Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: wXzGenOUuKP8yrg4X0AhIu1GQdO0G8jWoM/R/PGiIRk=
Subject key identifier: 77:D1:E0:08:7B:B4:83:B2:17:86:50:A1:47:EA:8D:A5:CB:07:E2:81
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 019A54C0A6E67C776771A7A9452350CFF813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 011C
Signing time: Wed 05 Nov 2025 16:01:43 +0000
Manifest this update: Wed 05 Nov 2025 16:01:43 +0000
Manifest next update: Thu 06 Nov 2025 16:01:43 +0000
Files and hashes: 1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: uTXuocDwk6qNh6JDd5UmK9/Q8p1KIekXLwceIK5E2uQ=)
2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:a6:e6:7c:77:67:71:a7:a9:45:23:50:cf:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Nov 5 16:01:43 2025 GMT
Not After : Nov 6 16:01:43 2025 GMT
Subject: CN=77d1e0087bb483b2178650a147ea8da5cb07e281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:85:b2:04:83:ee:e5:5d:5c:fc:8c:9b:7b:
85:78:a5:ba:81:e7:34:e0:f8:32:7c:1a:18:4d:04:
ff:d7:aa:d0:46:ac:3d:bb:a5:83:b3:1b:cf:c7:cd:
6e:62:23:fe:a9:18:f6:39:63:97:82:d3:ad:87:94:
a0:64:76:b6:da:99:d2:9e:dd:a9:5a:30:16:2e:02:
62:7e:d7:91:8e:9c:e3:7d:80:96:5a:39:87:6a:56:
77:43:ea:36:dd:2c:65:3d:84:fe:5a:b4:e9:12:26:
a5:97:02:e0:ed:9f:34:d4:52:7f:35:c2:af:d4:8d:
0a:ff:09:ce:3c:9a:50:8e:c0:83:05:7d:aa:0b:71:
2d:b2:5f:43:9a:f6:cb:cd:89:56:bb:7f:99:11:38:
ca:c0:fc:ff:76:54:db:76:ed:f8:0c:b9:d1:b8:81:
42:2d:5f:47:f1:2d:92:57:5e:ed:47:73:e4:9b:d8:
a3:e5:e0:11:db:dc:94:f6:06:ea:e1:5a:cc:f1:ab:
db:f0:19:d2:09:86:15:f0:12:6c:39:38:e6:c3:43:
e7:b4:07:29:f8:24:01:76:68:29:ea:b4:b7:7e:ff:
f9:6c:97:41:0f:d1:00:35:1d:69:7d:a2:55:d4:f0:
22:a9:f7:a6:bf:89:8b:00:d9:4f:a9:a1:36:5f:0a:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:E0:08:7B:B4:83:B2:17:86:50:A1:47:EA:8D:A5:CB:07:E2:81
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a3:fa:ab:02:ee:81:dc:df:27:0e:fb:02:a1:95:a7:ed:e4:
98:68:8a:32:45:ef:ca:32:1e:9e:23:3d:5b:ac:44:8f:76:f4:
01:98:a9:ba:a3:d1:d4:c6:b1:d6:04:7a:64:2f:82:75:18:11:
cd:5f:4b:b3:56:79:16:6e:ba:02:92:10:58:e0:47:62:ea:05:
de:fc:37:0c:b9:bc:44:a2:99:c9:c8:db:8f:ee:73:66:91:d5:
cb:a0:6a:fe:20:e5:9f:7c:b3:c8:27:ff:0a:57:83:69:cb:e0:
c9:e6:90:dd:53:2e:46:f5:51:94:98:c0:b7:13:9c:db:b2:cc:
cb:a8:86:5d:90:d8:65:40:35:e5:59:9d:74:2c:57:1e:66:74:
ca:94:7c:bc:b5:b5:73:5b:a3:6c:88:6d:ff:d3:49:53:09:db:
27:30:af:f5:8b:6f:1a:33:2a:3c:13:01:c8:ab:1b:24:22:62:
c4:ea:c2:78:40:8c:6d:71:96:bf:2f:fc:cb:d1:c5:55:87:e7:
91:0b:97:03:2c:75:27:6c:d1:bc:ba:2f:f0:c8:81:74:cd:19:
a5:a3:da:f8:3e:53:8c:e2:73:71:cb:50:72:0a:19:41:a6:99:
7e:87:6f:81:6b:2f:5b:0a:41:b0:a5:8c:bd:fa:c6:47:de:e9:
d3:69:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:04:35 2025 by rpki-client