Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: KCNsSUKyvsDjziEPa76kf4EGvJyG+5OODbuOOw12CEE=
Subject key identifier: AA:5D:21:20:A1:91:75:F2:84:BF:29:5D:8D:EC:18:4B:7F:B7:73:A7
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 019A5151316CA17B6E6583047557FA2536A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 06F1
Signing time: Wed 05 Nov 2025 00:01:06 +0000
Manifest this update: Wed 05 Nov 2025 00:01:06 +0000
Manifest next update: Thu 06 Nov 2025 00:01:06 +0000
Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: 9ZwHIWpsM32POMWhfoJngxrjEUp8ezvSaEd5JqlF9LI=)
2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:31:6c:a1:7b:6e:65:83:04:75:57:fa:25:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Nov 5 00:01:06 2025 GMT
Not After : Nov 6 00:01:06 2025 GMT
Subject: CN=aa5d2120a19175f284bf295d8dec184b7fb773a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:37:29:63:ea:e5:48:0c:b8:6c:ef:79:32:
c1:64:8f:d5:e4:fd:bb:c1:33:1c:09:24:2b:3a:40:
3a:aa:e9:f9:42:93:89:e1:d3:f2:6b:a8:52:11:f7:
f8:f9:e6:fb:33:a3:76:6c:8e:d4:e3:f6:92:42:38:
17:6e:5f:d6:e0:93:1c:13:59:14:0e:ec:61:9b:5a:
f3:ef:53:40:14:b6:4e:2f:db:cf:4d:47:b3:a9:1a:
7d:0c:88:7e:66:63:7c:0f:18:76:6c:d2:96:e7:cd:
f6:bd:4a:d1:7b:25:9e:f2:fb:0a:be:97:12:6b:5c:
17:af:fd:17:5a:c5:ed:27:08:d5:4c:c0:e2:95:77:
94:b9:99:d3:fb:ab:f6:08:15:59:17:33:ac:5c:70:
99:9e:09:c7:f7:af:26:4e:44:bf:bd:d6:c9:ae:87:
20:bf:b2:ad:1f:bf:bb:49:c3:eb:c7:9e:5e:89:45:
23:5f:48:6a:cd:b5:cb:db:f2:1d:3a:05:14:e0:c4:
e5:b6:cb:98:0e:bd:90:64:8a:70:49:86:49:e9:75:
43:c2:73:e6:85:74:98:57:e3:e0:28:9b:b2:24:59:
cf:13:db:96:e1:48:35:5a:98:1d:a3:ae:08:dd:5a:
e2:3e:ce:e2:81:27:d8:df:40:fd:98:8d:fe:d7:1b:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:21:20:A1:91:75:F2:84:BF:29:5D:8D:EC:18:4B:7F:B7:73:A7
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:24:48:85:d1:4a:c2:d0:fb:cf:bc:bb:65:57:10:67:73:
8b:4d:19:c1:08:9d:91:e8:44:3e:c3:f3:dc:10:22:d3:7f:0a:
1e:f3:ea:0f:9a:52:7c:47:82:54:6f:d6:29:f2:8e:e2:68:b4:
32:20:4d:11:ac:b9:0f:86:1c:a0:bc:6c:93:ab:36:11:66:c4:
80:dc:a8:56:9e:36:06:7d:49:3c:3d:c0:31:df:97:52:7d:9f:
4d:cd:40:dc:8b:93:31:fe:d9:66:a3:0a:d6:36:59:93:2a:f7:
7e:e4:25:e4:e2:06:08:c8:93:29:47:ed:a1:8a:91:8e:23:8c:
71:c0:0b:f2:2b:4b:5b:01:fa:bb:21:6b:85:4b:ba:91:3b:87:
2d:33:7d:81:f4:53:31:73:8d:ca:a4:f3:bf:aa:2a:f1:48:9d:
fd:57:c4:b0:80:10:f7:ff:3e:5e:5d:d9:c3:c0:aa:cb:4b:a4:
0b:21:88:6e:21:38:1f:93:8a:f4:7a:de:b1:d1:c1:b8:39:ad:
d7:96:d0:45:63:cd:1a:7f:a9:fc:28:13:c3:5d:88:1a:89:b0:
58:a6:2c:36:01:6e:49:2f:1b:25:f1:54:bc:93:26:b1:dd:3f:
86:87:e8:d1:f3:74:0a:01:2d:f0:37:69:1a:c7:10:3f:1a:46:
bf:56:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:07 2025 by rpki-client