Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: q0LUUTY+N8OnTYXEGBrjOwJLjFfQVrm+jP8WVA6SSkg=
Subject key identifier: BF:5C:67:BB:10:3E:11:71:53:7E:92:3E:70:17:85:D8:F6:29:33:33
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019A4D05D730D9F71F6C01433FD4754D5C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 04:00:19 +0000
Manifest this update: Tue 04 Nov 2025 04:00:19 +0000
Manifest next update: Wed 05 Nov 2025 04:00:19 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 5zcy4otqlRRW4xTxfQKQb4Sr5a2IOhKFAFsKtzL4taI=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:d7:30:d9:f7:1f:6c:01:43:3f:d4:75:4d:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Nov 4 04:00:19 2025 GMT
Not After : Nov 5 04:00:19 2025 GMT
Subject: CN=bf5c67bb103e1171537e923e701785d8f6293333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:0d:7c:0d:60:4f:15:ac:1b:22:08:18:62:
de:5a:87:e8:96:92:f4:a6:b0:e4:d7:13:8e:4d:2e:
2e:e0:f0:ec:fc:e2:7e:9d:f4:3f:5c:73:42:81:5b:
09:0b:70:61:cf:80:87:e0:80:72:4a:9c:d6:39:80:
92:3e:b2:68:37:fb:9a:74:25:7b:c4:d9:67:6a:94:
71:76:c7:4f:b8:ce:f9:f6:5b:57:28:24:a3:84:d6:
84:5b:bb:32:92:2d:94:9c:4a:af:f3:08:80:5b:7f:
b9:e9:0a:9b:ed:ff:ae:93:ed:df:52:96:c7:ef:b6:
e7:e7:80:6e:49:62:c7:7b:66:3b:c3:83:b2:56:70:
bd:25:38:7d:4f:97:6d:5f:66:33:71:32:9c:e0:9f:
ed:f5:85:a7:c4:af:50:b2:10:f3:e3:2f:b4:f5:38:
36:3f:87:9d:48:cf:85:0b:aa:52:21:0a:03:5d:40:
2e:5f:af:7f:8f:7c:6c:50:64:2b:92:55:c7:46:8a:
91:96:04:d4:5b:d5:22:a6:86:0f:04:fd:38:8a:58:
aa:ab:9c:63:da:3b:8d:22:be:54:a8:72:6f:b8:42:
48:fc:89:0f:f2:47:a9:da:fc:2a:0c:e7:20:82:22:
33:3e:11:14:7c:5c:a2:76:25:1f:b2:2f:65:84:97:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:67:BB:10:3E:11:71:53:7E:92:3E:70:17:85:D8:F6:29:33:33
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:45:a5:05:a8:12:35:4a:69:45:a6:57:61:1d:0a:53:07:
a3:88:b5:01:23:72:10:d9:dc:b6:5c:5b:ef:8b:44:81:a3:9d:
1e:1f:da:dd:d3:00:dd:17:7c:93:b4:41:52:ab:72:c5:45:5e:
f9:91:e3:4f:ab:2b:fc:68:07:4a:84:ec:24:3d:e4:eb:2d:c8:
05:28:0a:da:5c:25:45:cd:a2:dd:a8:d0:03:ec:cc:ca:6e:e7:
94:43:81:57:4c:2d:6a:4e:1a:d1:07:73:db:db:b3:04:c5:9b:
fb:d8:f7:be:68:f9:9d:a7:c3:c8:b5:85:8f:6a:41:7a:19:2e:
07:2d:83:31:81:ab:d3:8b:49:7a:5d:ed:e3:be:06:3b:70:4d:
46:12:9d:86:6d:0b:56:70:fa:38:c2:bc:62:0e:00:32:2a:88:
ec:99:6c:63:7c:31:3b:4d:e5:58:5c:29:75:6c:48:92:55:e5:
8e:f8:5a:4d:0d:7b:45:90:66:cc:59:2e:2b:ef:86:1c:ed:10:
af:b1:32:d9:ff:4a:54:8d:97:56:97:f1:e7:e4:31:fe:10:90:
60:11:5f:39:a9:c5:2a:86:fe:9f:c5:7c:63:e8:d6:52:03:ce:
9c:99:4a:68:cb:b6:0e:bb:03:65:a2:5a:24:fd:5d:b6:81:21:
a3:36:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:47 2025 by rpki-client