Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: ZlHQxzAHMf1DpZ8C97W6Fmiwg3lmA707hemd5nUcbbQ=
Subject key identifier: 4A:C5:97:8E:33:3B:3D:45:8E:2A:F5:A1:05:9D:6D:C5:BC:B5:76:BD
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 0199FE7E089CEA199B93519E7ECA4075FA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:36 +0000
Manifest this update: Sun 19 Oct 2025 22:01:36 +0000
Manifest next update: Mon 20 Oct 2025 22:01:36 +0000
Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: H9ck1ycIF7UGz6XyAYGmy7OCeLN+xdTelXjrLV4WR9g=)
2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=)
3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:08:9c:ea:19:9b:93:51:9e:7e:ca:40:75:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Oct 19 22:01:36 2025 GMT
Not After : Oct 20 22:01:36 2025 GMT
Subject: CN=4ac5978e333b3d458e2af5a1059d6dc5bcb576bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:89:4b:7f:b7:b6:e8:9a:4d:78:8c:19:21:
19:bd:1e:95:8b:91:d8:5f:40:68:9c:f4:29:99:24:
cf:87:b1:e1:1b:d9:1e:2b:c1:aa:bf:3a:4a:90:16:
54:6d:2b:83:c7:63:1f:f2:72:7c:94:49:6d:3b:a0:
f3:ac:4d:ec:c9:3f:de:e0:cb:9c:02:cb:e2:2d:85:
09:f3:f2:bb:f7:62:78:79:50:85:4f:68:7e:5d:5e:
46:f8:48:43:0b:85:2c:79:a1:2c:ac:62:f2:60:50:
80:85:a7:c5:27:19:c8:a2:68:6a:20:2e:2a:2a:30:
c4:ca:f2:b6:28:fc:33:18:a7:1e:00:81:be:93:0d:
59:88:7b:8c:49:5c:67:ff:bd:43:a2:5b:1d:f4:cf:
3d:78:18:df:ce:32:bd:04:03:60:b4:70:55:9a:5f:
18:0b:db:83:34:7f:aa:03:29:aa:40:bd:d9:8d:dd:
83:db:14:ac:97:da:f0:64:8d:30:ba:70:89:59:d9:
b5:a3:24:66:ea:ab:b3:40:4c:8d:cb:b5:93:12:d2:
82:07:e1:d2:1a:62:82:b5:8d:38:40:a5:ad:c9:03:
82:9e:75:df:53:d6:78:31:25:7c:b4:40:ce:92:c1:
7d:8e:38:93:7f:a7:7e:19:86:93:23:b5:48:3d:cf:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:97:8E:33:3B:3D:45:8E:2A:F5:A1:05:9D:6D:C5:BC:B5:76:BD
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:15:1e:05:86:6d:7e:48:b2:89:c5:68:96:63:86:ef:e3:
58:15:73:ef:fa:73:57:84:5d:00:1e:79:d9:77:f1:88:a4:d1:
43:7c:fc:7b:90:13:33:02:ef:97:6d:1a:23:cb:4b:f6:7b:80:
ac:65:06:43:1f:13:ff:71:ef:cb:64:fb:54:18:a3:4c:d0:f2:
8b:20:8d:ef:58:94:10:60:a8:45:cf:6a:05:cb:7f:b9:8e:69:
9f:7c:12:df:35:df:99:3f:16:3a:93:62:ed:65:3a:c3:b0:99:
11:92:e1:d2:ee:e3:51:7f:ca:f7:5e:7f:37:46:33:bb:d7:c7:
d0:f7:52:cc:4b:c5:c2:f6:68:46:9a:96:2d:e2:03:58:f9:d7:
a9:59:d0:b5:3c:ab:b7:a7:f6:62:b4:2e:7a:fd:da:01:e4:2a:
34:dc:71:d1:73:a5:71:ad:c7:b4:8b:69:c7:82:d7:42:c6:13:
07:b7:13:ef:89:45:7b:fd:17:34:0f:49:5e:78:e4:7e:16:23:
54:df:d4:5a:93:d4:2a:73:6e:9a:a5:9e:d3:4d:4c:00:44:a5:
9b:80:2c:81:84:f5:d6:0f:bb:24:22:79:41:d3:e6:31:ba:e5:
7c:3b:f9:10:2d:af:fe:40:8d:82:27:df:97:12:1e:3d:af:c0:
6d:8f:02:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fgic6hmbk1GefspAdfpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5
ZmJhYmYwHhcNMjUxMDE5MjIwMTM2WhcNMjUxMDIwMjIwMTM2WjAzMTEwLwYDVQQD
Eyg0YWM1OTc4ZTMzM2IzZDQ1OGUyYWY1YTEwNTlkNmRjNWJjYjU3NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO2JS3+3tuiaTXiMGSEZvR6Vi5HY
X0BonPQpmSTPh7HhG9keK8GqvzpKkBZUbSuDx2Mf8nJ8lEltO6DzrE3syT/e4Muc
AsviLYUJ8/K792J4eVCFT2h+XV5G+EhDC4UseaEsrGLyYFCAhafFJxnIomhqIC4q
KjDEyvK2KPwzGKceAIG+kw1ZiHuMSVxn/71Dolsd9M89eBjfzjK9BANgtHBVml8Y
C9uDNH+qAymqQL3Zjd2D2xSsl9rwZI0wunCJWdm1oyRm6quzQEyNy7WTEtKCB+HS
GmKCtY04QKWtyQOCnnXfU9Z4MSV8tEDOksF9jjiTf6d+GYaTI7VIPc+jsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErFl44zOz1Fjir1oQWdbcW8tXa9MB8GA1UdIwQY
MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt
Mjk0ZDljZjc5ZTJlLzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl
LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG4VHgWG
bX5IsonFaJZjhu/jWBVz7/pzV4RdAB552XfxiKTRQ3z8e5ATMwLvl20aI8tL9nuA
rGUGQx8T/3Hvy2T7VBijTNDyiyCN71iUEGCoRc9qBct/uY5pn3wS3zXfmT8WOpNi
7WU6w7CZEZLh0u7jUX/K915/N0Yzu9fH0PdSzEvFwvZoRpqWLeIDWPnXqVnQtTyr
t6f2YrQuev3aAeQqNNxx0XOlca3HtItpx4LXQsYTB7cT74lFe/0XNA9JXnjkfhYj
VN/UWpPUKnNumqWe001MAESlm4AsgYT11g+7JCJ5QdPmMbrlfDv5EC2v/kCNgiff
lxIePa/AbY8C3A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:04 2025 by rpki-client