Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: Sd8Ko1aJKsrDhjQzlUQDrCCzdjT8WDP3+hkTGSrPrpA=
Subject key identifier: F2:52:A0:41:C5:26:54:D1:C6:FC:91:D9:5F:53:C5:7B:5C:08:A1:9A
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 0198D4E01EB7A7AEB46593CA7820E4965D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 10EC
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: 3ZCMzTJJZ49FP/Mr50cdgG2bCB3OhV38fSjGrpO+GnI=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1e:b7:a7:ae:b4:65:93:ca:78:20:e4:96:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=f252a041c52654d1c6fc91d95f53c57b5c08a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:09:86:82:eb:7d:1e:f5:fd:83:66:56:7e:
ed:27:14:c0:7e:07:a2:e9:fc:50:28:e5:be:1a:0a:
4b:a5:c8:b9:b6:5c:c3:36:cb:08:7d:bb:30:8a:d6:
d4:7e:c1:82:2a:43:f1:90:d6:98:46:e9:5d:d8:2e:
8f:db:15:42:55:d9:da:71:16:39:92:68:3b:0e:01:
64:e5:56:ac:b2:2c:cd:93:cf:aa:18:8b:5b:5a:fe:
8c:e6:1b:e5:ed:1f:65:b6:72:ba:fa:32:a3:00:be:
36:85:6d:2e:7a:62:3e:93:88:51:f9:e0:cf:cc:92:
00:64:e9:16:a6:2b:35:d7:6e:d9:67:45:74:c7:b3:
a3:34:7f:ad:ae:17:92:66:bb:78:00:1b:65:59:d7:
81:52:57:d2:91:bb:ec:47:0d:4e:59:6b:8c:78:e8:
e6:46:f5:2c:bf:84:25:1e:80:92:80:d8:b6:c7:ec:
0d:2d:b0:4e:d2:57:6f:b6:10:37:c5:83:62:72:bc:
df:ce:c3:63:c5:6f:d6:e1:a7:90:c7:93:fa:c3:4f:
41:b8:0a:b5:a4:6c:d7:44:55:57:d5:7f:79:23:ee:
9e:e8:76:f7:15:b9:eb:de:92:ea:47:ab:6a:59:57:
b7:94:cf:da:58:f8:31:8e:54:59:ed:32:a9:95:3d:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:52:A0:41:C5:26:54:D1:C6:FC:91:D9:5F:53:C5:7B:5C:08:A1:9A
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:d1:69:3a:27:3c:10:3e:de:46:9a:aa:41:35:73:84:e3:
fb:38:a4:70:37:5a:ad:44:82:e5:bf:b8:b7:de:86:05:76:68:
6d:7c:6e:ad:2b:0f:b6:73:77:ba:93:6c:55:63:eb:47:09:ab:
53:e7:e8:b1:22:7e:66:72:83:41:82:ef:68:75:70:05:ce:20:
56:c3:1a:20:51:dc:10:33:21:d7:c0:fb:98:85:3f:4e:2b:5c:
82:c1:8a:99:99:e9:55:ce:9a:01:67:57:36:c6:46:5a:9d:a4:
c4:37:3b:b7:61:82:b5:f4:54:00:03:22:39:f9:b3:3b:fb:04:
83:80:cf:77:fa:c0:06:19:8f:d7:5d:5e:58:f7:86:fb:68:0b:
d8:a9:25:d8:dc:19:08:d7:7c:78:ad:89:22:44:06:2d:76:70:
cf:fd:76:8e:4e:b9:37:ee:d2:b2:2e:86:ce:7a:96:b3:9f:4b:
2a:fb:09:1a:de:85:f1:da:fa:84:26:3c:e1:63:34:15:16:f4:
cf:a8:72:61:15:ee:c2:ec:82:99:de:64:da:af:06:6e:9b:5f:
91:b9:5c:51:49:51:b7:51:83:77:44:da:e8:f0:8c:1f:4d:cf:
e6:21:96:a5:09:14:3d:19:8d:ae:76:fe:d8:a5:80:8f:ae:56:
ff:6f:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:35 2025 by rpki-client