Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: tkJcrCQQwG7/8OcmpDVxYlMklRiGuDTRsTLZK8nHqzM=
Subject key identifier: 3D:12:3A:C2:49:DF:9D:7D:F2:E7:B4:C9:83:DA:DD:88:03:DB:79:2D
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019873E2B9AAF9A38B36EFDFCCA199803EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:01:35 +0000
Manifest this update: Mon 04 Aug 2025 07:01:35 +0000
Manifest next update: Tue 05 Aug 2025 07:01:35 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: agWa0KxNjgonctUoT3U5QAjcw4RuiwLxZu9FOTSky8U=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b9:aa:f9:a3:8b:36:ef:df:cc:a1:99:80:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Aug 4 07:01:35 2025 GMT
Not After : Aug 5 07:01:35 2025 GMT
Subject: CN=3d123ac249df9d7df2e7b4c983dadd8803db792d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:a8:bf:82:f9:98:52:e2:38:7a:5b:f6:63:
8f:36:c2:9c:c3:c6:f9:4d:5f:cf:de:7d:7d:71:e6:
6f:ca:2e:40:d5:a4:47:0d:99:1b:55:3e:1b:bb:4b:
c5:88:c9:44:9d:3c:58:51:4e:fd:c7:29:fc:e0:20:
78:8d:57:38:5d:6e:d6:45:2f:51:de:a4:5b:4f:9c:
60:c3:7b:c1:31:9e:96:ca:2b:5c:99:4e:bd:46:91:
d1:64:88:80:7f:c3:7d:cb:3e:65:1e:77:d6:51:e0:
f7:69:20:18:92:28:69:4e:3d:86:f0:8a:63:2b:ea:
ac:31:a0:62:51:85:c5:4a:ab:84:a0:56:0d:08:00:
dd:48:14:13:ea:ac:d9:9e:94:20:8a:39:e5:21:51:
0c:8e:fe:87:67:2d:7b:b5:58:b3:39:dd:bd:59:75:
e1:4b:17:de:5b:20:bb:dd:f7:10:e4:94:08:44:d9:
b2:50:a2:18:3b:0d:68:6c:ef:1a:85:b3:b4:93:81:
a5:90:80:84:d6:d9:cc:e4:81:94:e3:2a:d5:5c:60:
84:dd:30:c6:2a:51:45:32:31:6b:d8:9a:e2:2b:f1:
46:72:0a:10:aa:48:72:34:e2:cf:04:20:cb:71:68:
93:38:fc:65:82:a7:e6:7b:92:c2:89:3f:53:9d:00:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:3A:C2:49:DF:9D:7D:F2:E7:B4:C9:83:DA:DD:88:03:DB:79:2D
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e9:27:03:3b:39:8a:04:89:9b:2d:a7:a7:22:9f:60:63:73:
54:07:a4:db:c2:c0:0c:c9:3a:5a:6c:b7:94:67:a0:73:4a:d5:
72:fe:37:b4:af:4a:d1:b7:b0:fe:61:78:69:8f:1b:40:e7:0d:
fe:fe:67:ec:71:65:46:8a:aa:dd:22:04:8c:bc:db:b9:76:19:
e3:32:37:88:0e:54:52:52:62:ba:39:f4:fb:84:e4:f8:72:c5:
a4:82:f9:a8:4c:18:25:dc:d7:e2:31:61:53:e9:e9:7b:02:65:
d7:4e:ed:b4:92:c7:9d:de:dd:d0:77:04:2f:07:20:7a:84:99:
93:23:d9:19:90:3a:d2:8c:1f:5a:6a:f8:34:b1:be:e4:3a:02:
6c:e2:3d:8d:f9:77:c9:86:2f:34:ad:1f:1b:71:b1:5d:6b:a3:
d7:3c:98:79:84:fd:73:8d:32:95:30:9b:1a:fc:81:62:e2:69:
15:57:11:6c:0e:72:db:bd:07:01:f5:55:03:9d:f8:51:90:80:
ab:eb:69:56:99:51:bb:77:cd:7d:3a:18:dd:ae:0b:2e:82:87:
e0:6c:33:54:0a:c7:ae:a1:3b:1f:bb:40:1e:16:c1:22:45:7f:
20:d6:d6:52:a6:31:92:7a:87:65:47:84:c6:2f:17:58:58:b0:
72:af:b4:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4rmq+aOLNu/fzKGZgD6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4
NjVmZDMwHhcNMjUwODA0MDcwMTM1WhcNMjUwODA1MDcwMTM1WjAzMTEwLwYDVQQD
EygzZDEyM2FjMjQ5ZGY5ZDdkZjJlN2I0Yzk4M2RhZGQ4ODAzZGI3OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGov4L5mFLiOHpb9mOPNsKcw8b5
TV/P3n19ceZvyi5A1aRHDZkbVT4bu0vFiMlEnTxYUU79xyn84CB4jVc4XW7WRS9R
3qRbT5xgw3vBMZ6WyitcmU69RpHRZIiAf8N9yz5lHnfWUeD3aSAYkihpTj2G8Ipj
K+qsMaBiUYXFSquEoFYNCADdSBQT6qzZnpQgijnlIVEMjv6HZy17tVizOd29WXXh
SxfeWyC73fcQ5JQIRNmyUKIYOw1obO8ahbO0k4GlkICE1tnM5IGU4yrVXGCE3TDG
KlFFMjFr2JriK/FGcgoQqkhyNOLPBCDLcWiTOPxlgqfme5LCiT9TnQBvxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0SOsJJ35198ue0yYPa3YgD23ktMB8GA1UdIwQY
MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt
MzkyYTc1MjQ2NGIxLzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUtMzkyYTc1MjQ2NGIx
LzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+knAzs5
igSJmy2npyKfYGNzVAek28LADMk6Wmy3lGegc0rVcv43tK9K0bew/mF4aY8bQOcN
/v5n7HFlRoqq3SIEjLzbuXYZ4zI3iA5UUlJiujn0+4Tk+HLFpIL5qEwYJdzX4jFh
U+npewJl107ttJLHnd7d0HcELwcgeoSZkyPZGZA60owfWmr4NLG+5DoCbOI9jfl3
yYYvNK0fG3GxXWuj1zyYeYT9c40ylTCbGvyBYuJpFVcRbA5y270HAfVVA534UZCA
q+tpVplRu3fNfToY3a4LLoKH4GwzVArHrqE7H7tAHhbBIkV/INbWUqYxknqHZUeE
xi8XWFiwcq+0qA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:20 2025 by rpki-client