Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: IvwRDPJ0aHFXr20/O0PMFU3k5gc2TNF6Jy29nWkL3dI=
Subject key identifier: 29:E7:4B:26:4E:ED:0A:AE:9B:B1:45:1B:04:52:95:E1:A8:F4:9B:8F
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 0199FDDA064207B9855B94609D0986A4A6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: EF
Signing time: Sun 19 Oct 2025 19:02:27 +0000
Manifest this update: Sun 19 Oct 2025 19:02:27 +0000
Manifest next update: Mon 20 Oct 2025 19:02:27 +0000
Files and hashes: 1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: fyUVd5bH/hmj5ikYhh1icZ+PonRYvM7OaXtOA20I5m4=)
2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:06:42:07:b9:85:5b:94:60:9d:09:86:a4:a6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Oct 19 19:02:27 2025 GMT
Not After : Oct 20 19:02:27 2025 GMT
Subject: CN=29e74b264eed0aae9bb1451b045295e1a8f49b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:c9:ff:85:ca:fa:25:cf:ca:96:e4:3c:4f:
ef:7d:d4:b4:22:b9:3a:47:f7:75:42:8f:c0:2b:f0:
c3:c0:e1:8c:f0:36:da:f3:34:ff:ab:7e:71:6c:1c:
d0:16:fd:b9:ae:0c:20:d7:ec:6a:98:1c:7d:2a:61:
0c:f3:39:c8:94:30:72:99:fd:09:35:e8:cb:11:b0:
5d:bd:5b:40:87:58:dc:3d:9c:a3:03:01:d2:e9:0d:
f5:98:90:6c:09:de:de:41:7b:17:b4:28:fc:f4:80:
39:b0:cf:8c:b7:83:15:74:3d:ba:0b:80:c0:ec:a3:
75:54:bc:77:8f:5b:60:8f:9d:a8:93:98:57:c5:77:
dd:45:4c:a6:13:26:fd:ee:d1:b3:0e:88:15:e4:49:
c7:0e:26:ac:21:3e:d8:ea:a2:ca:09:b6:14:76:05:
9e:0d:65:1c:fa:f2:34:bb:79:1f:50:02:1e:14:ec:
24:48:03:86:a1:99:09:8c:64:39:2a:57:06:e2:3f:
97:f2:1f:43:c6:0b:65:3d:92:ec:f6:26:63:67:4e:
1a:d3:c1:11:4e:db:a1:f5:3d:49:a0:db:fc:2a:44:
1c:bd:11:e7:7b:3a:a3:df:e0:7f:76:fe:d9:b0:6e:
36:3e:d3:a3:a4:07:d9:e7:77:b1:03:17:15:20:89:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:4B:26:4E:ED:0A:AE:9B:B1:45:1B:04:52:95:E1:A8:F4:9B:8F
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:b3:2d:22:62:b5:64:46:de:a5:29:d2:b3:b0:4f:c4:1f:
0b:b6:52:d1:8d:f2:0f:a7:ba:a4:2b:f3:71:f2:cf:dd:83:ed:
6a:73:be:c6:22:f1:1b:6b:8c:8b:7a:36:0c:dc:2d:21:32:ee:
83:29:ff:e1:7a:90:38:ed:2f:97:94:42:d7:91:0d:34:84:6d:
e9:5f:b9:3c:52:c3:65:7b:80:28:5f:c3:e7:a7:e5:a9:d5:87:
07:95:7c:e0:df:ea:7d:30:5d:95:dc:c6:22:95:9a:86:76:d1:
7b:b1:9b:8d:af:8e:c4:49:af:9b:b7:99:82:b7:81:98:74:5c:
06:18:94:1e:4d:32:8e:7e:4d:71:7c:f5:e9:e4:59:a1:1b:ea:
56:2b:fe:59:14:e4:e6:25:9e:c7:4f:b5:59:50:2d:32:8d:a9:
ad:0e:52:f3:49:4e:d2:1e:2e:a2:39:71:c1:7d:63:ba:0b:1b:
09:4b:04:49:b0:12:40:94:be:df:c0:b0:30:0a:9a:8d:55:42:
ab:98:f3:b7:1b:eb:c3:39:7b:2d:90:c1:a7:8c:5d:61:93:7c:
86:c9:e3:db:df:54:c8:78:e9:ea:b4:dc:21:64:68:46:6e:61:
36:2c:11:dd:0b:f5:e3:0a:bb:7d:de:da:64:9d:b7:0e:4d:1e:
9a:cd:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:15 2025 by rpki-client