Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: RojeTxhl2ouu6gqZcj5/qUlWoTQkxIIHFSFJe5GQpGw=
Subject key identifier: 88:25:75:68:42:E3:3A:C7:3A:DC:0C:31:6A:7E:8F:CB:62:68:DA:8A
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 0196C3BA11516AD9F570438CF3C33AB52FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 0FDA
Signing time: Mon 12 May 2025 09:01:13 +0000
Manifest this update: Mon 12 May 2025 09:01:13 +0000
Manifest next update: Tue 13 May 2025 09:01:13 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: ufY/AKCAT3cyHHd2ITrG3cFwVv65MNeBbQovpomAtT8=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:11:51:6a:d9:f5:70:43:8c:f3:c3:3a:b5:2f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: May 12 09:01:13 2025 GMT
Not After : May 13 09:01:13 2025 GMT
Subject: CN=8825756842e33ac73adc0c316a7e8fcb6268da8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:19:8f:85:97:b9:1f:b9:0e:d3:7c:60:79:
fd:7f:87:eb:25:c9:0a:71:f6:0a:9a:3c:b8:c8:1c:
bb:e6:67:c9:41:d7:d0:3f:68:a7:64:5a:cb:ec:a1:
be:33:d1:bf:69:24:a7:67:aa:76:ba:d3:73:4f:c4:
8d:6a:9f:97:2f:5c:85:11:d8:6c:ed:8e:66:64:29:
75:4c:b5:fb:8c:75:09:d1:97:08:a4:6e:f6:a9:7f:
3f:d5:61:f8:82:dd:de:65:f8:7c:e8:2d:26:4b:3e:
ae:a7:34:c3:1e:35:a7:09:35:de:6c:87:05:ee:2d:
df:28:5f:64:cd:a8:38:b6:50:e8:da:78:95:db:44:
b7:97:4a:bd:33:a5:e6:17:69:f6:15:df:ca:ad:a3:
0f:06:ac:b7:6a:6f:d8:97:8b:7f:ae:77:ba:85:61:
5e:fc:df:df:8e:c9:ee:e8:14:38:54:1b:5f:a8:f5:
40:99:55:b6:21:15:56:3a:3f:c7:bd:76:bc:c2:67:
ad:95:70:50:43:43:66:19:f6:b2:c0:f2:cb:db:0d:
f3:88:fe:42:c8:76:99:2d:24:de:0d:62:9c:73:f2:
23:21:a4:5b:c1:7e:d0:22:e7:17:7e:d4:1e:be:cc:
54:27:6c:58:ea:e8:eb:b0:5a:70:eb:ed:c6:76:f8:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:75:68:42:E3:3A:C7:3A:DC:0C:31:6A:7E:8F:CB:62:68:DA:8A
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fd:21:52:57:69:9a:f0:c3:ec:c3:20:ed:b3:ea:36:b0:3f:
73:15:7c:a9:ee:e3:9a:e1:8b:73:d5:c2:5a:fa:b7:fd:2e:81:
ab:29:08:94:c8:6b:48:2a:65:14:a7:64:b9:ee:b9:63:12:89:
f2:78:41:ee:bc:b9:58:1c:16:91:21:69:0b:6f:82:bf:7f:f8:
00:7b:da:3c:20:4c:f0:4f:fc:f9:f6:ff:de:11:ae:9d:26:e2:
d9:52:a2:29:42:23:46:59:5d:59:33:6a:f5:8d:e7:b9:36:7a:
82:b9:83:35:e9:df:24:35:50:71:4a:bf:4a:28:0a:aa:50:25:
9c:ca:f9:d1:d4:d3:91:9b:5f:51:36:60:cb:b5:9f:57:5b:15:
b0:8b:67:13:0e:27:da:a1:6b:01:54:55:ad:8f:c2:06:6d:09:
0e:50:0b:ae:a8:b8:ab:56:02:b3:f0:fe:e1:7d:9e:f4:37:d2:
65:cf:86:dc:db:8c:bd:31:b4:62:66:23:8c:11:1b:6b:ef:06:
45:7b:11:80:f3:0d:58:62:10:1a:3e:f9:70:cf:42:36:a2:a0:
d4:11:f4:e0:0e:3e:83:b3:bc:a3:fb:ce:7d:43:0f:2f:de:1b:
52:fe:22:a6:da:fb:46:a3:2e:a9:a3:59:af:ed:e0:33:02:f5:
9b:45:ef:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDuhFRatn1cEOM88M6tS/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5
NGU0MDAwHhcNMjUwNTEyMDkwMTEzWhcNMjUwNTEzMDkwMTEzWjAzMTEwLwYDVQQD
Eyg4ODI1NzU2ODQyZTMzYWM3M2FkYzBjMzE2YTdlOGZjYjYyNjhkYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm4Zj4WXuR+5DtN8YHn9f4frJckK
cfYKmjy4yBy75mfJQdfQP2inZFrL7KG+M9G/aSSnZ6p2utNzT8SNap+XL1yFEdhs
7Y5mZCl1TLX7jHUJ0ZcIpG72qX8/1WH4gt3eZfh86C0mSz6upzTDHjWnCTXebIcF
7i3fKF9kzag4tlDo2niV20S3l0q9M6XmF2n2Fd/KraMPBqy3am/Yl4t/rne6hWFe
/N/fjsnu6BQ4VBtfqPVAmVW2IRVWOj/HvXa8wmetlXBQQ0NmGfaywPLL2w3ziP5C
yHaZLSTeDWKcc/IjIaRbwX7QIucXftQevsxUJ2xY6ujrsFpw6+3GdvjchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgldWhC4zrHOtwMMWp+j8tiaNqKMB8GA1UdIwQY
MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt
NTAxMjU3NTkwZGU3LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3
LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv0hUldp
mvDD7MMg7bPqNrA/cxV8qe7jmuGLc9XCWvq3/S6BqykIlMhrSCplFKdkue65YxKJ
8nhB7ry5WBwWkSFpC2+Cv3/4AHvaPCBM8E/8+fb/3hGunSbi2VKiKUIjRlldWTNq
9Y3nuTZ6grmDNenfJDVQcUq/SigKqlAlnMr50dTTkZtfUTZgy7WfV1sVsItnEw4n
2qFrAVRVrY/CBm0JDlALrqi4q1YCs/D+4X2e9DfSZc+G3NuMvTG0YmYjjBEba+8G
RXsRgPMNWGIQGj75cM9CNqKg1BH04A4+g7O8o/vOfUMPL94bUv4iptr7RqMuqaNZ
r+3gMwL1m0XvMg==
-----END CERTIFICATE-----
Generated at Mon May 12 15:50:51 2025 by rpki-client