
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: d7bPzIIAE7cosrxnAtw5O2U3ViHdYCPcrv2avjQbetc=
Subject key identifier: FD:E6:FB:E7:02:04:CA:EC:83:01:42:C2:96:D9:B7:0B:41:18:54:74
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 01992C34CA7587B4333B3DC795ABBAC95B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 06CC
Signing time: Tue 09 Sep 2025 02:01:21 +0000
Manifest this update: Tue 09 Sep 2025 02:01:21 +0000
Manifest next update: Wed 10 Sep 2025 02:01:21 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: J6aN/8hWrqR12jlBzdzIqY2OTPztun8uR94vTZMexzA=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:ca:75:87:b4:33:3b:3d:c7:95:ab:ba:c9:5b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Sep 9 02:01:21 2025 GMT
Not After : Sep 10 02:01:21 2025 GMT
Subject: CN=fde6fbe70204caec830142c296d9b70b41185474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:fa:8d:bf:e0:18:26:a1:17:28:43:fb:33:
59:8a:38:0a:1b:2b:38:84:d6:ad:f9:a4:99:ba:21:
fb:f4:b5:45:84:c4:f9:85:db:a8:f4:f9:0e:7c:50:
57:66:82:99:63:94:00:fa:f6:7f:2d:6c:5d:35:d5:
09:56:28:83:e6:f1:40:03:eb:24:58:96:2b:b8:56:
9a:c7:7f:38:18:f4:48:a9:58:b6:43:cf:01:96:41:
f3:c2:88:30:29:9f:d0:e5:1a:12:4c:5d:15:9f:e7:
53:2d:bb:0a:26:bc:7d:5f:76:25:21:c3:74:18:d6:
c4:e2:f5:a6:93:dc:26:53:b4:82:ef:d7:87:f8:68:
fb:49:2d:35:08:dd:7d:37:6d:8e:cf:17:32:6b:3a:
02:a7:31:19:10:39:45:97:2e:10:89:f7:08:c3:d6:
22:44:08:d4:6c:3e:92:f2:24:4d:85:3c:23:97:31:
ea:d3:c3:dc:3c:5f:9b:8a:bf:5b:34:fc:e6:cd:c4:
c1:19:98:40:ac:52:8c:fd:44:3d:52:7d:77:7a:75:
09:c1:20:f3:e5:a5:74:d8:04:3c:c9:00:e1:1f:35:
96:50:27:75:e2:e3:1e:49:72:85:91:44:cb:33:f4:
ef:d8:a8:4a:9a:6d:3e:c5:3e:79:a0:46:7b:4c:d1:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:FB:E7:02:04:CA:EC:83:01:42:C2:96:D9:B7:0B:41:18:54:74
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6a:63:21:64:1e:8d:b2:5f:c8:89:9c:2c:cd:48:fd:ff:cf:
2e:74:72:1d:b4:2c:1d:ee:8b:de:64:d6:0d:e8:15:04:19:da:
86:a7:0a:82:07:90:05:cf:e3:65:e9:ea:03:4e:24:85:42:7e:
7e:21:5d:ef:d4:fd:21:7a:86:64:fb:03:20:49:7d:21:3e:75:
54:ca:06:6b:6c:5a:de:62:5e:f6:70:99:77:d0:f4:07:b4:0a:
a6:12:9b:7a:2f:ef:df:1d:dc:4f:85:f0:cd:07:0b:0f:49:7e:
c9:24:43:8f:88:0b:ab:20:6a:57:74:8b:13:6e:78:74:40:fc:
f6:ef:a3:c2:bc:45:28:68:29:71:44:88:25:37:66:4d:d9:34:
6d:9a:63:3a:40:13:66:82:97:b4:24:12:d7:dd:18:7c:25:70:
07:e5:ca:22:e4:5b:6f:76:18:93:11:ac:9d:83:17:78:4a:f1:
29:ee:ae:6e:9d:d2:9d:94:1c:6f:cd:a9:49:38:48:67:79:18:
9b:e7:00:cf:ff:90:f3:92:d3:6b:d6:6f:5d:7c:79:cc:8b:0c:
c8:6b:71:a5:cb:cd:dd:23:44:fe:c8:5a:4a:0c:30:94:13:ec:
6d:37:62:1e:5c:9a:ab:27:3a:ad:85:a0:b0:24:32:1a:3d:c5:
ed:13:4f:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksNMp1h7QzOz3Hlau6yVs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmFjZWJjNzYxY2FmMzc2NTZkYmQ3MTUzYzAwNDk5ZmI3
Mzc3NzcwHhcNMjUwOTA5MDIwMTIxWhcNMjUwOTEwMDIwMTIxWjAzMTEwLwYDVQQD
EyhmZGU2ZmJlNzAyMDRjYWVjODMwMTQyYzI5NmQ5YjcwYjQxMTg1NDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXX6jb/gGCahFyhD+zNZijgKGys4
hNat+aSZuiH79LVFhMT5hduo9PkOfFBXZoKZY5QA+vZ/LWxdNdUJViiD5vFAA+sk
WJYruFaax384GPRIqVi2Q88BlkHzwogwKZ/Q5RoSTF0Vn+dTLbsKJrx9X3YlIcN0
GNbE4vWmk9wmU7SC79eH+Gj7SS01CN19N22OzxcyazoCpzEZEDlFly4QifcIw9Yi
RAjUbD6S8iRNhTwjlzHq08PcPF+bir9bNPzmzcTBGZhArFKM/UQ9Un13enUJwSDz
5aV02AQ8yQDhHzWWUCd14uMeSXKFkUTLM/Tv2KhKmm0+xT55oEZ7TNGkswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3m++cCBMrsgwFCwpbZtwtBGFR0MB8GA1UdIwQY
MBaAFK8qzrx2HK83ZW29cVPABJn7c3d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYt
M2NlZjhhOGQ2ZWExLzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYtM2NlZjhhOGQ2ZWEx
LzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmpjIWQe
jbJfyImcLM1I/f/PLnRyHbQsHe6L3mTWDegVBBnahqcKggeQBc/jZenqA04khUJ+
fiFd79T9IXqGZPsDIEl9IT51VMoGa2xa3mJe9nCZd9D0B7QKphKbei/v3x3cT4Xw
zQcLD0l+ySRDj4gLqyBqV3SLE254dED89u+jwrxFKGgpcUSIJTdmTdk0bZpjOkAT
ZoKXtCQS190YfCVwB+XKIuRbb3YYkxGsnYMXeErxKe6ubp3SnZQcb82pSThIZ3kY
m+cAz/+Q85LTa9ZvXXx5zIsMyGtxpcvN3SNE/shaSgwwlBPsbTdiHlyaqyc6rYWg
sCQyGj3F7RNPGA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 12:21:20 2025 by rpki-client