Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: CdA4BLhbTWJeLoKtjNt3IpNawDLg+aUOEFvVLFRGzlo=
Subject key identifier: DF:2B:ED:0A:E2:A0:2E:F9:6B:E4:98:88:93:72:9C:51:5B:3E:90:3A
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 0198D773C6DBFFFDE21BD21279BD71DE793E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0C04
Signing time: Sat 23 Aug 2025 15:02:25 +0000
Manifest this update: Sat 23 Aug 2025 15:02:25 +0000
Manifest next update: Sun 24 Aug 2025 15:02:25 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: BEjcLFBohITH1pkz822MBPiZbdXwGt81P2Cd5nuRdoo=)
2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c6:db:ff:fd:e2:1b:d2:12:79:bd:71:de:79:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Aug 23 15:02:25 2025 GMT
Not After : Aug 24 15:02:25 2025 GMT
Subject: CN=df2bed0ae2a02ef96be4988893729c515b3e903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:37:a5:51:db:c1:02:26:00:d5:29:db:cb:
8b:e0:86:d9:3e:81:87:7f:cc:d0:1d:fd:72:a0:4e:
49:fd:7d:94:2e:ad:27:4e:85:0e:d5:f1:bd:25:87:
1e:9c:e2:4e:b7:47:c9:09:53:37:d5:ba:13:88:5e:
bb:e4:99:e0:ef:e9:54:6a:ff:32:0c:fc:40:59:12:
ce:df:06:01:25:ef:0f:91:28:e8:06:9f:87:1a:d7:
bd:e4:dd:8a:46:db:29:58:e8:6d:45:c7:50:51:81:
98:3f:a7:cc:04:c7:ef:51:8e:ca:8b:55:81:d1:8c:
d0:95:b1:1b:60:5c:91:53:03:53:39:f7:dc:55:01:
74:fe:63:38:21:4a:49:9e:bd:ee:3a:00:cd:51:f9:
fe:03:b2:a3:42:e2:40:32:4b:e1:e5:2b:e4:90:17:
95:8d:70:f5:06:8b:3b:c2:7d:b7:91:97:a3:40:bc:
5a:72:ea:ff:45:cf:43:01:e0:a8:93:ce:96:38:e5:
26:a0:67:c8:73:c7:52:9d:c5:d1:d1:0b:6a:7d:00:
7c:af:31:52:0a:65:dc:79:94:d4:b0:8c:f8:f8:f4:
ad:dd:e8:d6:83:53:6d:65:7d:3d:85:50:6f:38:76:
66:11:80:15:f3:01:42:4a:ac:f7:98:51:96:fa:5d:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:ED:0A:E2:A0:2E:F9:6B:E4:98:88:93:72:9C:51:5B:3E:90:3A
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:82:68:6c:dd:4f:31:f5:d6:29:b5:9d:3d:92:ad:f3:78:81:
8a:78:9a:d5:63:44:66:94:94:6b:ac:3d:7c:7e:0e:c5:ae:4f:
fb:59:79:78:e1:8c:5f:e4:dd:25:9d:51:ed:8e:ef:c4:fd:86:
8f:5f:5e:36:80:31:0e:d7:71:a8:da:44:40:dc:b1:1b:69:06:
96:92:06:b9:4e:60:0b:26:06:49:77:c2:d2:52:0f:dd:34:04:
7f:8b:9e:6f:f0:97:65:81:fc:81:ec:59:04:cf:e8:f4:f0:94:
55:8c:54:78:af:a4:42:5a:99:a4:65:13:c3:64:f3:c2:27:ef:
1a:49:8a:c5:01:d5:86:c0:34:87:80:3e:3e:e4:4d:5d:81:aa:
c0:0b:e3:db:61:04:10:7e:ec:17:1d:8b:7d:a6:1d:9a:27:58:
18:1a:c3:3f:0f:d0:06:96:e3:58:e2:0c:52:7a:e9:df:60:89:
c4:93:09:8e:39:e0:f7:68:20:31:a7:a0:15:d7:22:83:92:5e:
17:01:c8:4b:3d:32:fd:e2:b1:e2:7b:fd:2b:51:a0:f6:47:e9:
b5:a5:39:f3:2c:bb:d2:b3:97:3e:97:7a:19:5d:ba:00:d9:11:
48:23:03:7c:81:a3:06:f7:4e:6a:24:3a:59:4c:73:4c:13:95:
0e:0a:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:33:12 2025 by rpki-client