Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier: CxmRfPVZbtWpPPZUdhfL+lZ47phvg88Cg0+Ms829TI4=
Subject key identifier: 7D:ED:AF:03:07:C9:0B:8A:5C:48:10:EB:DE:37:2A:16:E4:8D:A0:E0
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial: 0199FBEC233490B76D232C1D713C2C5543AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number: 0875
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=)
2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: RB1lRLvEZeNCuQjMJnDbIMp6ZVJabMck078usSvNeiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:23:34:90:b7:6d:23:2c:1d:71:3c:2c:55:43:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=7dedaf0307c90b8a5c4810ebde372a16e48da0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:52:a3:24:f6:d9:c9:6e:c4:6c:97:7e:d8:
95:2f:9e:e2:d6:af:02:e8:50:ac:bc:43:c5:fb:c5:
9f:3c:7f:f5:c5:6d:88:eb:dc:c6:16:4d:80:15:44:
1f:98:82:e3:39:a7:e1:ff:f7:34:7a:dd:d2:79:22:
f0:53:26:e9:3d:fe:80:da:0e:3f:37:4d:8e:f7:ce:
72:08:fc:b0:6e:4e:ab:52:88:d6:be:24:fb:fe:6c:
bf:89:9c:d8:d5:3d:c4:87:74:4a:82:af:ef:ed:07:
c3:eb:57:70:1a:07:b0:15:66:88:87:6d:40:54:cc:
33:c0:7d:7f:29:63:f8:4f:a4:cc:28:03:3b:0b:bc:
13:21:b0:fc:1b:9a:87:ee:17:be:1d:66:99:4e:b0:
19:2a:c9:72:74:a0:83:9a:77:2e:8f:a8:74:4c:58:
f9:f8:43:b4:8d:ff:dd:4a:8c:27:5e:0a:95:8c:36:
77:b2:b0:3c:b3:48:cc:5a:81:40:de:2b:af:58:89:
55:10:6b:9a:71:a6:25:01:75:d6:de:44:97:21:ef:
ca:f8:9f:53:f7:c8:17:c6:47:8c:88:d9:a0:bb:37:
40:91:8a:69:f1:7d:98:3a:d0:92:c3:53:f9:22:39:
ff:37:9e:88:b8:73:f4:cc:7b:6d:0d:a9:dc:c1:36:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:AF:03:07:C9:0B:8A:5C:48:10:EB:DE:37:2A:16:E4:8D:A0:E0
X509v3 Authority Key Identifier:
keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:fe:a4:7a:0d:10:4d:04:af:44:2c:14:9d:2b:49:26:6b:
b7:80:c9:b2:b5:7d:2a:25:13:64:35:d4:d0:0e:7b:00:19:5e:
1f:05:89:b1:7e:b0:87:68:48:0b:69:a5:34:51:82:5a:a9:3d:
90:33:77:06:93:d7:82:a1:f1:98:91:7d:bc:f1:c4:07:fa:20:
c5:54:4c:73:be:64:05:92:be:9c:0f:13:cf:75:b6:c2:72:a8:
b6:31:fd:f5:86:29:61:f9:87:10:09:d3:3b:ea:05:ba:ef:1a:
4b:1f:63:97:34:b8:4f:f6:25:ff:53:1c:6b:4a:59:e6:05:69:
55:5d:d4:fd:5c:8a:f6:ce:5c:64:7f:d3:8d:fb:fb:ec:8a:4e:
a6:39:23:4d:bb:90:0c:9c:d2:98:da:bd:bf:de:00:88:fd:d3:
0d:2a:40:dc:7c:11:a0:70:af:ea:76:f1:97:15:75:c4:c6:2f:
f7:ac:91:77:88:1a:e7:32:34:11:e3:bf:35:5d:6a:36:46:b6:
04:cb:56:09:09:6f:d9:5f:35:2e:e3:21:c2:47:6f:bb:58:31:
f0:39:4b:d9:17:a3:44:6f:b9:79:bd:28:37:73:b0:4a:0e:e9:
7d:bb:60:cf:cd:48:78:0b:b2:84:7d:18:aa:63:c0:71:75:86:
0b:94:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:39 2025 by rpki-client