Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: Izyes3vieMSMx7hjaA5BsQJKVfXG+8Zv7pPAca7zAVA=
Subject key identifier: 66:13:0D:DD:B9:30:57:93:AB:CA:A5:20:F8:B2:DC:DD:FC:AD:75:A7
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 0199FDD8ECB17CDF226DFAC2D9C509A82E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 0A42
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: yiTpu0EsZkrwfJGH5xe4mOHJxtjJ9hNBqj24H7RI86c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ec:b1:7c:df:22:6d:fa:c2:d9:c5:09:a8:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=66130dddb9305793abcaa520f8b2dcddfcad75a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:41:43:a6:99:11:21:69:81:d0:31:32:a0:
0b:b0:08:c5:b4:db:ea:ea:8c:99:84:32:7c:6a:b0:
cc:dc:52:a2:d2:30:05:b0:26:91:1c:4f:ee:a5:e1:
15:3f:af:81:3c:71:2a:44:db:05:ad:2d:ff:60:45:
c8:7d:b5:f2:df:7a:95:4e:ac:c4:1e:28:09:63:94:
da:37:29:42:e4:cc:4e:ba:e3:99:c4:76:2e:4d:67:
d8:19:7f:67:bd:9e:e0:68:b8:88:24:e7:13:42:b5:
39:7b:ac:1c:6e:30:06:23:c3:b7:ce:39:d2:47:6b:
14:2a:74:d0:55:1b:b0:81:99:82:6a:1a:c5:57:41:
59:da:5c:2a:93:72:8a:8f:ee:4e:dd:c4:ee:95:07:
cc:64:fc:c0:2c:4c:32:18:23:a3:eb:2f:f1:9b:23:
45:13:7d:e4:5b:d2:34:e6:67:a7:21:8e:e7:b7:9e:
87:5c:c3:ae:00:fb:e2:00:24:c0:1a:72:a9:32:f1:
30:19:7c:97:0b:d4:8d:01:35:ff:43:4c:aa:11:9a:
10:3d:c6:2e:58:16:16:6a:90:a8:8a:df:7b:be:bd:
df:a3:98:10:84:ec:1c:ca:6e:ac:56:dc:a4:26:e4:
06:fb:94:7f:d6:af:de:0e:b4:d3:0f:2d:26:e7:e7:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:0D:DD:B9:30:57:93:AB:CA:A5:20:F8:B2:DC:DD:FC:AD:75:A7
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:9e:5f:e2:8a:2c:1e:92:56:7d:db:46:8c:74:07:dc:1d:07:
a9:00:d9:a0:80:3d:38:ae:9e:86:70:63:4d:62:39:40:35:d4:
3b:ad:48:3d:38:74:6d:0e:78:b1:67:4a:06:e4:ba:77:61:70:
7d:f8:3b:ed:31:72:e5:c8:f1:2a:86:b1:0f:eb:44:0f:b5:f0:
e8:8a:74:b0:a7:14:20:bc:a2:a2:1e:ee:86:ba:a4:21:0c:a3:
ea:0a:d9:c1:c9:d3:79:41:06:ed:11:79:bd:f5:99:33:8a:1f:
df:26:71:24:9d:63:76:77:12:de:92:05:1c:42:d5:f6:11:67:
a9:09:e3:25:ab:50:df:b8:bc:98:87:97:c7:ba:27:00:96:d7:
90:88:a8:56:32:d5:4a:1d:c4:4c:d8:75:2a:eb:2e:a6:4d:3d:
52:33:78:a9:55:7d:39:73:3a:f9:bf:1f:e0:ff:08:cd:74:3b:
a4:66:38:07:e5:54:d1:c0:4d:0c:d7:7e:66:22:dd:df:3c:ed:
55:a1:14:d8:12:f6:28:33:95:a2:92:71:45:7b:29:48:e6:f9:
49:b3:1f:ed:d1:05:61:a3:b0:ed:a5:2d:aa:7b:79:9b:3f:6a:
b8:42:9f:42:87:eb:98:76:b4:9e:dc:bd:54:09:3a:a1:06:04:
11:31:61:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92OyxfN8ibfrC2cUJqC6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODdjODQ5MGIzNzIwNDU2NjlmNDVmMTgzMTkzZWVkNDZm
OTkxZjUwHhcNMjUxMDE5MTkwMTE1WhcNMjUxMDIwMTkwMTE1WjAzMTEwLwYDVQQD
Eyg2NjEzMGRkZGI5MzA1NzkzYWJjYWE1MjBmOGIyZGNkZGZjYWQ3NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwpBQ6aZESFpgdAxMqALsAjFtNvq
6oyZhDJ8arDM3FKi0jAFsCaRHE/upeEVP6+BPHEqRNsFrS3/YEXIfbXy33qVTqzE
HigJY5TaNylC5MxOuuOZxHYuTWfYGX9nvZ7gaLiIJOcTQrU5e6wcbjAGI8O3zjnS
R2sUKnTQVRuwgZmCahrFV0FZ2lwqk3KKj+5O3cTulQfMZPzALEwyGCOj6y/xmyNF
E33kW9I05menIY7nt56HXMOuAPviACTAGnKpMvEwGXyXC9SNATX/Q0yqEZoQPcYu
WBYWapCoit97vr3fo5gQhOwcym6sVtykJuQG+5R/1q/eDrTTDy0m5+dd2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYTDd25MFeTq8qlIPiy3N38rXWnMB8GA1UdIwQY
MBaAFAWHyEkLNyBFZp9F8YMZPu1G+ZH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jZDAxNjktZmZjMS00MDFhLWFiYmQt
YmEwMzNmOTA3ZDkxLzEvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jZDAxNjktZmZjMS00MDFhLWFiYmQtYmEwMzNmOTA3ZDkx
LzEvQllmSVNRczNJRVZtbjBYeGd4ay03VWI1a2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzp5f4oos
HpJWfdtGjHQH3B0HqQDZoIA9OK6ehnBjTWI5QDXUO61IPTh0bQ54sWdKBuS6d2Fw
ffg77TFy5cjxKoaxD+tED7Xw6Ip0sKcUILyioh7uhrqkIQyj6grZwcnTeUEG7RF5
vfWZM4of3yZxJJ1jdncS3pIFHELV9hFnqQnjJatQ37i8mIeXx7onAJbXkIioVjLV
Sh3ETNh1Kusupk09UjN4qVV9OXM6+b8f4P8IzXQ7pGY4B+VU0cBNDNd+ZiLd3zzt
VaEU2BL2KDOVopJxRXspSOb5SbMf7dEFYaOw7aUtqnt5mz9quEKfQofrmHa0nty9
VAk6oQYEETFhNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:27 2025 by rpki-client