtCEh/Q+xiCZTfX2xnLx++sD3a3P0A=
Subject key identifier: 68:83:2A:3F:F1:22:DF:1C:74:3E:CF:1D:A3:F3:27:C8:5B:C1:55:E3
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0198488968D5080E1FD3183636841FF7F2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 1172
Signing time: Sat 26 Jul 2025 21:00:21 +0000
Manifest this update: Sat 26 Jul 2025 21:00:21 +0000
Manifest next update: Sun 27 Jul 2025 21:00:21 +0000
Files and hashes: 1: oS-zf8LykP6dfOwgBh2b6irIbAA.roa (hash: es5RiKPg30TZ9v6YIMiSfrSdGJ7vWC4nZhRx1zHM27Q=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: 3befIKWofsDpiwqsnuMkPkhlU5r9+7JPkGJyJs61MaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:68:d5:08:0e:1f:d3:18:36:36:84:1f:f7:f2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Jul 26 21:00:21 2025 GMT
Not After : Jul 27 21:00:21 2025 GMT
Subject: CN=68832a3ff122df1c743ecf1da3f327c85bc155e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:29:1f:44:93:a8:6c:d3:f7:36:b6:90:e8:
64:24:1f:f6:b4:bd:c8:4c:38:ba:59:57:ac:a1:55:
20:13:a3:f7:8f:c5:f9:07:c9:f6:5a:bf:49:7c:03:
6c:72:34:89:99:2f:0a:4b:91:ae:ad:b9:ac:4c:f9:
4a:07:65:cf:3f:d4:b2:3f:68:95:90:f0:64:9e:a6:
93:62:06:2e:04:28:db:95:17:0f:c3:15:d8:5f:91:
6c:ca:7e:eb:c3:e7:76:25:9a:7d:d7:c6:4e:c9:4b:
2a:54:f9:7b:a0:11:2f:13:3a:a0:2e:e6:6d:fe:10:
43:63:61:5c:46:76:e0:b3:33:a2:ea:21:4b:36:bb:
60:c7:a9:9d:71:81:84:1e:5f:fc:b2:d6:65:07:94:
8c:dd:fb:84:e7:6a:0a:93:8f:e3:fb:6b:fc:e3:13:
8a:c9:c8:6e:bd:00:4b:f4:e8:93:8e:9a:72:7b:40:
32:0d:1d:ef:ee:ea:df:9c:e8:f6:cb:9e:f8:dd:12:
59:d0:b5:2a:e3:48:2a:a6:ca:4a:9d:62:47:2a:cb:
0f:d3:f7:a7:d9:dd:09:9f:5b:7b:01:17:f9:7a:0f:
b5:c7:e4:b5:a1:0b:f3:ca:24:e1:73:a7:f6:ba:f4:
17:ba:24:32:70:5d:97:02:e0:ad:20:38:d9:0c:00:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:2A:3F:F1:22:DF:1C:74:3E:CF:1D:A3:F3:27:C8:5B:C1:55:E3
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7a:a6:45:15:6a:26:b7:f7:30:66:6c:67:97:2e:78:93:8e:
7f:89:c7:d1:3d:ec:a9:15:f4:2f:44:8b:87:90:c0:f2:95:38:
c7:3f:0f:80:69:d5:64:8f:4f:4d:f6:81:5b:2d:3c:2f:7e:ad:
1e:63:8b:98:61:94:b2:e1:e6:e1:45:09:6b:14:07:25:80:cb:
ef:34:d8:34:6f:5d:46:48:e4:b6:50:8c:73:a0:c2:63:8c:67:
17:b7:7a:2e:fb:73:0d:0f:ae:72:d3:09:07:1d:70:9b:db:06:
fd:09:e1:7c:9f:4a:d3:ba:a5:47:a2:e7:a9:5b:d1:de:6c:1b:
8b:a8:06:df:d8:85:65:15:95:84:87:3b:bd:6e:ab:e9:6f:d7:
c7:59:cf:91:5a:50:10:0e:48:cf:6b:df:58:aa:bd:10:38:50:
e8:40:39:01:37:58:41:aa:d1:93:ba:16:0c:ec:07:ee:25:70:
02:cf:8e:40:87:e5:35:64:3e:3f:01:7d:9d:2f:bc:3c:05:73:
04:a4:75:f5:23:3f:a0:94:62:9b:87:c4:9b:9e:3f:2b:97:3b:
25:87:35:e2:c7:4c:0b:93:53:e9:41:9d:e7:37:45:9c:ed:64:
4b:dc:8c:22:92:4f:e2:c5:0e:0d:1c:01:39:52:58:10:09:d0:
ec:01:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:58:28 2025 by rpki-client