Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: wKhe3plOdTRIdGmz6QvZxdmb/PI9Rx3xq7V/a9A3PcI=
Subject key identifier: 67:A1:28:B0:F9:66:2E:AA:B4:A5:44:CE:69:31:E4:D7:6D:9C:B0:10
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019A725C47FB3A094D30ABB2EC443BD205A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: bQNf9CyN0fIg3KmkKUuSnAG0HMevCOLTnX91HshkC0s=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:47:fb:3a:09:4d:30:ab:b2:ec:44:3b:d2:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=67a128b0f9662eaab4a544ce6931e4d76d9cb010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:c9:5f:57:ea:ce:69:a5:69:b3:9d:82:84:
d5:b1:50:cd:80:f4:05:c0:8f:45:71:2c:85:18:22:
18:9a:dd:49:17:28:6e:f1:b5:8d:ea:85:2a:23:d9:
40:72:5a:98:dd:42:8f:79:21:4e:8b:b6:d4:35:b4:
e6:82:ba:2a:0a:c4:91:fb:4b:ce:bf:fe:ef:8e:7a:
10:23:9a:96:87:df:0c:06:a9:80:67:fe:0d:0e:6e:
f0:1d:a0:ba:d9:8d:36:62:ff:9f:38:10:d2:79:51:
6e:85:72:9a:ca:9f:29:08:1b:52:0c:5d:73:95:fa:
de:6b:23:fe:1b:2e:e0:b6:e5:5f:a5:0d:1d:94:e1:
51:68:e4:cc:64:76:c4:0c:b7:51:b7:95:69:e1:49:
47:38:03:2d:6e:c9:2c:b3:c5:7f:c8:ef:0a:c4:70:
7e:1a:68:2b:6d:3b:f8:93:f5:60:a8:99:70:3a:30:
9d:37:61:6b:bf:a2:9b:ea:ed:5e:a5:6f:be:8a:91:
38:3c:b2:15:29:b4:44:98:90:68:ee:55:b8:d4:33:
ec:81:e9:6f:d0:05:02:24:8a:ce:2c:b8:b7:64:2d:
78:d4:a3:80:68:26:ff:65:4f:46:18:17:16:61:36:
ee:07:d4:67:89:cd:c0:65:02:67:b1:54:a6:1f:0e:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:28:B0:F9:66:2E:AA:B4:A5:44:CE:69:31:E4:D7:6D:9C:B0:10
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5a:b8:79:15:63:0f:28:49:c1:c1:15:26:45:4f:3a:86:97:
1f:38:3a:2d:82:73:f8:a2:cb:2f:e3:f4:58:a4:19:aa:89:b9:
0d:76:70:b8:99:8a:76:d1:5f:50:51:0a:c6:ad:79:e6:9a:41:
aa:94:c3:7c:8c:69:1b:ce:2c:4c:ef:07:cc:7d:6a:f7:76:fb:
24:11:fe:c9:08:2f:53:ef:f2:f9:49:68:4d:53:31:12:67:50:
fa:17:7d:19:62:7b:87:f2:37:88:81:af:f9:36:70:e9:08:08:
28:61:f0:a4:7d:07:99:ed:a1:70:94:7c:58:c5:9a:b2:02:0a:
c7:5d:8b:68:2c:ca:bb:1f:42:5d:ea:a3:3e:ef:cc:0f:61:de:
85:a4:c3:11:e8:da:1e:0d:9c:02:67:e9:65:d0:c6:eb:98:25:
84:b5:64:a3:35:55:c4:03:9d:42:0a:31:2d:c5:ef:6a:08:9c:
7f:7c:eb:8d:d9:f9:52:6a:36:0e:2f:dd:cd:0a:fc:da:a6:c3:
81:9c:a5:fb:48:00:c6:b9:8a:69:73:42:ec:af:ef:20:f8:68:
24:9c:db:8f:c0:61:ae:a8:1a:46:be:b8:54:ed:2a:8c:ae:85:
50:bd:83:ab:e6:a3:67:ee:00:a9:a7:33:cd:84:5b:94:fc:c7:
21:90:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:10 2025 by rpki-client