Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: ZgITryXQnTmQOuDQMY0MklWJ3AYSeo+8Zwvsd9yp0ww=
Subject key identifier: A2:F2:5B:0C:DE:CD:EE:DE:59:2C:EE:98:7A:8F:45:E0:5D:C0:7E:A8
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 0197B8C5C8DC59CCDF561F73ED0DB0FE956C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 1115
Signing time: Sat 28 Jun 2025 23:00:59 +0000
Manifest this update: Sat 28 Jun 2025 23:00:59 +0000
Manifest next update: Sun 29 Jun 2025 23:00:59 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: r1AO7hwZ1qo9IErOqXb3HCcQHMhQtV8AFDofLKWCiW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c8:dc:59:cc:df:56:1f:73:ed:0d:b0:fe:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jun 28 23:00:59 2025 GMT
Not After : Jun 29 23:00:59 2025 GMT
Subject: CN=a2f25b0cdecdeede592cee987a8f45e05dc07ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:50:9b:28:c4:37:b7:87:0b:86:bf:6b:84:
a2:6c:d7:23:2e:07:01:cb:96:d7:18:f8:86:1d:5f:
21:95:d3:61:60:e9:05:8a:de:6e:b7:0b:ec:35:30:
69:5f:62:fd:8e:1a:23:8b:2e:ec:b8:09:c2:78:db:
1e:c2:30:1b:32:e9:74:f5:db:86:11:66:bc:0f:00:
1b:a0:1c:ed:3c:e7:6e:c2:57:34:42:02:57:7f:31:
44:4b:36:08:ee:52:52:f6:6a:65:93:11:0e:cd:68:
6e:7f:a8:43:59:7d:0d:94:9a:7d:1d:69:02:6d:e1:
7b:93:09:7f:12:b7:81:77:62:4e:44:7d:fb:9a:c7:
5d:a5:5f:61:ef:1a:3c:9d:aa:d3:12:0a:12:68:46:
ad:14:fd:f3:83:5b:ca:a8:7a:a6:62:20:b8:41:06:
b1:72:e3:a7:70:dd:b1:a5:89:69:24:e5:60:ec:dc:
c5:c1:47:23:ba:61:5a:6b:75:ce:35:6c:20:0f:45:
5f:63:22:cd:1a:d9:af:1a:ff:ad:1c:fd:df:16:31:
f2:18:d5:b1:6a:36:ac:d4:9a:f0:c0:1e:c9:d0:b8:
1c:f1:30:25:0b:89:cc:b0:29:6f:55:e1:ad:95:8b:
4a:9c:25:8f:6f:d3:d0:4c:ae:9c:d1:55:ab:2f:d1:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F2:5B:0C:DE:CD:EE:DE:59:2C:EE:98:7A:8F:45:E0:5D:C0:7E:A8
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:9a:96:a7:1e:95:53:d1:51:68:47:75:9a:79:bc:f5:f5:
35:f4:a9:3f:5c:55:46:79:2f:7c:4d:8f:78:88:88:d1:70:f8:
01:de:06:7d:3f:8c:fa:75:b1:cf:3a:c9:ec:47:44:a7:12:41:
da:39:91:68:31:ca:e3:5d:9a:4e:0c:d6:11:82:76:10:b4:e1:
1a:25:51:30:23:d1:d5:73:7c:1b:19:6b:96:36:7d:79:f9:59:
d2:64:0c:cc:d0:85:e3:68:cf:c6:cb:bd:f4:b6:02:8f:c3:41:
5a:0b:c3:21:6c:d4:46:ff:fb:f9:d4:d0:d5:61:5f:c5:98:e1:
24:b6:55:3b:f5:05:b8:9d:4f:a8:50:ab:90:36:d4:14:ad:3b:
02:2d:94:19:4c:07:0b:2d:cc:42:92:0b:8f:3a:4a:60:ef:d0:
d6:f6:ef:fa:40:33:38:f8:c8:10:ae:7a:44:14:24:72:ad:56:
74:dc:87:e7:48:7a:26:ce:d8:f6:3a:3f:9a:14:14:10:86:16:
1d:a6:40:d3:74:f2:87:3a:bb:52:e3:c0:fa:a6:d8:2a:f8:be:
c3:5d:5f:21:0c:19:1f:a6:dd:ad:3a:56:6f:e1:37:4f:11:cc:
73:8d:5a:4e:6f:3e:d6:67:ae:5c:da:fd:ea:98:33:24:8a:7a:
a3:b9:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:17:57 2025 by rpki-client