Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json)
Hash identifier: uuJ3QVdtazVjyqxaJ8dhZxVJ43XIZQRWjzuz0T/mogQ=
Subject key identifier: 39:F4:03:B9:23:96:76:5A:CB:6C:1F:02:F4:76:BB:DD:AD:4D:51:D9
Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Certificate serial: 0199D0922568A54949C7B7E94A4E1049054D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
Manifest number: 123D
Signing time: Sat 11 Oct 2025 00:01:02 +0000
Manifest this update: Sat 11 Oct 2025 00:01:02 +0000
Manifest next update: Sun 12 Oct 2025 00:01:02 +0000
Files and hashes: 1: oS-zf8LykP6dfOwgBh2b6irIbAA.roa (hash: es5RiKPg30TZ9v6YIMiSfrSdGJ7vWC4nZhRx1zHM27Q=)
2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: 4K8piyZXFXCJumGjHGd+Aq6PYVazqfQezsF226O4qkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d0:92:25:68:a5:49:49:c7:b7:e9:4a:4e:10:49:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6
Validity
Not Before: Oct 11 00:01:02 2025 GMT
Not After : Oct 12 00:01:02 2025 GMT
Subject: CN=39f403b92396765acb6c1f02f476bbddad4d51d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:aa:09:af:1e:0d:99:24:25:01:8a:95:22:
2b:4c:57:61:a8:c7:77:13:45:65:84:49:28:84:4c:
c6:06:20:8e:49:81:82:17:60:32:e2:6b:a0:6e:d5:
ef:98:8f:df:59:0e:f4:c1:2d:d0:64:54:6a:66:60:
53:c3:56:cd:d2:1f:c5:b0:33:97:a8:61:cb:5b:75:
f0:86:1b:b9:73:2a:7e:d5:13:58:16:16:7f:ef:f8:
18:f9:66:74:9f:5d:af:af:c5:8f:c4:dc:86:5f:83:
f7:d9:5b:2e:e1:c2:79:51:8b:4a:90:d6:f0:80:0a:
38:b4:87:21:7e:0b:da:bb:97:f6:89:c0:54:e1:7b:
58:40:15:e4:77:9c:b3:37:6e:cc:01:7b:d4:b3:b7:
45:78:91:00:38:b3:bf:4a:85:95:61:ce:5a:f0:00:
03:e6:e0:e6:41:79:49:38:80:d1:ad:99:66:e4:f7:
63:be:48:6d:5d:b1:68:20:2f:52:cf:dc:5d:10:c8:
60:d1:6f:20:0b:87:b3:a7:d2:06:27:e1:2f:1f:31:
8d:2f:e7:62:58:b5:73:7c:32:6f:07:b6:fe:5b:e7:
d6:69:a9:b5:57:c8:1f:70:81:d5:c6:ae:c8:c7:df:
15:be:3b:a2:1c:4b:c7:cb:21:6b:42:47:e8:5a:1d:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:03:B9:23:96:76:5A:CB:6C:1F:02:F4:76:BB:DD:AD:4D:51:D9
X509v3 Authority Key Identifier:
keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bc:1d:4b:c8:2a:fb:f4:09:43:2e:9d:39:82:22:38:45:31:
29:bd:f2:dd:b4:6d:83:f0:c2:60:41:ca:22:e0:a9:3f:9b:06:
31:ae:51:39:05:e9:56:c3:9c:f2:92:f3:cf:b5:3f:63:cb:a1:
df:22:ef:b4:08:d0:75:ab:d8:e3:ef:54:2b:84:de:cc:d2:54:
ce:56:bc:aa:a6:60:e9:7c:0a:3d:55:89:b7:28:aa:e1:ad:97:
3d:46:b7:c6:83:0f:41:23:f5:0e:cd:34:b1:ea:d4:bf:93:e0:
06:30:8b:94:15:27:0d:5f:41:8d:fc:98:65:e9:94:34:05:75:
71:65:59:07:b0:a3:d8:fd:84:2b:07:65:28:89:7b:15:47:fd:
36:e0:68:79:09:93:99:97:9f:f9:46:e5:70:33:a8:20:a8:03:
c5:cf:d5:b6:4a:24:0b:b5:e6:20:5f:5d:6d:8f:10:37:60:bf:
f1:e4:2c:62:ed:f8:c8:a8:8b:71:e8:ef:f0:21:cc:7d:38:68:
8b:87:75:b7:cc:c4:24:c9:bd:09:71:5b:9f:2a:e9:4b:c1:2b:
1c:41:58:bf:7f:8e:37:1f:7e:dc:3c:81:77:a0:bc:b3:39:1e:
96:1b:00:08:4f:09:36:22:40:93:8f:e9:fd:77:7e:c7:29:9e:
9f:8a:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 06:26:40 2025 by rpki-client