
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: wdj3YiWx0rrq4sykOFYeqvO/HSz2gSL6jE2hJnEGOYM=
Subject key identifier: 1A:1C:3A:D5:24:AB:85:F0:64:28:F8:8E:68:4A:ED:D2:DD:03:D9:88
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 0198D6988235691A19B45CF6C0DA7CAA08C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 11A9
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: EmYVIdOdRtnJJuy5lcETbaB5s9nunEn6NDWTwX9Q3Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:82:35:69:1a:19:b4:5c:f6:c0:da:7c:aa:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=1a1c3ad524ab85f06428f88e684aedd2dd03d988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:6f:e3:0e:93:d7:a8:9f:5e:97:96:76:a6:
9e:a7:d0:48:9d:de:73:c3:f2:77:f3:cb:d7:09:e8:
a2:e7:ce:1f:75:4b:a9:23:5d:4f:0b:50:dd:51:ae:
54:c7:47:fb:0c:e8:6c:23:fa:09:64:a9:57:0e:61:
cf:13:a4:dc:55:34:82:5f:b9:32:79:45:21:2f:6c:
9c:bc:27:3f:ac:50:78:22:a7:34:dc:ce:e4:5d:7f:
80:6f:1e:01:71:9d:96:05:81:ef:5c:33:08:e0:6a:
da:42:02:f2:7e:56:fd:fe:e5:d1:52:d1:83:f8:8c:
60:6d:34:c8:c1:1f:eb:54:aa:47:08:74:1e:b9:f5:
0f:38:1f:4f:73:b3:a1:f8:1c:e3:43:23:70:65:c3:
da:5f:bb:15:b6:b9:f8:e7:cc:e1:d3:7f:d2:ce:76:
0f:ac:9d:99:5f:4c:cf:24:c4:14:c9:d8:d3:2f:17:
c1:11:11:c0:7d:c0:f3:9b:e2:88:17:97:15:68:46:
79:fb:ab:1f:9b:7e:88:72:af:d1:d5:59:bc:2b:30:
df:55:93:64:ed:1f:69:5d:47:37:30:48:55:46:15:
c6:03:4d:91:3a:c2:4c:e8:40:2e:8a:d8:55:b1:98:
06:4a:40:5d:6c:e6:d9:a0:91:d7:08:18:ed:aa:e4:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:3A:D5:24:AB:85:F0:64:28:F8:8E:68:4A:ED:D2:DD:03:D9:88
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4f:fc:75:1c:f2:65:02:f5:9f:16:ff:cc:03:77:4c:e5:8c:
6b:2f:8b:d8:2c:e8:1d:01:a2:e1:30:10:e5:1d:99:e9:fd:63:
df:7b:07:61:87:e3:3e:eb:43:bf:f4:94:3b:e5:4f:cd:6a:ab:
2e:12:00:e8:12:ff:04:74:5e:45:10:75:5f:66:5f:24:90:46:
b0:f7:60:84:d8:e7:fe:2a:cd:cc:6e:15:c4:62:81:da:60:e5:
cf:5a:d1:d8:7f:b1:c6:87:da:65:06:84:20:a3:f0:b3:af:19:
46:14:a3:5e:c3:46:98:19:84:6b:1a:8b:90:97:66:a3:38:c3:
1d:2d:f0:83:2e:42:d8:ce:75:0f:6b:d5:ac:bc:31:0d:fe:2f:
68:0a:92:e8:64:d1:04:d1:ee:c3:08:55:5f:57:6a:47:e5:39:
52:11:90:e6:ad:78:e7:df:b5:a1:82:6e:55:34:b1:7b:a8:a2:
c3:8e:bf:34:65:c8:5f:47:c1:21:5e:ea:d4:a8:b7:a7:16:5e:
eb:70:15:74:01:80:21:77:23:5e:d0:01:d4:af:3d:8e:a2:ec:
e7:5c:f5:1c:99:c4:81:f2:1f:69:dc:82:ed:00:4f:3e:59:b7:
4d:8f:6e:b2:97:8f:b5:1d:66:50:e6:52:e6:53:37:92:a7:1d:
27:76:4a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmII1aRoZtFz2wNp8qgjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl
OTliNDMwHhcNMjUwODIzMTEwMjU1WhcNMjUwODI0MTEwMjU1WjAzMTEwLwYDVQQD
EygxYTFjM2FkNTI0YWI4NWYwNjQyOGY4OGU2ODRhZWRkMmRkMDNkOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhlv4w6T16ifXpeWdqaep9BInd5z
w/J388vXCeii584fdUupI11PC1DdUa5Ux0f7DOhsI/oJZKlXDmHPE6TcVTSCX7ky
eUUhL2ycvCc/rFB4Iqc03M7kXX+Abx4BcZ2WBYHvXDMI4GraQgLyflb9/uXRUtGD
+IxgbTTIwR/rVKpHCHQeufUPOB9Pc7Oh+BzjQyNwZcPaX7sVtrn458zh03/SznYP
rJ2ZX0zPJMQUydjTLxfBERHAfcDzm+KIF5cVaEZ5+6sfm36Icq/R1Vm8KzDfVZNk
7R9pXUc3MEhVRhXGA02ROsJM6EAuithVsZgGSkBdbObZoJHXCBjtquRPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBocOtUkq4XwZCj4jmhK7dLdA9mIMB8GA1UdIwQY
MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt
YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm
LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0/8dRzy
ZQL1nxb/zAN3TOWMay+L2CzoHQGi4TAQ5R2Z6f1j33sHYYfjPutDv/SUO+VPzWqr
LhIA6BL/BHReRRB1X2ZfJJBGsPdghNjn/irNzG4VxGKB2mDlz1rR2H+xxofaZQaE
IKPws68ZRhSjXsNGmBmEaxqLkJdmozjDHS3wgy5C2M51D2vVrLwxDf4vaAqS6GTR
BNHuwwhVX1dqR+U5UhGQ5q1459+1oYJuVTSxe6iiw46/NGXIX0fBIV7q1Ki3pxZe
63AVdAGAIXcjXtAB1K89jqLs51z1HJnEgfIfadyC7QBPPlm3TY9uspePtR1mUOZS
5lM3kqcdJ3ZKUg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:47 2025 by rpki-client