Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: tYdZf522bYCDq1tKIdwG5QyYoB9cpbxcpDz2NEChpm0=
Subject key identifier: 1F:9A:62:DC:62:24:1D:50:E2:4C:C1:BB:73:83:D6:57:E5:B9:F0:A1
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 019A4EF593919037069214FBD398B8B09CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 08A0
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=)
2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: YIDOK0xHynQ8iHAFuB3xnUlfScj74z4uVqfhDIal4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:93:91:90:37:06:92:14:fb:d3:98:b8:b0:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=1f9a62dc62241d50e24cc1bb7383d657e5b9f0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:f2:a0:2b:6f:e3:49:05:f8:c3:89:98:78:
16:c6:f6:0b:58:a5:f7:22:a7:a8:43:71:ff:5a:58:
f0:41:3b:69:0c:e9:da:6b:30:14:9d:b3:2a:db:51:
9e:7f:bb:1c:e9:a0:26:88:f2:70:af:aa:87:6a:36:
22:11:d6:f8:47:4c:8a:3a:24:a3:f8:3b:f2:db:6a:
33:a6:c4:fe:26:e6:62:8a:1f:b5:72:f8:df:bb:2b:
8f:1b:08:62:85:b4:3a:73:1e:19:ab:63:49:5f:07:
a1:cd:50:01:db:f6:17:7a:14:5d:42:ab:20:41:65:
be:c6:3f:90:0b:c7:20:1b:69:4e:9c:7e:85:26:97:
23:80:bd:72:fb:28:56:a5:0b:0a:ca:dd:e8:bb:c5:
3b:e6:e7:cd:cf:02:12:e7:d6:38:82:3c:4c:74:1b:
bd:09:00:cb:fa:78:d6:b8:08:7b:c2:df:ce:96:e1:
15:d3:ab:d9:07:75:74:58:d0:fe:7e:98:4a:57:8b:
e9:e1:84:ef:d4:44:f3:13:ad:b0:f1:ae:c8:81:60:
da:23:cc:71:39:7c:12:05:3a:28:fd:88:72:18:dd:
1e:af:54:94:54:c3:a4:58:9a:4c:32:8b:37:3b:1c:
a9:bb:01:26:95:58:71:f4:cb:d1:98:ce:a9:18:a8:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:62:DC:62:24:1D:50:E2:4C:C1:BB:73:83:D6:57:E5:B9:F0:A1
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:87:b7:05:04:30:3b:79:25:2e:f1:e2:e6:f2:27:7a:fc:02:
ee:eb:b3:b7:71:ca:46:a0:56:2e:71:d3:64:65:05:42:af:3c:
2f:e4:7c:29:3b:74:92:f0:76:8e:51:04:ad:a1:ac:37:e3:2a:
43:eb:f6:b8:ca:80:de:d4:37:bd:cc:93:8d:e7:35:18:02:72:
16:69:ee:b3:c5:f4:9f:6f:b4:2f:2b:88:1b:86:60:8e:49:d1:
c5:2f:2d:12:2c:16:1d:7f:64:d8:b7:8c:2b:40:fb:21:9a:1c:
58:20:04:9c:c9:e0:b5:9b:d1:ad:87:ec:8b:2b:a1:8e:a6:86:
65:df:1d:42:02:3d:a3:0c:3a:e1:ff:9c:9e:ef:ef:19:c5:9c:
c7:01:70:e7:e5:33:47:59:22:e7:4a:d1:53:9b:f1:39:3d:14:
23:f6:43:07:77:ca:52:97:50:2c:95:ff:4d:ca:8d:d5:29:c5:
19:b5:88:07:47:b4:c6:14:ef:e1:74:74:81:6b:c6:fb:3b:b7:
fe:59:2d:8c:a5:52:4e:51:26:51:b0:f1:be:77:58:54:53:c7:
54:ea:af:4a:a9:31:2a:55:63:2f:74:25:0b:ba:37:89:3b:a6:
49:a6:c5:fb:f7:e1:53:28:56:f2:c8:12:e8:5b:73:8b:36:ca:
7b:ed:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:52 2025 by rpki-client