Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: dD/YADHUXk8RBx/EfX0VKzCDzQQZvjU/6It9w3Q/LpI=
Subject key identifier: 33:C9:12:8B:30:C1:CC:8E:F6:63:1E:89:5C:4E:3B:01:99:CF:CC:94
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 01988B7C941C6C2519A656F2AF41807E80A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 10C6
Signing time: Fri 08 Aug 2025 21:00:54 +0000
Manifest this update: Fri 08 Aug 2025 21:00:54 +0000
Manifest next update: Sat 09 Aug 2025 21:00:54 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: aehS5D4ifEFFAS2ZwBatOf0BrkUbC/2dHMv6tBtZDGQ=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:94:1c:6c:25:19:a6:56:f2:af:41:80:7e:80:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Aug 8 21:00:54 2025 GMT
Not After : Aug 9 21:00:54 2025 GMT
Subject: CN=33c9128b30c1cc8ef6631e895c4e3b0199cfcc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:d4:b0:98:0a:d7:a4:8c:1e:f8:f4:4a:ae:
64:23:22:c4:9e:82:f3:47:f8:94:97:7e:f9:da:84:
fd:10:60:a6:82:b3:c6:c2:c3:5c:8a:40:d0:88:7b:
87:ac:c4:e3:a8:2b:3d:9c:9e:4e:7e:dd:6d:be:df:
f3:7b:59:29:c7:a2:00:a9:40:56:d8:e1:44:29:4e:
83:4d:e6:39:9c:b4:ee:8e:eb:1e:5d:7e:67:9e:e7:
ba:70:2e:96:40:c5:ff:f5:48:33:a7:30:b9:23:de:
b2:eb:27:61:4a:eb:bc:3f:0c:bb:9e:24:d1:b0:27:
0e:aa:0d:6f:3c:43:1a:14:e3:bf:bf:e6:90:a8:fd:
27:5c:87:58:c7:ca:89:88:33:71:90:bf:85:55:10:
59:23:84:9e:6c:8d:d0:3d:da:98:32:09:56:e2:be:
66:35:04:00:ac:36:87:51:6a:6a:a5:5b:e4:9c:9a:
c3:21:de:ac:1f:8d:e4:1c:d8:52:2a:a3:0e:04:00:
46:d2:7d:d8:7d:b0:c2:4e:20:f7:0d:29:84:af:d7:
df:38:b5:b5:02:67:d1:39:56:8b:c0:be:0b:2f:fb:
04:6f:36:1f:e3:56:3f:7b:83:1f:73:09:80:0b:b3:
eb:c2:b9:50:5a:c4:5c:6c:a9:cb:26:b9:55:25:28:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:12:8B:30:C1:CC:8E:F6:63:1E:89:5C:4E:3B:01:99:CF:CC:94
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:4a:ec:4d:1e:d5:85:d4:11:48:82:25:b3:43:fb:cd:32:
b2:75:d5:e7:72:ea:06:58:19:48:8f:2c:95:54:a0:a6:32:64:
1e:fa:35:9c:98:1e:74:99:00:71:c3:65:bf:7b:e9:2b:6f:e8:
16:d5:ca:79:2e:07:9e:d7:f0:54:31:82:e1:5d:ac:ad:50:81:
48:96:e0:bb:1f:b1:49:2d:35:a5:0f:2d:8e:7e:49:ea:36:db:
68:35:77:00:dd:8e:84:bb:72:62:00:5d:a0:a2:ba:78:cd:01:
c6:74:96:83:05:3d:c5:4d:4d:2e:ec:e7:17:ff:ce:15:36:af:
63:7a:97:ae:30:64:89:b2:75:0e:2a:3a:5c:fd:f9:f3:df:2c:
7d:c0:c4:db:94:69:31:06:fa:eb:30:d3:a3:95:bf:38:85:75:
61:82:40:59:69:7c:5e:8b:b2:a1:1f:ca:27:6f:9b:ea:c1:b5:
0f:d9:f5:17:24:28:77:24:f4:7a:93:b8:c5:09:de:6c:85:c6:
29:a2:46:b5:a3:d2:3f:6e:fb:18:41:25:f9:bf:32:bf:91:3a:
09:83:0b:81:fa:cd:dd:d9:c8:3e:fb:4e:b6:3d:cf:00:bd:4c:
66:7f:bd:ff:26:7f:b7:1f:93:ad:0e:48:4b:bb:c9:ae:0c:dc:
ad:a2:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:21 2025 by rpki-client