Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: ZQLFoElLLDOyfMbbeBrlcuX5Sfj7cZ+XIShynIHPoxk=
Subject key identifier: 15:3A:61:EF:04:6F:CF:AA:34:84:99:08:BF:73:08:CF:DB:2B:2A:EC
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 0197B6D780E34399646F0FA4906469785593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 14EA
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: lgOBX1/6I9iJrGeqnyJ7vAxFLWSTm2Ekx/dVB58c4QU=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:80:e3:43:99:64:6f:0f:a4:90:64:69:78:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=153a61ef046fcfaa34849908bf7308cfdb2b2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:66:ef:8f:61:03:a9:06:c2:82:d7:b6:1b:
02:3c:8a:2a:59:04:2a:22:d1:5c:77:b1:21:84:b7:
e4:00:7f:d4:eb:2e:51:3c:56:22:8b:bd:71:8f:3f:
33:c1:5f:72:37:70:29:3d:5e:3a:65:5c:a7:7d:27:
99:da:f8:ca:cc:7e:6c:d8:86:b0:68:cf:07:43:cb:
79:7e:99:f5:61:af:8b:09:28:22:6d:28:e4:3f:c9:
4c:25:8e:14:eb:c3:1d:20:0a:85:47:61:02:df:01:
61:03:66:f8:3b:96:cf:0b:7a:ac:2d:3c:c5:8c:8c:
90:36:e0:06:3e:75:6b:a0:fe:d3:cf:21:7d:53:7a:
80:b6:52:39:2d:05:39:9c:c8:8d:bf:ad:5c:eb:3d:
39:2d:a7:ba:78:18:6c:2a:47:87:ef:46:75:7b:ca:
64:fc:37:6b:1d:22:ed:4e:c7:79:d5:bd:a6:a3:bc:
6a:96:11:37:59:9c:5d:9b:c9:2c:7d:8f:14:d1:51:
a7:d1:87:7c:a7:d5:3b:a7:f0:65:7a:b2:30:45:0d:
56:b1:18:c9:21:05:96:87:e4:e6:e8:35:03:c2:bc:
f0:8e:e0:7d:4c:74:d4:23:1f:e8:a5:53:f9:f1:ba:
51:f9:63:cd:11:00:49:28:7a:d5:49:16:d0:56:42:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:61:EF:04:6F:CF:AA:34:84:99:08:BF:73:08:CF:DB:2B:2A:EC
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:a2:05:49:b3:08:af:89:4b:2a:6b:77:aa:13:9e:35:f6:
f4:1e:c1:e4:51:36:22:e2:47:e8:b4:53:88:f8:f7:7d:dc:40:
7d:b7:06:5b:46:f7:5d:ff:16:b1:f0:09:30:da:17:ad:2d:99:
3d:c8:7f:7e:73:27:f6:9c:07:be:7b:10:c6:c7:56:5e:3d:0f:
33:b2:06:10:0a:df:53:d1:ab:ec:d3:e2:c2:5b:18:4b:98:58:
eb:df:ce:b1:62:f9:8e:45:fe:87:c6:30:4a:19:7b:23:0c:0a:
58:18:90:b7:91:4d:bf:0e:23:b9:3b:97:c4:8c:39:0d:59:c6:
cf:97:7b:96:36:d6:40:ae:cc:4e:ce:8b:74:a5:3a:35:2e:f3:
0b:2f:df:43:04:97:26:e3:3b:9c:f6:75:59:fe:5a:a6:47:51:
70:50:b7:ad:88:c7:a6:4a:6c:93:83:a8:be:45:3c:fb:de:f7:
fd:8b:23:1b:d9:3e:6e:10:7d:12:34:86:01:5e:0f:83:16:28:
89:10:83:37:4d:cd:91:c7:33:56:99:ef:86:0c:4b:69:5e:90:
71:08:60:b5:48:fe:36:a4:48:f3:44:ce:08:0c:43:4d:1b:e1:
a9:32:06:40:b4:6a:86:0a:31:f3:fc:9d:11:d5:a2:17:74:ca:
14:24:14:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214DjQ5lkbw+kkGRpeFWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4
NWQ4ZDkwHhcNMjUwNjI4MTQwMTA1WhcNMjUwNjI5MTQwMTA1WjAzMTEwLwYDVQQD
EygxNTNhNjFlZjA0NmZjZmFhMzQ4NDk5MDhiZjczMDhjZmRiMmIyYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6xm749hA6kGwoLXthsCPIoqWQQq
ItFcd7EhhLfkAH/U6y5RPFYii71xjz8zwV9yN3ApPV46ZVynfSeZ2vjKzH5s2Iaw
aM8HQ8t5fpn1Ya+LCSgibSjkP8lMJY4U68MdIAqFR2EC3wFhA2b4O5bPC3qsLTzF
jIyQNuAGPnVroP7TzyF9U3qAtlI5LQU5nMiNv61c6z05Lae6eBhsKkeH70Z1e8pk
/DdrHSLtTsd51b2mo7xqlhE3WZxdm8ksfY8U0VGn0Yd8p9U7p/BlerIwRQ1WsRjJ
IQWWh+Tm6DUDwrzwjuB9THTUIx/opVP58bpR+WPNEQBJKHrVSRbQVkIUaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU6Ye8Eb8+qNISZCL9zCM/bKyrsMB8GA1UdIwQY
MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt
M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4
LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP62iBUmz
CK+JSyprd6oTnjX29B7B5FE2IuJH6LRTiPj3fdxAfbcGW0b3Xf8WsfAJMNoXrS2Z
Pch/fnMn9pwHvnsQxsdWXj0PM7IGEArfU9Gr7NPiwlsYS5hY69/OsWL5jkX+h8Yw
Shl7IwwKWBiQt5FNvw4juTuXxIw5DVnGz5d7ljbWQK7MTs6LdKU6NS7zCy/fQwSX
JuM7nPZ1Wf5apkdRcFC3rYjHpkpsk4OovkU8+973/YsjG9k+bhB9EjSGAV4PgxYo
iRCDN03NkcczVpnvhgxLaV6QcQhgtUj+NqRI80TOCAxDTRvhqTIGQLRqhgox8/yd
EdWiF3TKFCQUcw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:17 2025 by rpki-client