Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: M3N9HvEnvLy35LrsU1rNuWFu+TXcWmnEAGyfYo1uK4Q=
Subject key identifier: F5:D6:D6:B8:FE:63:38:1F:89:7C:92:0A:10:A0:1F:06:21:DE:BC:FF
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 0198D47242D23F65F4502687E0B04D9AF677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 09A8
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: T3ULXFaBfJMBP6y+958PNebitGb+beIpi/Dy4yiL9R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:42:d2:3f:65:f4:50:26:87:e0:b0:4d:9a:f6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=f5d6d6b8fe63381f897c920a10a01f0621debcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:c8:05:34:78:b1:70:9f:fe:8e:e9:a8:d7:
1f:9f:f4:81:74:42:54:5b:bd:b9:b9:98:54:90:1e:
b4:b9:25:f6:7a:50:0f:dc:0d:0c:73:59:b7:05:04:
52:4c:b4:77:0e:65:89:22:53:b8:91:f9:0c:a6:b0:
d1:c4:4e:fb:67:09:7d:cc:e0:ec:8f:17:ad:a3:bb:
a9:b0:ad:db:59:39:e4:18:72:2e:5b:b1:28:ba:90:
1f:b4:06:57:38:ef:09:65:da:49:5f:fc:d6:e8:c5:
36:50:65:ad:b7:d8:09:4a:f8:7f:08:a1:a5:7b:04:
49:a5:b8:5d:74:b7:c7:aa:ac:1a:e7:ee:29:00:af:
0a:93:41:ce:93:7f:79:04:06:03:65:3f:aa:84:59:
a6:ad:e0:5c:a4:ee:7b:22:12:33:41:6a:a5:95:6b:
48:f0:2d:88:d2:1e:7b:73:bf:50:50:c6:09:e0:ed:
6d:99:2b:6b:8a:7a:4f:20:3f:c6:2c:d8:35:0a:02:
fe:d1:f2:17:fa:0f:0f:ed:af:c8:58:32:0d:a0:a2:
61:e8:a1:c0:36:61:90:9f:6b:22:e2:3f:8f:d9:61:
59:f2:4a:a6:a7:d2:36:94:9e:35:da:37:8b:81:47:
70:b6:ce:4d:fd:2c:52:ce:b1:2d:f8:d3:32:5a:80:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:D6:B8:FE:63:38:1F:89:7C:92:0A:10:A0:1F:06:21:DE:BC:FF
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6e:05:3a:59:67:af:3b:e5:ab:8d:ed:41:00:c8:7e:3e:1a:
e2:83:08:1a:e4:c4:d3:9c:d7:34:d5:02:7d:43:00:32:95:c6:
a5:76:72:b9:b0:46:f0:89:d2:30:68:e4:ec:00:3d:19:ca:3f:
39:27:b4:84:78:5c:3f:47:e2:c5:84:90:9b:f5:b5:14:84:bd:
bb:70:23:1b:66:22:63:b1:30:a1:a2:9a:54:73:af:fd:a0:5c:
fa:ae:f9:04:56:c1:4a:a6:36:68:93:d2:ed:13:be:74:0f:0c:
47:7c:2d:68:da:93:49:71:9c:d3:6a:40:90:0a:10:57:b5:eb:
84:c4:0e:98:0f:e6:a5:89:b9:46:b6:0c:48:7c:2a:16:f1:0a:
96:ca:19:99:c1:d0:d2:c2:a4:79:aa:64:39:a3:ea:63:5e:c6:
5e:04:e2:f7:e7:9e:96:5a:7b:5e:ef:d4:dd:fb:5e:ed:57:fc:
fc:a8:b8:89:03:59:ef:6e:eb:7b:5b:6b:e0:10:7a:b0:0c:bc:
d2:9d:45:89:67:66:ae:e1:f5:e8:81:f3:9a:9a:e1:c3:02:59:
9c:fc:f5:8a:62:19:1c:d9:63:59:ce:44:f6:cd:a7:0e:b2:c8:
39:d1:e0:40:79:ac:e1:0a:c5:e9:8e:51:f9:f8:fc:b0:6b:e3:
4b:11:27:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:56 2025 by rpki-client