Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: /VNf+kQyWMR7FhkbDAlFmfFns7YfyFC4UvozNCxfync=
Subject key identifier: BD:91:3B:FB:4F:FA:3F:53:05:85:51:27:57:DF:87:59:74:C6:93:AE
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 019A71B7F63CF2C6FF506729139F8C0D5D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 08B2
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=)
2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: hHpyrV2L/PMgKpr/oHxLmh7zJz3Kwn+JUzL30eF44TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f6:3c:f2:c6:ff:50:67:29:13:9f:8c:0d:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=bd913bfb4ffa3f530585512757df875974c693ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:49:ef:4f:f2:87:14:0d:2c:30:39:b6:78:
5e:ca:48:2e:65:20:20:e6:bd:e2:93:24:d2:55:ef:
87:79:cd:2a:25:68:8a:f3:5e:f9:ec:30:5b:25:34:
ad:28:cc:fe:a4:0f:b6:29:c1:08:72:3d:8a:56:3e:
66:35:2d:49:a0:59:86:13:1a:42:5b:cb:fb:b9:3f:
3c:e9:3b:bc:fe:da:a1:f6:8f:e2:bc:1b:11:6d:16:
c7:22:bd:6d:5b:82:0e:1b:c3:9e:73:e0:9c:eb:6f:
8f:c9:f4:7e:ea:cd:ac:9f:95:a8:c4:e7:54:8d:45:
89:9e:39:3e:a2:a8:51:97:a7:fb:7d:8e:34:44:82:
8b:1e:79:a8:88:f2:e6:05:d7:b5:32:ee:35:4b:51:
83:54:d8:83:8e:ff:9d:83:0f:3f:87:58:94:a6:36:
94:23:ed:83:fc:bb:ac:71:5a:9c:b0:46:cd:b3:a2:
a9:6e:21:10:11:f7:71:3c:a7:5b:c8:b4:90:3f:f8:
e7:b8:e7:64:49:ea:f9:c9:f4:6f:67:5f:9e:7b:8e:
62:ca:cf:6a:9e:ab:76:43:23:e6:2d:44:1c:0d:2d:
bc:35:ad:9c:e2:ae:f4:fe:15:7c:db:af:b1:5e:46:
15:b0:13:67:f7:99:9d:84:42:c1:c9:c4:a7:36:ec:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:3B:FB:4F:FA:3F:53:05:85:51:27:57:DF:87:59:74:C6:93:AE
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:55:f1:6c:18:83:f9:87:2b:ce:ec:22:45:bf:1d:7b:8f:a9:
8e:c5:41:45:cc:e4:06:4d:e8:2a:81:18:97:ff:77:61:1c:e6:
11:2c:f3:68:73:54:56:38:8d:66:49:eb:5b:39:5d:a6:59:ba:
a3:25:9c:f5:52:b3:97:9f:3f:31:e0:da:c3:9e:17:42:24:de:
02:12:7e:af:06:04:86:ef:d0:65:de:cf:1d:a1:fc:94:90:e2:
12:d8:c6:f6:3d:68:65:a1:00:1f:09:3c:35:db:77:9b:1b:db:
9d:33:17:31:32:aa:b3:e2:f5:f4:b1:e8:c2:fb:31:f8:0e:0e:
87:ff:06:c5:fd:9a:72:8e:99:49:c3:05:c3:b0:dc:12:47:a3:
e9:9c:c1:0b:4b:f5:ce:37:96:36:1d:43:d7:97:2e:57:a4:11:
bb:2b:d2:77:d4:7f:2d:f7:57:3a:af:79:51:6a:44:6e:b9:27:
73:66:6d:94:0b:b8:95:09:c9:3e:90:49:2a:2e:d2:8b:a9:27:
98:60:d9:24:30:77:92:09:9a:d2:20:45:da:3e:c3:ea:1c:ea:
bc:e2:b1:ca:c8:a3:d3:17:85:59:25:39:f7:71:34:bd:60:f6:
eb:df:af:fe:97:2e:6a:d0:34:9f:af:f7:ae:8d:85:b1:e8:3e:
e6:bf:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:52 2025 by rpki-client