Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: fS2RGpr9K9p2HxwiL9K97xI0hiTuJi9oiyWszU7cmK8=
Subject key identifier: 95:79:D6:7C:93:BD:40:F3:CD:21:8A:AC:63:EE:9A:18:E6:A0:95:C3
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019A4F995DD436EB1799BC06777BA420B774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:42 +0000
Manifest this update: Tue 04 Nov 2025 16:00:42 +0000
Manifest next update: Wed 05 Nov 2025 16:00:42 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: aXSTgWiua8cPotYEy5PTdDr77YsSkz1iTaprEvtk5J0=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:5d:d4:36:eb:17:99:bc:06:77:7b:a4:20:b7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Nov 4 16:00:42 2025 GMT
Not After : Nov 5 16:00:42 2025 GMT
Subject: CN=9579d67c93bd40f3cd218aac63ee9a18e6a095c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:d7:32:ed:e4:c4:e9:3a:57:a9:df:f3:af:
dc:ee:7f:15:e3:13:e7:2c:ab:b1:eb:75:b6:5c:fe:
cb:f7:a0:19:63:ab:5f:d1:c9:aa:8d:50:91:d5:33:
30:43:1c:76:d4:98:19:f0:c8:54:1f:20:63:97:9c:
2f:2f:6e:73:55:0c:5b:ff:ed:4c:0a:43:73:de:a8:
3a:4f:31:31:f9:af:1c:6d:ee:c9:eb:85:4e:6d:88:
33:39:d6:12:42:9e:bf:a1:91:35:4d:28:90:f7:19:
39:2b:13:36:64:ff:a1:61:ea:6a:19:3f:50:13:47:
b2:ac:57:08:31:21:0f:ea:4e:57:b4:ff:d8:60:0d:
35:2c:29:f2:f5:84:3a:8f:27:0e:71:9c:af:b0:b7:
4c:b7:61:3e:93:70:a0:25:78:db:60:20:0f:46:1e:
81:b8:8e:62:22:c4:0b:7b:4f:b6:37:94:d6:79:88:
a9:1b:dc:26:d4:16:e8:eb:34:c6:b7:01:8f:f1:aa:
97:ac:ef:99:bd:89:be:06:af:03:c0:98:37:f2:fe:
86:aa:ac:f7:03:51:40:54:31:dc:98:17:19:01:8f:
d7:c6:99:14:ce:3b:8f:f0:83:79:29:56:12:5f:d7:
85:12:e5:08:a3:82:56:d1:ef:d5:86:e5:05:e2:d8:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:79:D6:7C:93:BD:40:F3:CD:21:8A:AC:63:EE:9A:18:E6:A0:95:C3
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:2d:dd:eb:a4:fd:a1:b4:b9:c4:a6:78:fa:49:79:fd:a9:
8c:04:ac:a5:0f:64:25:97:6b:5c:20:36:6f:6b:9f:df:ff:4c:
35:7a:cc:55:69:f3:e4:ea:8c:c0:98:ce:0b:cc:e3:3f:67:b7:
17:d7:c5:12:19:0e:9e:39:fa:ec:da:11:df:77:ce:6b:40:de:
c1:5f:19:51:25:76:90:67:e6:52:74:55:59:0b:e0:3a:bd:3b:
fb:6d:59:3c:b5:6f:f2:22:2d:68:28:77:d9:54:dd:64:e5:0f:
db:e5:a0:e4:2e:ce:b7:f2:d5:3a:a5:2f:93:47:f4:92:6e:f4:
24:66:12:a9:62:5e:c3:f5:5f:fc:a8:14:d4:04:03:b1:75:4d:
9e:b4:c7:e2:52:93:73:70:c2:96:8a:00:b5:3a:5d:1d:f4:4c:
f2:c5:e3:6c:a7:da:f5:f7:87:7a:70:e7:c3:15:dc:85:d0:6c:
71:21:97:63:b3:45:55:45:6a:86:1e:2d:56:88:07:1f:c8:a5:
5d:b4:73:ff:15:16:b5:38:7a:93:58:a3:9a:e7:91:e5:49:cb:
43:c9:ff:e1:3e:a5:92:a2:72:08:2d:cc:43:36:bd:aa:f7:94:
ec:90:9d:3d:e0:02:39:f7:a0:c6:f7:24:66:9b:e8:47:d5:9e:
7d:92:b9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmV3UNusXmbwGd3ukILd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5
ZmJhYmYwHhcNMjUxMTA0MTYwMDQyWhcNMjUxMTA1MTYwMDQyWjAzMTEwLwYDVQQD
Eyg5NTc5ZDY3YzkzYmQ0MGYzY2QyMThhYWM2M2VlOWExOGU2YTA5NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JzXMu3kxOk6V6nf86/c7n8V4xPn
LKux63W2XP7L96AZY6tf0cmqjVCR1TMwQxx21JgZ8MhUHyBjl5wvL25zVQxb/+1M
CkNz3qg6TzEx+a8cbe7J64VObYgzOdYSQp6/oZE1TSiQ9xk5KxM2ZP+hYepqGT9Q
E0eyrFcIMSEP6k5XtP/YYA01LCny9YQ6jycOcZyvsLdMt2E+k3CgJXjbYCAPRh6B
uI5iIsQLe0+2N5TWeYipG9wm1Bbo6zTGtwGP8aqXrO+ZvYm+Bq8DwJg38v6Gqqz3
A1FAVDHcmBcZAY/XxpkUzjuP8IN5KVYSX9eFEuUIo4JW0e/VhuUF4tjJ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV51nyTvUDzzSGKrGPumhjmoJXDMB8GA1UdIwQY
MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt
Mjk0ZDljZjc5ZTJlLzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl
LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9Mt3euk
/aG0ucSmePpJef2pjASspQ9kJZdrXCA2b2uf3/9MNXrMVWnz5OqMwJjOC8zjP2e3
F9fFEhkOnjn67NoR33fOa0DewV8ZUSV2kGfmUnRVWQvgOr07+21ZPLVv8iItaCh3
2VTdZOUP2+Wg5C7Ot/LVOqUvk0f0km70JGYSqWJew/Vf/KgU1AQDsXVNnrTH4lKT
c3DClooAtTpdHfRM8sXjbKfa9feHenDnwxXchdBscSGXY7NFVUVqhh4tVogHH8il
XbRz/xUWtTh6k1ijmueR5UnLQ8n/4T6lkqJyCC3MQza9qveU7JCdPeACOfegxvck
ZpvoR9WefZK5ow==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:49:06 2025 by rpki-client