Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: U9JAjSzxdRpla/9nopXWrphsN03qBKuCL3/20ZrEWoo=
Subject key identifier: AE:4B:26:66:68:BF:0C:32:61:2F:0D:42:C8:8D:75:91:A4:2F:8A:63
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 0197B70E9B18A1401EFDD0C7A5176E3C460B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 1058
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: GYcoiX5W9NPhwt4QS8DW8msooF/P0Qswa3dCByiQCeA=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9b:18:a1:40:1e:fd:d0:c7:a5:17:6e:3c:46:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=ae4b266668bf0c32612f0d42c88d7591a42f8a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:ce:69:41:83:ce:5d:90:41:a1:d9:75:48:
1b:d2:78:2e:ba:b7:5e:24:30:7a:26:66:8c:62:05:
dc:70:86:08:86:da:12:6f:7c:cc:aa:81:a3:52:b1:
b5:5c:87:a2:9e:9a:b2:70:ab:1b:52:33:3f:c5:f5:
b0:82:88:96:6c:ba:99:5b:05:f7:8b:ff:e9:23:d6:
84:26:da:f6:40:f2:1f:c3:dc:48:52:26:e7:73:8f:
74:4d:4f:f7:12:52:90:fc:9c:48:0f:cc:3e:7c:18:
db:2a:26:b4:57:86:57:93:2b:df:81:18:1a:36:ef:
51:b8:76:e5:54:e0:e7:e0:3b:f8:0a:e5:81:e1:a5:
4f:99:d0:ad:11:b7:76:6a:76:ae:26:44:7d:c7:e8:
5d:cd:1c:6e:97:82:a0:b5:6d:a5:93:78:e3:ef:cd:
36:78:36:7e:24:76:f1:a5:64:2d:47:71:a7:af:c0:
9f:98:7f:30:c6:d0:3c:95:3e:c6:8f:97:17:63:c2:
3a:b9:6a:20:20:68:13:93:e5:57:d2:b7:22:b4:79:
67:bb:25:e6:c3:c4:31:f6:ab:12:f0:0b:a0:77:3e:
20:be:54:a3:5b:23:a2:14:71:6b:7f:b5:56:75:c4:
d4:66:a8:ae:55:d8:64:cf:01:c8:ad:f6:66:61:65:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4B:26:66:68:BF:0C:32:61:2F:0D:42:C8:8D:75:91:A4:2F:8A:63
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:29:28:f6:54:82:d1:06:ea:d6:63:02:07:e8:0d:d1:a4:
95:fd:a7:d5:08:8c:07:2d:63:4f:73:b5:c0:c1:02:a3:fd:62:
51:3e:98:f9:00:02:e4:34:0a:d4:ba:a5:19:c0:f5:71:0e:9a:
a5:9c:57:4c:b0:29:cf:19:d9:b9:62:44:84:62:e2:89:28:74:
35:46:aa:92:b8:0c:60:e1:28:04:0e:b7:8a:38:10:09:0b:62:
2f:b5:78:85:b4:6a:e7:b3:b6:36:88:de:3a:a4:ae:ed:b6:26:
09:a3:3f:32:2b:39:01:3e:55:5b:90:b5:47:c7:bd:41:dd:a3:
22:27:24:1b:e8:41:e9:66:c5:d5:c1:f3:b2:50:13:d0:b8:96:
d2:77:1b:c5:5a:a2:af:06:49:bc:de:2c:13:e9:fa:d7:20:51:
00:f9:37:80:ab:cf:46:05:ef:5d:60:8e:77:1d:1b:0f:d6:13:
6d:9f:2b:ee:53:a5:d6:b9:50:89:33:06:28:ff:de:1f:f5:dc:
a1:12:02:06:9c:d0:d6:75:2c:94:9a:f7:e3:3e:38:b8:54:8f:
c3:59:05:d0:be:2d:ef:6b:e1:4e:72:71:c0:42:e5:fb:66:63:
87:5c:23:2d:29:bd:5e:dd:eb:58:12:83:1f:d3:8a:b6:44:49:
a2:fa:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:43 2025 by rpki-client