Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: Q8NIdrcBhTX47Ps6OFrQWLdy2rCX1YnZ4Z3WrMM/Kbo=
Subject key identifier: 59:BC:BC:1E:87:07:80:A3:75:B5:DF:57:89:92:28:11:91:F3:02:19
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 0199FD6AE4C23836E3A65A94750BFE27562E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 1186
Signing time: Sun 19 Oct 2025 17:01:04 +0000
Manifest this update: Sun 19 Oct 2025 17:01:04 +0000
Manifest next update: Mon 20 Oct 2025 17:01:04 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: rs7ulgfmDEXMj4mG4JY4zH/XHkVCH6n4GR6Zc7FFmy8=)
2: PQhxpowWbirpi73sooxP6-CQe0w.roa (hash: I/+Rv+eczGu/4NSVaZNewfe6Bd3n9RCdyw3Ufabk0jk=)
3: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e4:c2:38:36:e3:a6:5a:94:75:0b:fe:27:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Oct 19 17:01:04 2025 GMT
Not After : Oct 20 17:01:04 2025 GMT
Subject: CN=59bcbc1e870780a375b5df578992281191f30219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:81:d7:77:27:ed:b3:a1:75:ee:ea:dd:35:
c3:94:fe:a9:8a:74:5b:dd:cb:4b:59:7d:6a:d7:a3:
40:92:1c:d6:33:59:60:b7:24:82:33:62:65:3b:6c:
a0:4b:05:73:b0:9a:87:a0:91:45:b8:6e:6e:93:3e:
c4:b4:9e:a0:95:06:b8:3e:b1:c4:8a:a2:fe:60:da:
f6:01:74:87:02:fd:08:6e:21:1e:de:14:ec:b3:04:
7e:c4:f4:f2:b7:0d:71:cb:84:f2:f6:31:ab:0b:e0:
3b:e9:4f:21:58:3f:ee:20:c5:89:b3:e7:d8:99:bc:
7a:10:2e:20:ba:80:49:45:f5:ad:92:40:1f:7d:ab:
5f:71:9b:c4:15:cd:71:8c:95:e6:60:94:0c:35:73:
13:eb:fe:fd:a1:5b:14:5a:c6:a5:b8:7e:d9:ca:aa:
33:e4:76:e7:7d:56:3c:86:22:17:fd:46:40:3a:20:
59:36:b9:83:1d:46:e3:db:e8:64:db:97:cc:cd:1e:
3e:f7:54:2c:66:9e:94:21:41:ab:5a:3f:7d:61:ea:
51:c3:54:03:1c:74:24:f3:70:28:73:3f:57:ab:c9:
d8:e9:14:a7:72:40:4e:1d:35:c0:e0:c1:96:cb:b0:
44:c8:0e:8e:cc:43:95:0b:99:62:90:ed:6d:8c:a9:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:BC:1E:87:07:80:A3:75:B5:DF:57:89:92:28:11:91:F3:02:19
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:38:f7:36:a7:e5:58:cf:79:91:ca:6a:54:fb:eb:f9:8c:d7:
db:61:96:e6:43:e3:4a:e6:d6:69:e8:2c:4b:cc:cd:1f:b5:4f:
6c:c8:b9:a3:99:fa:26:9b:4a:8d:e6:0a:40:42:2c:5f:7c:5a:
a1:98:6d:7b:00:44:48:ba:8e:ad:85:5e:77:c8:5c:d2:96:72:
dc:cc:f3:28:ed:b8:e2:73:8b:1e:2f:57:12:77:e0:2d:99:c7:
ab:f4:76:a4:03:ca:cb:e9:3f:e4:b8:bf:db:ea:fc:5d:04:b7:
29:cf:04:f4:63:6a:a6:f0:bf:b5:27:81:7c:5a:ef:3e:36:81:
8b:19:63:45:6e:d7:01:0f:1c:dc:67:4b:1e:85:cb:e7:86:25:
3b:38:77:45:21:97:cd:20:34:d7:0f:a3:e9:bc:95:b3:97:e1:
a8:eb:9a:b8:03:14:68:6b:bd:60:84:56:36:e8:e4:7a:2d:de:
79:0b:14:8b:9d:cc:38:6f:97:a9:d9:8a:c5:91:dd:22:49:c8:
27:0e:57:1b:0d:d7:0a:03:9b:65:de:ea:80:55:f4:61:4b:5e:
bc:e0:10:3b:45:32:e8:66:c3:d6:79:2c:15:3e:d9:4c:9c:c4:
46:65:a4:98:d3:08:5c:d3:f1:db:2c:59:1d:cb:57:55:62:4e:
62:d0:99:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9auTCODbjplqUdQv+J1YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5
NGU0MDAwHhcNMjUxMDE5MTcwMTA0WhcNMjUxMDIwMTcwMTA0WjAzMTEwLwYDVQQD
Eyg1OWJjYmMxZTg3MDc4MGEzNzViNWRmNTc4OTkyMjgxMTkxZjMwMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjuB13cn7bOhde7q3TXDlP6pinRb
3ctLWX1q16NAkhzWM1lgtySCM2JlO2ygSwVzsJqHoJFFuG5ukz7EtJ6glQa4PrHE
iqL+YNr2AXSHAv0IbiEe3hTsswR+xPTytw1xy4Ty9jGrC+A76U8hWD/uIMWJs+fY
mbx6EC4guoBJRfWtkkAffatfcZvEFc1xjJXmYJQMNXMT6/79oVsUWsaluH7Zyqoz
5HbnfVY8hiIX/UZAOiBZNrmDHUbj2+hk25fMzR4+91QsZp6UIUGrWj99YepRw1QD
HHQk83Aocz9Xq8nY6RSnckBOHTXA4MGWy7BEyA6OzEOVC5likO1tjKlk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm8vB6HB4CjdbXfV4mSKBGR8wIZMB8GA1UdIwQY
MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt
NTAxMjU3NTkwZGU3LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3
LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjj3Nqfl
WM95kcpqVPvr+YzX22GW5kPjSubWaegsS8zNH7VPbMi5o5n6JptKjeYKQEIsX3xa
oZhtewBESLqOrYVed8hc0pZy3MzzKO244nOLHi9XEnfgLZnHq/R2pAPKy+k/5Li/
2+r8XQS3Kc8E9GNqpvC/tSeBfFrvPjaBixljRW7XAQ8c3GdLHoXL54YlOzh3RSGX
zSA01w+j6byVs5fhqOuauAMUaGu9YIRWNujkei3eeQsUi53MOG+XqdmKxZHdIknI
Jw5XGw3XCgObZd7qgFX0YUtevOAQO0Uy6GbD1nksFT7ZTJzERmWkmNMIXNPx2yxZ
HctXVWJOYtCZBw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:56 2025 by rpki-client