Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: VluGbv2O2ThnI16xxmP3uYm6P50wT5q0vPdOxQ2NYQQ=
Subject key identifier: 4C:DB:43:E7:E4:2A:70:E0:BC:AA:FC:24:4A:84:82:DF:C1:05:4D:08
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 019A5006DA46463BEFF0ED9063B08230010A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 18:00:17 +0000
Manifest this update: Tue 04 Nov 2025 18:00:17 +0000
Manifest next update: Wed 05 Nov 2025 18:00:17 +0000
Files and hashes: 1: 6f9DfsZDUzdPo3_6eNoeG4QK_-I.roa (hash: 4tclq8R1V/fdbnM4AvEGc3ZJVkHqia0uVMOBrni8yPk=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: OaWx8Fbbe8j1hSnqDmhHr/Fo64sXPfJzFG0OjUC6Mn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:da:46:46:3b:ef:f0:ed:90:63:b0:82:30:01:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Nov 4 18:00:17 2025 GMT
Not After : Nov 5 18:00:17 2025 GMT
Subject: CN=4cdb43e7e42a70e0bcaafc244a8482dfc1054d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:d3:3e:17:50:5b:9f:57:3e:15:3e:15:80:
43:a6:be:70:8f:ef:01:39:cc:4f:a2:ad:dc:ec:bf:
45:6d:a7:1a:2f:ff:37:ed:77:4e:a2:d7:f3:b1:4e:
47:dd:5f:74:8d:33:1a:fb:c3:12:25:64:15:4a:f9:
4e:34:dc:de:66:b6:5b:2a:bf:f5:a9:2c:bd:cb:28:
ac:88:4f:09:0a:47:8e:d5:b1:36:c4:c6:8c:21:40:
12:09:bc:8a:ea:6f:16:66:cd:be:89:e2:cd:3e:83:
c1:44:75:ca:84:8c:90:f6:24:7c:f9:2c:e6:d4:f0:
13:1c:87:05:f2:e4:62:cc:c1:c2:ca:3f:97:49:88:
d0:b0:63:54:00:0f:f1:df:52:e0:26:ed:81:a1:b2:
a4:92:cc:05:59:ec:d1:33:6c:2d:2e:d6:a0:27:db:
96:2b:40:c1:98:a2:b6:8b:86:ed:a9:f0:16:78:44:
ab:0d:8c:20:53:ce:6e:98:f8:a1:b1:40:46:84:e3:
6e:23:1d:be:11:37:c8:02:03:f9:49:04:a4:db:a5:
48:2e:63:d0:c7:a6:88:7d:19:67:1d:54:71:62:4b:
bf:48:21:b2:95:79:74:ca:af:c8:94:1e:6c:10:6c:
39:6f:ea:88:94:ce:c5:7d:e3:d3:87:f2:77:35:36:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:43:E7:E4:2A:70:E0:BC:AA:FC:24:4A:84:82:DF:C1:05:4D:08
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:1c:d7:8f:cc:19:21:4b:5b:f0:d7:d1:05:c5:a5:a6:7e:
8a:fb:67:e1:23:c0:94:76:52:70:a5:f0:af:9d:50:32:e9:d0:
af:dc:ff:ee:31:00:c4:63:64:6c:91:35:c6:45:07:86:d2:18:
64:b5:06:5b:9c:06:2a:46:d4:49:0a:85:9a:25:fb:ea:95:c8:
ad:90:6e:c9:26:a8:76:23:eb:f6:a3:e4:d6:4c:c1:6b:34:82:
08:7e:94:4a:a7:38:27:83:a8:39:5a:b4:9f:b9:6a:07:b0:d0:
9b:f8:ef:e9:5f:54:c8:34:db:c7:ce:58:c9:a8:23:35:29:4e:
bf:95:c5:08:02:5e:18:f8:52:0b:7b:d0:90:d5:5a:e0:da:11:
82:9e:32:6d:ad:70:90:19:58:72:f4:3a:23:1d:ae:73:89:50:
b0:99:14:6b:c9:c0:3c:1d:0f:75:dc:ef:c8:2d:94:fe:b6:13:
56:bd:07:7f:17:60:44:88:ed:a1:af:88:de:5a:a9:83:36:a7:
aa:50:ce:ec:12:72:52:4c:0f:f0:41:44:03:0b:bd:b6:62:d1:
ea:4a:4f:64:b3:f5:48:b7:d2:8c:a7:59:d3:c0:91:3c:dc:af:
f9:e1:1d:a8:a1:93:7e:d2:94:63:8e:b8:5e:08:6b:ab:d0:e8:
4e:fe:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:19 2025 by rpki-client