Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: gpPXtIIo2XvMPo0YXbIExMYo7EKrLYAxeVk8pJRF5Xk=
Subject key identifier: DF:DF:C8:EE:29:CA:BE:96:2A:7B:D0:7D:3C:61:F8:BA:EC:0F:0C:6C
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 0198D65FFF7CE085BD811F9AB8BE83EA03D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: MBWQ2SEwoy+aI7Db57f5V9iDNFom2QBXchAGsY3TqcY=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ff:7c:e0:85:bd:81:1f:9a:b8:be:83:ea:03:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=dfdfc8ee29cabe962a7bd07d3c61f8baec0f0c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:a9:d8:71:06:80:60:f1:f7:0c:33:53:e2:
c6:94:14:35:50:db:73:aa:68:51:40:fb:11:e7:ee:
9d:1c:70:d2:48:18:be:65:f7:9e:51:b6:a2:97:ee:
fb:ed:36:1c:4a:1e:58:fb:98:b4:4c:fe:58:f0:09:
9a:98:93:cb:ab:0c:14:73:1c:b6:d5:55:f1:c1:ed:
f6:26:a4:7b:9a:4f:e2:b3:20:4f:84:fe:78:4b:25:
17:d6:5c:fe:06:f9:3c:54:c8:3b:ca:fd:21:f3:d1:
d1:76:2d:8a:dc:84:28:e8:4c:95:57:1e:9d:9e:22:
a0:fe:0b:9d:e6:12:d7:9f:d3:d4:25:23:ba:ec:58:
05:dd:f1:20:91:d5:e3:55:b7:73:b6:b4:8a:ee:bb:
c4:7d:a3:a5:2b:54:2b:36:9f:3b:70:cd:b4:e1:86:
e2:6a:e9:e5:41:47:bf:ef:a2:a8:69:24:ce:c7:de:
fe:bd:12:0b:7f:e1:25:79:cd:ff:89:df:76:b9:02:
7b:da:84:bc:93:04:da:09:aa:fa:45:e4:20:9e:ef:
ed:5d:6f:cd:f2:a1:f3:29:37:49:08:80:81:ee:6b:
3e:64:60:06:4f:1f:08:03:c6:fa:ca:84:49:0e:1a:
7d:62:c2:d8:70:48:97:d6:8d:35:0f:d9:89:b8:f0:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:C8:EE:29:CA:BE:96:2A:7B:D0:7D:3C:61:F8:BA:EC:0F:0C:6C
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:cf:30:42:2d:7b:ae:2e:25:c8:47:24:71:07:b5:be:5c:
6b:f9:45:ce:69:0a:a9:9d:1c:a7:e4:99:b8:8c:0f:78:df:fb:
89:3f:ce:89:f5:02:2e:3f:29:81:2a:78:dc:99:96:e6:67:26:
4b:c4:a0:be:79:e1:59:8c:ea:a0:3f:bd:18:28:43:f1:0b:9f:
79:f4:a7:e8:0d:f9:1e:89:5a:35:ce:32:60:ed:00:0c:39:c2:
6a:cf:24:df:22:22:6b:af:94:3c:f2:0d:80:86:f3:16:95:7d:
84:ff:0f:97:02:4a:19:b8:5b:d6:a1:4a:b9:7f:0f:3a:40:1e:
45:0d:85:7a:39:00:06:7b:ea:f7:f0:4b:79:47:9e:44:bf:a2:
0b:84:5d:a8:7c:17:09:c2:39:e4:b3:e7:0d:7b:cb:8e:ee:ea:
4f:87:51:f3:16:17:a2:a3:9a:3a:0c:72:1b:6b:4d:cb:d3:33:
b8:04:f1:99:f3:52:52:38:aa:13:a8:55:10:8b:9d:4e:59:07:
11:2c:45:b7:a5:f3:87:2f:c4:95:5e:11:13:56:92:98:f6:c5:
22:2d:cc:8a:80:bb:66:81:b4:17:1a:5b:6c:2a:67:7b:a1:76:
ed:2a:a8:a9:29:04:1d:08:0f:6f:bd:21:6b:81:ac:6e:6e:cc:
0d:20:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:24 2025 by rpki-client