Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: 7F8LtpqixyWQhlrZdAfBdmz5gN70gsrHLHYuUTARZck=
Subject key identifier: B4:32:EE:95:0D:B7:4E:81:67:22:E0:AC:31:D8:B4:12:18:0A:37:3D
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 0199FFFE36B71171AE03786225AE2004C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 1243
Signing time: Mon 20 Oct 2025 05:01:14 +0000
Manifest this update: Mon 20 Oct 2025 05:01:14 +0000
Manifest next update: Tue 21 Oct 2025 05:01:14 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: pi1htCbajKpnMDM/WXkQUkWCu2BI2HOuKyN4c7hGO38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:36:b7:11:71:ae:03:78:62:25:ae:20:04:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Oct 20 05:01:14 2025 GMT
Not After : Oct 21 05:01:14 2025 GMT
Subject: CN=b432ee950db74e816722e0ac31d8b412180a373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:b2:9c:9d:e6:1b:20:26:3c:6b:20:78:06:
4a:84:68:38:62:e7:be:6b:48:1f:d1:86:1f:28:1b:
53:14:59:d1:25:e0:fe:8b:6c:67:a7:80:03:73:23:
9f:84:3e:b0:5d:86:37:c7:8c:8e:c0:c4:c0:94:51:
8d:78:9a:0f:13:66:52:61:3b:65:93:6d:83:bd:7a:
56:7c:ce:fd:5b:2e:0b:08:bf:d6:57:23:7d:10:02:
6e:da:98:dc:d6:d2:f3:c3:57:b7:39:a3:fb:bd:72:
73:42:f7:34:f2:64:79:35:bf:43:fb:bd:96:11:07:
b0:e8:18:91:d1:3f:e9:96:a5:30:00:57:74:25:db:
ab:b4:e9:46:9d:3c:9b:1d:a8:64:fb:b6:9d:21:57:
06:c1:9c:6d:93:4b:c4:0e:e4:72:85:e6:11:40:e7:
cf:57:6e:83:3c:e5:b9:a3:5a:c9:23:29:53:f3:02:
11:dd:d2:fb:aa:d9:01:1e:da:02:f7:19:e4:6a:c7:
28:4e:07:d9:ec:34:bc:3a:fa:a4:24:ed:5c:ab:28:
8c:73:5c:95:63:a8:61:04:21:63:1d:d3:ee:54:56:
74:3e:80:d1:84:c4:d9:0c:57:96:0d:7c:b4:b9:fa:
36:40:35:00:d6:47:e4:25:99:62:78:95:9f:7e:06:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:EE:95:0D:B7:4E:81:67:22:E0:AC:31:D8:B4:12:18:0A:37:3D
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:c2:b5:eb:a9:a9:e3:3c:f6:ac:96:f2:b4:74:d2:20:a0:
a6:a2:d9:c4:34:15:04:8f:ae:70:0a:54:61:73:32:74:01:dc:
4b:29:99:37:47:08:75:8c:92:38:40:f3:3c:61:ec:bd:1e:ee:
44:83:32:09:11:8a:89:42:b8:13:bf:46:99:fd:5c:29:8d:24:
21:95:5d:8b:c7:7d:ae:5b:9d:7a:70:ed:f6:8e:38:e5:f3:6a:
e3:ed:58:ff:74:3d:8d:ac:de:f4:0c:6d:49:42:69:10:dc:ba:
6c:cb:af:d9:78:bf:85:37:8d:3c:3d:ce:06:51:cd:a3:8c:d9:
ca:9c:2e:63:da:73:0e:81:f9:c3:11:69:54:0f:b5:29:52:94:
a0:3f:41:59:61:af:47:c1:13:43:28:61:73:34:58:4e:f1:e9:
11:a1:8f:8f:8a:ac:8a:46:02:4b:21:73:46:fa:93:8c:ae:50:
e5:32:9c:cd:34:96:46:9c:0b:34:86:63:a7:c9:21:a8:be:37:
29:fa:0e:72:4a:1c:c3:ee:05:9d:e8:f9:03:6a:e4:af:44:74:
a2:5f:51:a1:67:65:57:fe:99:97:b6:d4:fd:1e:79:58:ae:f9:
a5:3d:cc:86:6c:b2:43:06:5d:fc:a8:5e:b0:ec:1f:cd:cd:0e:
40:65:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:29 2025 by rpki-client