Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: QEatzTIhZ3sHpVMyqhQHjQ1TPFAd+9mB4EZ/M0i75Fc=
Subject key identifier: 4F:E7:63:6D:A7:2E:B5:74:9B:7D:F0:B6:07:30:8F:D6:EA:0B:38:2D
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 019A4DE166035B81F68A0A5B44318C083957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0CC6
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: IsxDB0x4wwGpXT/9L0BIEe1iNBwTmdYU4ENJ8wIHh3E=)
2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:66:03:5b:81:f6:8a:0a:5b:44:31:8c:08:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=4fe7636da72eb5749b7df0b607308fd6ea0b382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:4f:27:d3:89:5f:f1:6d:25:58:69:56:4c:
d0:ca:54:27:c6:16:3f:1b:e2:3e:85:d2:6f:1e:b4:
25:10:17:0d:84:80:1d:b6:1c:67:ad:ff:cc:a1:f6:
62:b6:55:9f:ec:f0:5f:b3:22:89:e5:a4:13:aa:06:
6e:67:a8:0d:ae:b3:d6:10:f1:0b:62:00:c3:1b:85:
09:26:60:da:ab:97:9f:86:f0:b6:d0:11:1b:07:0f:
c1:4c:d3:a0:d5:eb:4e:a8:1d:1a:14:c2:e4:c4:53:
10:30:fc:fb:5a:48:31:da:01:e6:70:58:a1:41:49:
d9:38:22:a0:e2:6f:07:a2:d7:b0:36:35:00:0d:85:
70:ff:9e:af:a5:06:1a:f7:a3:fb:c6:47:29:04:d7:
d4:49:df:40:85:3c:74:c5:d5:76:ad:62:f7:19:f0:
9e:aa:ba:18:65:4a:60:b5:93:9e:bd:04:fd:e8:18:
04:21:f1:e9:89:0b:c7:b7:60:87:db:e6:0f:1c:5b:
00:59:ba:30:6a:d5:8a:29:6a:7e:c8:ef:7b:d9:bc:
30:bf:5e:7c:db:0e:e2:46:aa:10:2a:e0:b4:2c:62:
97:3c:f9:79:84:63:1d:c7:15:c9:58:84:da:ac:a1:
06:c4:f8:40:2e:f8:5a:a7:25:5d:02:2f:8b:e8:02:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:63:6D:A7:2E:B5:74:9B:7D:F0:B6:07:30:8F:D6:EA:0B:38:2D
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bd:cf:16:a2:94:1d:f9:c2:91:68:d5:60:a8:ef:32:03:7f:
97:00:12:f9:b3:e8:61:f1:a3:32:8d:54:f2:48:4f:50:19:8d:
0a:68:7e:31:a3:27:ae:84:a0:70:22:bb:25:1d:e2:1e:ef:6b:
2a:32:9b:4d:50:60:0f:41:b6:fe:7e:15:46:65:bb:c2:67:d8:
9d:d1:6b:38:2d:d8:22:3c:37:a8:b0:d7:16:fd:3d:48:46:d7:
ab:c7:ff:30:59:1b:75:52:45:6a:d5:fc:75:28:78:97:c5:b1:
04:38:f3:e2:4a:a9:66:bf:c7:d9:dd:a5:9b:cd:00:b4:e7:ab:
0e:95:ae:b2:68:3f:a6:be:99:b6:55:3d:21:aa:d3:12:47:5d:
1e:64:95:52:e5:5e:6b:d0:9b:ae:e8:a2:ac:59:57:34:72:b4:
b6:cb:63:70:fc:1b:7a:58:8c:6e:c4:e1:9c:71:30:b8:49:5e:
50:d4:c9:1a:78:11:12:df:f4:78:b0:be:7f:82:91:42:ca:69:
03:1e:6b:ba:fa:24:a9:46:7e:67:25:be:4b:44:c3:b8:00:30:
c6:b5:91:69:b7:1d:5d:ad:1f:b7:99:1a:2e:82:1e:68:70:64:
b5:bc:2b:ea:89:d9:d0:9d:d8:2f:08:db:63:10:06:1e:01:77:
56:4d:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:31 2025 by rpki-client