Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File: ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier: J3MHoR72FgzuvzhryqdNVkQsLDDRyDWqZ/puNBmH/o0=
Subject key identifier: 3E:B7:0E:69:BD:02:E4:D0:F7:C0:5B:70:1C:82:AF:D2:EF:E9:AD:74
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer: /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial: 019A1D9A99B9DC699B45B41BC2925B96336C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number: 0749
Signing time: Sat 25 Oct 2025 23:01:02 +0000
Manifest this update: Sat 25 Oct 2025 23:01:02 +0000
Manifest next update: Sun 26 Oct 2025 23:01:02 +0000
Files and hashes: 1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: zPorFa4+ZpnubBS3r2qQmtfDsvF/2qTGKyUfFH3CxIQ=)
2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:99:b9:dc:69:9b:45:b4:1b:c2:92:5b:96:33:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
Validity
Not Before: Oct 25 23:01:02 2025 GMT
Not After : Oct 26 23:01:02 2025 GMT
Subject: CN=3eb70e69bd02e4d0f7c05b701c82afd2efe9ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:d1:ba:6d:6a:b5:49:61:4d:8e:4e:00:54:
70:cc:e5:66:49:16:08:b9:c7:c3:02:f6:ee:af:56:
5d:21:9e:4e:11:16:57:4e:94:77:b4:54:8e:7b:bb:
af:6f:ea:e6:04:4c:12:61:bf:4a:db:4a:48:76:f6:
fc:95:3a:61:aa:21:60:14:92:4d:b5:6f:1d:48:b1:
9a:c0:47:c8:22:e3:f0:00:51:bf:90:bf:76:05:2b:
ce:cc:5d:41:06:60:22:76:be:e5:6e:00:67:a1:69:
b8:8b:39:13:03:41:c7:0f:a0:2f:38:2f:4b:ef:e9:
9e:16:7f:7a:97:97:cb:d9:99:f0:07:e9:d2:ee:09:
87:b4:2c:5a:63:23:ea:4a:a5:58:6f:b8:8f:55:16:
02:f5:08:d3:69:ac:5d:2e:6e:1e:3e:f7:db:a0:cd:
de:e1:01:47:f0:ec:19:ce:bc:db:3a:c8:b9:da:f3:
d7:3d:f7:3a:c0:ee:0d:4b:cc:7b:a1:d9:d5:67:f9:
7d:10:cf:30:bc:c6:28:a7:15:fc:43:43:78:7c:3c:
8a:7e:1c:36:f0:24:28:5e:6e:e1:aa:6b:ca:10:63:
8c:04:e8:44:3d:55:98:8c:48:3e:7f:16:dd:25:36:
2e:5a:f9:72:2d:34:0f:5a:93:31:ec:76:b3:2d:d6:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:0E:69:BD:02:E4:D0:F7:C0:5B:70:1C:82:AF:D2:EF:E9:AD:74
X509v3 Authority Key Identifier:
keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e3:68:e6:6c:3d:0b:04:bd:d6:0c:5b:a0:3a:89:6f:cc:67:
0a:9f:49:35:42:84:94:31:25:59:5d:cd:44:8e:b4:11:18:dd:
28:22:4d:e0:40:7b:86:03:11:60:4f:cd:5e:31:13:4c:05:2c:
ff:7e:61:c7:b0:d9:0d:97:2a:b7:10:cb:ee:ea:2b:05:0c:f2:
d1:47:39:5c:3f:f3:f1:82:55:4c:57:5b:94:69:4f:61:19:63:
32:8c:e4:18:96:1e:3b:6d:3d:4b:b7:fe:69:79:8b:c7:17:b0:
89:aa:41:e5:bc:5d:97:20:9e:32:d7:e6:7d:fa:f2:3e:b1:9a:
31:96:e1:1b:45:5c:8c:be:e1:8e:ea:fe:06:9e:b9:4b:26:89:
38:22:cb:f5:df:bb:2a:54:f4:f4:e6:2a:87:31:5f:ba:0b:f9:
6b:ba:28:93:97:0a:a9:1a:ed:82:5b:a7:30:17:00:cc:5d:1d:
7c:69:9b:e0:f7:68:57:97:60:7e:31:40:ec:27:4a:cc:6f:43:
bf:e1:b3:14:4b:dc:2f:e2:7a:7f:33:1c:23:e2:5f:85:44:88:
c5:35:a8:8a:60:a0:a3:93:51:d9:9b:40:26:40:1a:59:6a:9a:
c8:72:14:09:a3:e5:d8:a9:a9:54:b7:dc:7a:00:d3:70:e2:c3:
fe:72:1f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmpm53GmbRbQbwpJbljNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmFjZWJjNzYxY2FmMzc2NTZkYmQ3MTUzYzAwNDk5ZmI3
Mzc3NzcwHhcNMjUxMDI1MjMwMTAyWhcNMjUxMDI2MjMwMTAyWjAzMTEwLwYDVQQD
EygzZWI3MGU2OWJkMDJlNGQwZjdjMDViNzAxYzgyYWZkMmVmZTlhZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o3Rum1qtUlhTY5OAFRwzOVmSRYI
ucfDAvbur1ZdIZ5OERZXTpR3tFSOe7uvb+rmBEwSYb9K20pIdvb8lTphqiFgFJJN
tW8dSLGawEfIIuPwAFG/kL92BSvOzF1BBmAidr7lbgBnoWm4izkTA0HHD6AvOC9L
7+meFn96l5fL2ZnwB+nS7gmHtCxaYyPqSqVYb7iPVRYC9QjTaaxdLm4ePvfboM3e
4QFH8OwZzrzbOsi52vPXPfc6wO4NS8x7odnVZ/l9EM8wvMYopxX8Q0N4fDyKfhw2
8CQoXm7hqmvKEGOMBOhEPVWYjEg+fxbdJTYuWvlyLTQPWpMx7HazLdaquwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD63Dmm9AuTQ98BbcByCr9Lv6a10MB8GA1UdIwQY
MBaAFK8qzrx2HK83ZW29cVPABJn7c3d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYt
M2NlZjhhOGQ2ZWExLzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85MzgwNGUtYjFmMi00MDM0LTliMjYtM2NlZjhhOGQ2ZWEx
LzEvcnlyT3ZIWWNyemRsYmIxeFU4QUVtZnR6ZDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPONo5mw9
CwS91gxboDqJb8xnCp9JNUKElDElWV3NRI60ERjdKCJN4EB7hgMRYE/NXjETTAUs
/35hx7DZDZcqtxDL7uorBQzy0Uc5XD/z8YJVTFdblGlPYRljMozkGJYeO209S7f+
aXmLxxewiapB5bxdlyCeMtfmffryPrGaMZbhG0VcjL7hjur+Bp65SyaJOCLL9d+7
KlT09OYqhzFfugv5a7ook5cKqRrtglunMBcAzF0dfGmb4PdoV5dgfjFA7CdKzG9D
v+GzFEvcL+J6fzMcI+JfhUSIxTWoimCgo5NR2ZtAJkAaWWqayHIUCaPl2KmpVLfc
egDTcOLD/nIfSw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:17:28 2025 by rpki-client