Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json)
Hash identifier: 6I/IViG80u2KWt1+ckKqsZ0yYjQGCbl8400+JaEUxh0=
Subject key identifier: 20:6F:75:73:D9:CF:FA:A3:B9:7C:AF:8A:96:65:CD:25:21:1E:50:F1
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 0199FCFD5F0FC7EED3F3FFA64A258DAD75FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
Manifest number: 15BB
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=)
2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: L/7ZzTx3Cx1NYPg3Fj0osT4SezKz2st6ZlLEnUFrKTw=)
3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=)
4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=)
5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5f:0f:c7:ee:d3:f3:ff:a6:4a:25:8d:ad:75:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=206f7573d9cffaa3b97caf8a9665cd25211e50f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:4d:95:0c:d1:23:75:70:76:26:cb:36:9e:
10:aa:fa:59:5d:77:17:0c:eb:0e:9a:61:5c:a4:f2:
6b:6f:79:15:67:df:aa:31:e5:cd:56:cd:2d:b0:bc:
3e:3e:e0:94:da:e3:7f:0a:c8:5b:32:88:28:93:8e:
4f:c1:b2:57:e3:ca:bc:40:c2:97:e1:d5:2e:90:b0:
4a:33:d1:c3:2a:05:54:54:bb:d8:03:51:c0:41:ca:
c0:6c:95:26:5f:84:4b:40:2e:6d:c9:24:f9:71:75:
27:a7:87:a2:ed:af:57:c6:6f:33:40:e9:54:30:a2:
45:74:11:f9:6c:e4:69:53:fd:83:86:cf:bd:31:10:
1f:11:54:ca:60:4a:c0:1e:73:42:d1:ee:a3:db:77:
8b:c1:4a:e5:53:96:bd:17:6c:fb:78:ee:7b:d8:dc:
fe:f6:f7:6f:f6:eb:5b:0b:49:29:b4:e9:09:74:82:
f1:11:89:17:d4:f6:5c:3e:51:cb:3f:48:59:26:50:
a4:6d:df:64:c5:f3:27:3f:f8:0d:f9:2d:17:3a:64:
20:8b:12:32:00:0d:aa:40:f3:54:6d:26:fb:f9:67:
07:db:5b:1d:bb:d4:a4:78:31:32:42:94:0e:79:e4:
9f:76:ee:48:4d:7a:f0:f8:15:84:07:1e:73:4d:8c:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:75:73:D9:CF:FA:A3:B9:7C:AF:8A:96:65:CD:25:21:1E:50:F1
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:fe:c4:16:bc:4b:33:56:95:f0:94:e8:6c:bf:7d:96:84:
20:3b:20:10:b1:ff:97:90:c3:fa:5c:81:b6:47:53:e3:b6:e7:
26:57:b1:6f:85:97:5e:c0:d8:08:6a:55:54:ff:8f:eb:bf:f3:
33:d6:48:c2:55:79:73:39:85:f5:3a:40:0d:10:3a:58:e5:9e:
3b:86:a4:3d:ce:1c:4d:66:ce:fe:1a:d5:2b:c5:66:4b:06:ed:
a2:8f:5b:a2:30:46:cd:e7:36:71:b9:e9:d2:4c:8e:46:ba:96:
93:de:02:bd:c2:74:b1:63:1f:73:3c:0c:d3:3f:b9:9c:25:4f:
0a:b4:57:9d:4d:76:c9:2b:3e:70:26:34:c8:d2:d9:dd:1c:20:
82:c0:8f:55:7b:90:e5:a6:7d:80:cb:5a:61:36:92:03:e1:b1:
35:93:08:8a:74:04:ed:7d:4f:dd:d4:f2:5c:4f:96:43:0a:b6:
1e:90:8a:10:df:c7:ad:9d:ae:a0:ce:cc:b6:ee:71:cf:41:8c:
cd:bb:cf:37:ea:b0:de:9b:b1:77:00:d5:13:c8:8e:e2:0d:a0:
f3:fd:75:4a:f7:22:b7:dc:a2:10:57:2a:54:fc:da:cc:8b:1e:
71:9d:df:81:0f:53:82:75:14:78:62:d5:95:cc:8b:3c:43:07:
77:2e:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:56 2025 by rpki-client