Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File: ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier: U9KaAoNJrRSJWVXDTITDJAe777U8DXXerlASHqiqflw=
Subject key identifier: 5F:22:42:16:61:32:5E:6A:63:6F:22:AC:60:21:C2:87:FE:E5:FE:AB
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 019A4FD026ADFA55FC4CB88C32F314CE87ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number: 13B6
Signing time: Tue 04 Nov 2025 17:00:32 +0000
Manifest this update: Tue 04 Nov 2025 17:00:32 +0000
Manifest next update: Wed 05 Nov 2025 17:00:32 +0000
Files and hashes: 1: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: GfiGNi+4cCN4oh0j7Gdu7ux+uD6eS8sFje6ChEUl32o=)
2: zl8vYnMSKo50V7tHcL3U74d2LS4.roa (hash: cxI3XYqo0XKxXcEnFf9KagnCReAfMGFWl39LE0K//l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:26:ad:fa:55:fc:4c:b8:8c:32:f3:14:ce:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Nov 4 17:00:32 2025 GMT
Not After : Nov 5 17:00:32 2025 GMT
Subject: CN=5f22421661325e6a636f22ac6021c287fee5feab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:84:52:80:e0:e4:8d:7e:59:cf:57:24:f0:
f4:1d:18:12:7b:cb:00:4c:37:7d:c9:c6:0b:2a:59:
d2:39:57:be:8c:11:ec:90:de:af:2d:96:8e:78:df:
fb:88:72:7d:83:6c:f6:97:a2:7b:a1:81:21:49:62:
9a:13:a1:25:3b:e0:89:2c:1a:d0:f5:e1:3b:2f:fc:
bd:50:0e:16:b6:b7:56:77:7f:64:f0:6d:0f:70:83:
a1:32:c7:7c:9c:f1:54:6f:f9:8a:08:c9:23:b3:32:
78:7a:40:ea:19:46:59:4a:21:31:d8:4a:a1:82:41:
9e:c4:61:be:56:8b:18:ea:e4:0b:a0:8f:bc:f4:bf:
8e:0c:a5:00:34:2f:4f:ad:95:cb:c9:84:a7:28:5e:
3d:7a:db:09:7a:16:1e:06:f7:aa:8f:bc:c5:c3:4a:
be:ab:f9:ca:49:77:56:d6:1d:33:75:68:b2:13:39:
b4:ab:a4:e8:05:f6:c4:e3:89:f3:8f:6c:a4:9c:28:
6c:7d:40:d0:72:2c:c6:2e:33:42:38:5f:d5:8a:59:
25:11:60:5c:e6:70:9f:05:bd:5d:df:fe:23:4d:e0:
3a:3b:fb:f4:c2:f7:31:ec:82:67:b2:61:67:78:57:
85:e9:73:ed:89:b8:61:7d:20:9f:95:37:b6:4f:95:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:42:16:61:32:5E:6A:63:6F:22:AC:60:21:C2:87:FE:E5:FE:AB
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ea:48:be:40:e7:29:4a:8f:58:d6:02:84:d9:1e:e3:55:00:
2e:a3:06:c0:e7:22:9c:44:be:7c:57:f5:10:33:7e:85:c2:af:
e8:67:b0:d5:7e:d9:ce:4e:11:dc:62:d0:12:12:38:2d:64:ae:
c5:29:7d:91:d5:71:7d:3d:26:bb:1d:e4:14:12:fd:7c:dd:4e:
e0:7d:b6:47:e3:fc:03:4c:8d:d4:a0:42:69:fd:68:a1:9e:7c:
76:f1:97:9b:ac:ce:7a:0e:c8:c9:ee:06:75:e5:58:b8:49:79:
84:da:0d:bc:4a:6f:05:cc:a3:29:fa:2a:4f:40:25:ea:b2:02:
78:e2:78:cb:ed:a0:c6:3d:78:d8:c4:cb:48:95:f6:a8:94:57:
68:d6:aa:55:dd:70:16:30:61:0d:f8:68:43:1e:c2:38:ae:ba:
0f:35:52:e6:9a:77:76:60:9f:d4:11:4d:e8:71:56:76:81:62:
b0:b6:4c:d4:8b:dd:31:a0:72:99:3b:95:f8:fb:e4:6f:2b:1d:
81:6b:3f:c1:f1:d0:19:1c:cc:c7:ef:f7:df:96:c6:61:1c:62:
9c:e6:7f:c3:f8:1c:f9:54:ec:14:72:dd:e4:28:50:e3:d7:30:
37:94:f5:67:53:98:9b:19:d6:c2:82:f4:65:16:4b:a6:af:6b:
ef:7e:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:18 2025 by rpki-client