Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: 5Y5UkEkjnbb3JjDusbCPgSIdPTkb2+jlia2Oz8Qz0Lk=
Subject key identifier: BD:66:9D:8F:53:88:C0:CE:7D:17:17:EE:C2:C2:A8:A7:34:CD:F2:D0
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 019A72CA7AE8A220D3509C2EEF128A4ED95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 12:01:03 +0000
Manifest this update: Tue 11 Nov 2025 12:01:03 +0000
Manifest next update: Wed 12 Nov 2025 12:01:03 +0000
Files and hashes: 1: 6f9DfsZDUzdPo3_6eNoeG4QK_-I.roa (hash: 4tclq8R1V/fdbnM4AvEGc3ZJVkHqia0uVMOBrni8yPk=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: VvSBZ0a21NQFwkGZxx4QrI2Sh5XvgIM12n6w1KihJUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:7a:e8:a2:20:d3:50:9c:2e:ef:12:8a:4e:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Nov 11 12:01:03 2025 GMT
Not After : Nov 12 12:01:03 2025 GMT
Subject: CN=bd669d8f5388c0ce7d1717eec2c2a8a734cdf2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:90:21:69:be:e1:8e:1e:9b:09:b2:57:1c:
88:e6:b8:af:61:c2:4e:b8:04:10:8c:e0:2e:13:fd:
5e:72:e3:f4:ed:35:25:39:0f:7f:b5:87:3a:56:3f:
7a:2a:dc:ea:b3:4b:8c:33:28:7f:c0:cb:3f:97:18:
fa:a0:0c:db:95:83:a8:30:6e:28:c1:62:e3:01:57:
86:05:a8:e5:e9:2b:b4:a9:6f:b3:e1:0b:79:7a:a8:
49:dd:5f:eb:2a:79:af:31:12:2a:c1:1d:fc:ee:96:
1a:03:b9:be:2a:3d:8a:f0:86:dc:f7:f1:2b:2b:8e:
ad:70:7d:3c:1a:7e:a1:a2:ba:58:09:4c:71:9c:57:
b9:b4:9a:27:c8:67:52:8a:42:c5:b4:8f:ff:bb:ed:
52:fd:39:bb:14:de:0f:4f:ab:18:46:57:b4:3d:ab:
aa:1b:8e:f4:c1:18:f8:f7:b9:94:9c:e6:cc:fe:f1:
67:bb:7f:a0:54:e4:16:69:68:d4:9c:06:e9:9e:aa:
60:4f:78:05:0e:b3:6a:0e:f8:18:e7:4c:ad:94:cb:
7f:09:64:ec:12:b5:cb:fd:72:ff:90:0b:6d:fa:ec:
7b:48:af:fd:74:c1:a1:44:75:b3:e9:5b:27:8e:b2:
3e:4c:74:04:bf:d8:f0:30:f8:f4:81:69:38:e0:f6:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:9D:8F:53:88:C0:CE:7D:17:17:EE:C2:C2:A8:A7:34:CD:F2:D0
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d4:29:c7:61:97:5e:57:f2:2e:11:ce:8a:9a:4e:7e:6b:e7:
5c:56:ba:4d:05:3d:6e:f6:5f:40:9e:01:02:b2:da:84:5d:41:
76:98:87:f1:4b:fb:f1:9c:11:9a:ee:84:d7:62:f7:6e:8f:4c:
55:bf:bf:c7:c7:86:04:7e:eb:be:91:57:6b:ee:90:e1:ab:5a:
43:8f:34:2e:63:04:16:e9:d5:9e:19:d3:0d:80:22:9f:c6:28:
a3:43:17:99:7f:9a:ec:d3:e1:bd:11:0a:ec:20:c1:25:7c:be:
ba:c1:6d:f3:af:af:58:06:29:31:e9:1c:12:f3:69:4c:41:91:
5d:4f:17:0e:96:70:2c:f5:da:47:23:56:3f:84:e3:76:7e:24:
09:ee:3f:e6:96:31:20:4b:a8:8e:c4:0b:93:3e:e1:a0:ed:6c:
54:d6:c4:20:d7:e7:a5:52:ef:e5:8d:2d:0a:ec:32:2d:a9:c6:
1b:6a:55:3c:97:30:28:73:92:35:68:51:ff:4d:9f:e3:8b:12:
03:63:b0:4f:cb:c5:98:57:58:06:e3:ab:bd:f3:09:a4:70:fb:
34:1d:42:f0:d0:dd:58:01:b1:45:c8:bf:c5:c0:da:01:5a:e8:
c4:a2:b0:09:88:60:93:f1:dc:61:04:23:9a:80:b4:be:b6:5c:
a5:e5:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:31 2025 by rpki-client