Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: fMJjdVtNUgOD31lWIC9nlDrqw7qbYum2vJ5Yw8h/wXk=
Subject key identifier: 04:D9:2E:AA:44:12:86:B7:03:96:F7:B7:73:F9:D6:BB:52:E7:1F:7D
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 0199FFC7D98C1C739BC80D249A9D08AA2596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:01:51 +0000
Manifest this update: Mon 20 Oct 2025 04:01:51 +0000
Manifest next update: Tue 21 Oct 2025 04:01:51 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: Xyaxt5FvngPqIc2KZZwWqeUdz0lzDJzwQJCgcTOOZI0=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d9:8c:1c:73:9b:c8:0d:24:9a:9d:08:aa:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Oct 20 04:01:51 2025 GMT
Not After : Oct 21 04:01:51 2025 GMT
Subject: CN=04d92eaa441286b70396f7b773f9d6bb52e71f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:83:85:04:19:b4:96:74:e8:2b:23:58:d4:
a1:a3:f7:e0:92:50:07:04:af:82:b5:21:3e:16:82:
28:03:7a:ea:4d:61:3b:57:3d:7b:67:37:7c:e1:90:
14:f3:65:27:b6:97:99:bb:a4:f0:06:cf:eb:08:e5:
6e:40:8b:99:c5:78:91:fd:5e:09:83:51:7c:06:f4:
bb:03:96:eb:d5:da:2c:63:de:a1:c5:fa:1f:aa:d0:
60:f4:39:9d:29:c8:3e:db:1b:d8:81:57:dd:60:76:
b0:d3:b7:b5:f2:9b:3a:6c:e3:1f:e7:79:d7:8a:2a:
d3:df:2a:2a:a3:77:4d:06:36:0f:4d:6d:da:5c:ba:
05:73:1e:25:33:51:80:34:20:a7:b6:9a:a7:42:05:
f7:32:77:20:50:f5:b3:67:31:93:f8:00:20:05:79:
7b:37:6d:a5:02:d8:10:ac:e6:72:cc:84:81:a5:02:
31:1c:d1:ae:3c:a9:5f:50:f8:98:25:05:04:d7:f4:
7a:85:ae:00:b3:98:23:03:d4:17:76:6d:3b:ba:ea:
13:30:11:86:7f:41:2f:11:d7:06:a1:69:3a:80:b4:
d1:45:12:e8:c3:6d:f8:53:cc:19:99:32:fc:b1:b9:
42:9b:f7:28:97:3d:b3:c2:c8:92:e5:1d:bb:bb:7f:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:2E:AA:44:12:86:B7:03:96:F7:B7:73:F9:D6:BB:52:E7:1F:7D
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:b0:c7:f0:89:f6:cb:f3:91:6b:b8:86:3f:ab:23:86:03:
6d:20:f0:05:c8:6e:04:32:d2:c3:22:19:3c:90:22:cd:25:b7:
50:d2:df:d3:57:92:1a:5a:c8:f9:b3:f4:85:de:96:c1:2c:b0:
c8:6f:3a:0d:67:94:4d:3b:34:52:c8:9c:dd:58:90:ec:54:6e:
74:c1:25:12:a4:e0:c8:4e:fc:e6:e8:de:a2:b1:53:43:4c:34:
73:9a:92:d9:5b:a8:4e:60:22:a7:42:7a:8b:63:af:09:e0:8b:
61:21:c1:e4:72:cb:05:67:67:e4:8c:ed:0a:41:3e:ba:6c:9c:
c4:4a:61:a6:c4:36:92:58:f4:bf:c1:8a:31:47:6d:89:f5:ab:
a0:76:e7:81:88:b5:58:bd:47:bf:5f:4e:62:bb:c5:80:06:94:
28:42:82:3e:4b:6c:e7:25:a3:4b:80:8e:ea:ac:52:7e:f1:87:
5d:11:46:70:41:85:69:d4:a8:3a:4e:67:5a:41:90:f6:3c:34:
ce:01:85:6e:e5:20:bf:4a:75:73:d2:f6:57:c7:16:5a:14:b1:
7e:23:f5:ab:93:a8:73:64:19:25:95:b9:f4:3d:bb:e6:27:b1:
2d:1c:9c:5d:38:d0:a1:61:15:46:19:5e:87:56:09:9f:87:7f:
bd:ea:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:10 2025 by rpki-client