Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: EuQv574FRKGChr3sE+kWkFUx3xF8z025Okzy3eEz3tk=
Subject key identifier: 72:48:F9:5F:DC:39:2E:6A:74:A2:10:81:B8:DA:DC:8E:91:F9:E1:DA
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019A51199BE69D900F84761526ADEA8C08A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 1643
Signing time: Tue 04 Nov 2025 23:00:23 +0000
Manifest this update: Tue 04 Nov 2025 23:00:23 +0000
Manifest next update: Wed 05 Nov 2025 23:00:23 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: QIbZqDgjpZ5njgnh3eCWw40aJRhOYdnGlzxAUhv5tvg=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9b:e6:9d:90:0f:84:76:15:26:ad:ea:8c:08:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Nov 4 23:00:23 2025 GMT
Not After : Nov 5 23:00:23 2025 GMT
Subject: CN=7248f95fdc392e6a74a21081b8dadc8e91f9e1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:e8:6b:8b:dc:e8:7e:67:fb:d7:9e:44:39:
5b:aa:ac:62:3f:e9:e9:fa:11:fb:53:3b:a3:19:70:
eb:9e:98:8b:31:ac:4e:14:98:52:ac:aa:97:97:55:
b1:58:37:55:0e:b1:19:4c:ec:65:8e:e6:c3:61:b2:
26:a1:54:86:8c:d6:3f:38:0a:b7:9a:e5:8e:04:32:
61:25:ff:1e:93:84:5b:7c:82:a0:cc:1f:da:0e:95:
14:b2:2f:7f:36:b3:4e:a0:f3:58:90:89:18:07:af:
48:be:83:cd:db:1a:bc:c9:af:64:29:6b:29:80:c6:
00:99:e8:a1:a9:44:46:92:ae:c7:03:59:85:3d:6a:
0c:db:13:b8:8c:55:a9:d5:6f:51:36:48:cf:d8:ce:
6e:f3:dc:46:ea:98:15:5c:e8:61:f2:74:91:8b:34:
86:1e:8a:a9:22:d7:16:c9:09:47:6e:e7:5f:30:a9:
52:c7:a4:e6:4e:6b:bc:50:17:f6:5e:a9:1c:1c:37:
43:77:4d:b6:37:91:b7:ec:47:97:51:1c:52:0b:a4:
8f:f7:99:45:bf:8c:87:c3:4f:6a:bd:f1:58:e7:6b:
87:ba:d0:bd:f9:3a:80:70:1e:a3:8c:3a:fe:3a:0f:
93:81:76:1b:94:45:5a:4b:8f:59:25:16:42:5c:dc:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:48:F9:5F:DC:39:2E:6A:74:A2:10:81:B8:DA:DC:8E:91:F9:E1:DA
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:a0:f1:99:9a:3f:3c:d6:16:a8:c7:fd:90:f2:ef:cd:00:
13:fe:b6:0f:95:a9:4b:53:81:2e:03:57:23:b9:45:82:c4:f6:
8c:45:cd:8a:aa:d2:60:b0:7e:48:22:36:10:15:a7:01:3a:86:
0f:28:0c:23:ba:71:1f:7e:13:69:fc:b3:40:1f:3a:c5:38:aa:
1d:35:86:70:47:42:e0:41:eb:fd:6c:08:e5:e1:b8:cf:a0:59:
45:f9:52:ee:09:e0:72:42:62:e5:06:04:26:da:73:01:e2:10:
57:d9:8e:c2:62:fe:bd:ed:d3:00:ef:ec:41:de:6e:1b:02:75:
17:99:81:10:a9:76:63:99:4c:58:8e:0c:51:8d:a5:39:04:10:
67:e8:94:db:31:cf:f7:f2:84:e3:97:5e:55:3a:81:5b:97:85:
0d:b6:d6:55:76:00:24:9a:97:01:a4:47:18:98:e4:75:3d:1c:
b6:0d:5d:41:ec:a0:98:da:06:1a:e8:92:04:e0:09:b4:d1:fa:
02:d3:e9:02:6e:2a:90:0c:d6:b3:50:85:44:5e:f7:82:f8:66:
ec:67:c9:7b:5d:17:2a:1d:a8:02:35:0c:cb:11:60:11:70:d3:
a9:11:b3:9c:f2:9c:5d:d4:77:ad:08:22:ea:59:6d:bb:ad:4b:
5d:a2:3c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:33 2025 by rpki-client