Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: VJO9gtTt9TvY+OQ0YiYvkCd8WWNjjr6QoMOM9xJwln4=
Subject key identifier: 38:4E:48:8D:80:1D:1E:D4:D1:B0:CE:D1:87:BE:16:8D:4F:64:44:74
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 019873E1E639342E7E457845A50AFB016AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 0976
Signing time: Mon 04 Aug 2025 07:00:41 +0000
Manifest this update: Mon 04 Aug 2025 07:00:41 +0000
Manifest next update: Tue 05 Aug 2025 07:00:41 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: j/3ZfcYwlGRCMvaTWQStT518ByF28kU2OBculbee1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e6:39:34:2e:7e:45:78:45:a5:0a:fb:01:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Aug 4 07:00:41 2025 GMT
Not After : Aug 5 07:00:41 2025 GMT
Subject: CN=384e488d801d1ed4d1b0ced187be168d4f644474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:44:fb:f0:0d:4d:9e:5d:58:a4:53:bf:cb:
7f:37:7f:86:6c:22:72:43:4f:01:39:2a:78:8d:99:
34:19:70:9c:ed:29:1c:33:3e:4f:76:e2:13:26:88:
51:af:69:41:5c:cd:4e:05:40:ae:83:89:77:9a:ce:
02:31:8e:bf:e7:3a:ba:c4:5e:15:52:dd:ff:17:98:
e0:83:54:90:30:c2:81:92:ba:e6:1c:6d:01:95:f6:
82:15:9f:d9:a7:62:04:92:08:d0:ff:bf:6f:b1:8d:
7c:6d:c4:35:99:79:dc:b6:14:c9:b6:19:03:43:5e:
f0:28:f1:0a:8e:eb:93:97:0c:5d:b5:da:70:4b:13:
a3:be:c9:c5:c6:e0:5f:22:3d:4f:c3:3b:70:83:d9:
68:1f:89:e6:2d:17:91:f0:be:7c:6d:f4:e7:24:b3:
6f:c7:56:be:8a:dd:79:64:d3:09:bc:e9:42:1f:3a:
59:ad:d9:e1:b6:33:6d:01:f1:ef:f7:42:0e:f8:44:
96:ee:2d:a7:18:c3:05:7e:a8:0b:27:b3:95:f6:46:
b6:2f:0c:80:fa:1f:5f:6e:69:f4:74:3f:d0:73:d2:
a9:07:4d:49:66:71:3a:e5:72:39:d4:aa:ac:ac:21:
a9:10:1a:ac:31:ae:58:99:f3:d4:7a:f7:71:df:63:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:48:8D:80:1D:1E:D4:D1:B0:CE:D1:87:BE:16:8D:4F:64:44:74
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:f8:f1:57:d5:40:89:40:79:5e:a4:06:15:bb:6f:a8:88:
82:32:0f:d0:be:18:f2:47:09:ef:39:f4:b6:58:a1:58:a2:c1:
ee:75:0f:b1:64:5d:27:86:18:d1:7d:ae:cb:dc:d6:63:65:7c:
18:e9:ff:cc:55:8a:9e:f8:44:7b:37:da:93:e2:96:ff:38:c9:
a8:da:5d:79:bd:62:da:7c:d3:b3:57:26:95:ad:c8:6b:24:89:
be:2c:96:bc:37:0e:7a:5c:5e:69:9d:cb:c0:38:fb:87:ac:b4:
70:dc:47:2a:c1:ca:80:c9:44:cd:e2:d1:64:a3:9a:9d:57:97:
86:da:20:ec:54:e2:d1:58:43:5a:00:cc:59:86:54:c6:e2:d6:
cc:4d:d5:3c:10:15:10:1d:96:af:0b:a5:03:55:47:d8:42:8a:
64:b1:ca:83:30:d6:be:cd:b7:17:97:28:58:c7:c7:90:88:f0:
51:88:12:61:d5:27:02:66:01:07:0f:93:c9:04:d8:dc:f6:c8:
bb:26:02:fd:c9:72:df:88:42:4d:15:0b:91:c6:dc:54:43:43:
cf:d5:3f:a9:75:56:6a:3c:1b:4d:c4:f0:3d:d0:d3:db:3c:36:
2c:84:10:96:5e:24:d4:89:31:c9:f6:4f:59:d4:53:3d:78:f7:
7e:c9:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:26 2025 by rpki-client