Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: sBjrjs1/iSUhFCjRLuEHeA4Cne3trZKB253BJmZ6Jfc=
Subject key identifier: 4A:D6:2B:6F:32:21:D6:46:43:45:51:D3:F6:5F:D0:93:10:E6:45:17
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 0199FEB4BB5FD9B1BA502D53FC803483CA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0C9D
Signing time: Sun 19 Oct 2025 23:01:21 +0000
Manifest this update: Sun 19 Oct 2025 23:01:21 +0000
Manifest next update: Mon 20 Oct 2025 23:01:21 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: b4a5bGMpuO8LNiYqjjmTUj1iZLyAIBmtR437AJOMNSk=)
2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bb:5f:d9:b1:ba:50:2d:53:fc:80:34:83:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Oct 19 23:01:21 2025 GMT
Not After : Oct 20 23:01:21 2025 GMT
Subject: CN=4ad62b6f3221d646434551d3f65fd09310e64517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:1d:ef:00:b5:f3:52:fc:e0:fc:4b:1e:53:
2a:49:8b:35:f1:6e:72:48:b0:4a:2c:8e:c9:45:7e:
8b:5b:7c:28:a5:54:07:dc:6c:c7:3d:79:d8:87:2b:
d2:d4:e1:1e:df:41:e6:4f:41:91:bd:23:fd:14:0c:
dd:02:60:5d:52:49:b7:e3:4a:dc:08:c3:53:31:c5:
88:ee:54:14:8a:f2:33:d4:d4:4d:8b:aa:8b:f1:bb:
4a:30:29:8b:c1:f7:f0:07:24:f7:c9:c3:2a:ec:3e:
d7:8a:1c:cc:fc:56:d5:dc:45:28:10:90:e9:6e:cb:
de:7d:ef:1d:a5:95:ff:85:53:f6:8e:6c:e4:9f:57:
a0:94:3d:64:2e:08:52:58:29:5d:b9:56:ab:ff:c9:
31:6f:5b:df:12:0f:ed:c7:c1:ac:30:ca:3b:81:6b:
d9:9b:70:e0:f9:f1:1b:c2:6b:3a:3d:c3:a4:b2:f0:
de:1e:06:d8:67:58:dc:93:46:c6:1c:2a:ca:d8:18:
a6:46:5c:4f:11:85:b1:04:85:ff:f3:76:8b:24:27:
5e:87:23:78:c9:03:f8:a5:7b:da:e2:ca:77:c5:e9:
8b:14:5a:ef:87:9a:47:c1:6c:94:de:48:fd:63:d7:
e1:ca:91:63:3a:b0:c7:f6:eb:05:8f:53:1a:d5:50:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:2B:6F:32:21:D6:46:43:45:51:D3:F6:5F:D0:93:10:E6:45:17
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b2:da:40:72:70:ee:37:fc:dd:9b:7e:c3:c0:fd:b2:ca:5a:
b0:9a:3d:0b:db:d5:95:4a:5a:d3:5b:8e:9f:cd:a8:fa:7e:74:
c3:e7:6c:39:81:ef:6d:73:6b:96:b3:55:b7:db:5b:9e:9b:9e:
f9:3e:54:11:13:0d:f4:e2:08:20:3f:4d:ad:2e:1e:ea:52:87:
32:a6:fb:b2:7c:9b:86:10:fc:b4:30:f1:a2:b3:ca:db:ac:f8:
f1:de:8c:a0:df:de:79:67:0f:85:01:aa:20:22:1c:86:04:d2:
91:ec:7f:5c:25:e1:c8:5e:de:34:01:00:27:f9:01:7f:7f:3e:
71:02:46:8b:d0:17:79:ee:78:58:73:1b:3e:ee:25:07:91:16:
07:79:d5:bf:5c:50:20:43:ce:0f:df:39:3a:c9:3a:f9:d5:9e:
66:38:80:39:84:91:22:fb:9a:3a:0e:55:94:02:a3:32:68:66:
99:7e:22:58:cb:f4:a4:dc:8c:97:7a:90:da:39:ee:6e:38:f6:
31:54:42:37:f6:04:be:ff:bd:08:96:8d:e8:f2:f0:c0:b3:e2:
e1:a3:d0:fb:25:aa:c9:88:b8:ec:06:cb:e9:75:e0:5c:3d:99:
dd:ce:a4:88:dd:69:91:e9:61:28:a6:5e:6c:15:9d:a7:35:39:
02:0f:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:41 2025 by rpki-client