Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: qlvw9Yy37qeastr8QHL6fVBuzPtBRJpYmatfybMjYsA=
Subject key identifier: 9A:DF:2C:EC:40:96:EB:E1:23:1D:F0:32:30:E1:0C:F6:7C:F0:E6:C7
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 01967868849BE4738483C6CC6E2C5C32DE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 04F3
Signing time: Sun 27 Apr 2025 18:00:37 +0000
Manifest this update: Sun 27 Apr 2025 18:00:37 +0000
Manifest next update: Mon 28 Apr 2025 18:00:37 +0000
Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: hikAY+MNXIPkEtGaloXWERsoXiE2phDT6a5bBZODz9U=)
2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:84:9b:e4:73:84:83:c6:cc:6e:2c:5c:32:de:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Apr 27 18:00:37 2025 GMT
Not After : Apr 28 18:00:37 2025 GMT
Subject: CN=9adf2cec4096ebe1231df03230e10cf67cf0e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:f5:eb:48:c4:b8:76:e7:bf:26:d1:b7:ba:
e9:12:29:22:01:16:19:55:d0:b3:2a:76:df:9c:b1:
9a:e0:b6:dd:0f:40:43:80:7c:41:2e:d7:11:b9:62:
8b:50:c7:64:0a:5f:f3:35:de:1b:11:75:2b:9f:7a:
e1:63:2c:84:e7:da:68:11:e9:d9:a3:2e:85:fd:9c:
db:bb:e5:f0:4a:42:ba:52:63:d9:e8:35:fc:6b:8d:
78:e3:63:93:0e:e9:5e:eb:12:20:e2:8a:96:17:c5:
03:1c:eb:e3:67:24:44:c5:1c:56:de:c1:30:ce:56:
d7:4f:16:e4:71:18:db:04:ce:29:9a:39:c3:d3:84:
0f:79:e1:64:28:66:a2:bf:4c:66:36:52:fb:cf:17:
77:7d:f3:0f:d5:4a:9a:ed:d4:6f:f0:7d:78:a9:11:
8b:b1:b3:34:fd:9e:7b:09:76:1b:4e:f0:a6:f2:5e:
e4:f9:43:29:67:7c:19:c6:9f:be:98:b1:a9:e5:14:
d9:9b:68:d8:40:4e:3f:55:b9:f0:43:44:69:9e:a1:
a8:3f:3e:04:82:8a:41:d1:2e:00:12:95:4d:42:75:
5e:1a:7d:75:c7:8f:78:ad:40:d1:59:91:3f:f5:9b:
dd:70:b7:c9:6b:6b:55:92:07:77:9f:df:21:17:ff:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:2C:EC:40:96:EB:E1:23:1D:F0:32:30:E1:0C:F6:7C:F0:E6:C7
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3b:12:a1:1c:e8:e1:b9:f2:97:07:1d:dc:dc:14:23:20:cf:
07:0c:4c:84:50:81:16:12:fd:b1:48:48:fd:c5:bf:9c:22:8d:
d6:6d:f0:a6:2b:57:41:9d:31:0a:17:a6:ab:69:04:eb:aa:43:
8d:9f:f0:d7:2a:71:27:ee:89:a4:2a:75:76:e8:e2:c7:ff:96:
4a:14:69:e8:f1:35:53:46:54:0c:52:a1:24:1b:72:5c:f3:79:
9a:50:5a:e0:a6:ed:d4:58:68:6b:87:8b:9a:7e:f0:b4:19:99:
a1:89:05:4b:23:b9:e4:69:d2:06:7b:0f:c1:06:cf:a5:1c:8b:
95:a0:7c:d8:0e:b5:f3:2b:7d:20:df:59:d1:5a:16:da:3c:4c:
b5:f7:a2:04:34:09:af:0d:5a:d3:b3:88:64:f8:b7:79:18:57:
48:69:78:94:6b:a6:7e:e2:f8:6e:d5:93:53:a5:0f:a2:bd:2a:
e0:80:f8:dc:3b:b9:cd:ce:df:98:14:6d:a0:80:2d:73:25:1e:
92:7f:b0:21:01:f5:7b:67:dd:7c:45:3b:2b:40:4e:d3:b3:8a:
37:61:f8:e7:7e:4c:9a:3d:ea:5a:99:5e:e4:00:fa:22:3a:87:
d2:86:cd:cc:83:33:92:44:4e:fb:e5:7e:2f:b4:14:3f:01:be:
18:f7:4d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aISb5HOEg8bMbixcMt42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi
N2E4ZDAwHhcNMjUwNDI3MTgwMDM3WhcNMjUwNDI4MTgwMDM3WjAzMTEwLwYDVQQD
Eyg5YWRmMmNlYzQwOTZlYmUxMjMxZGYwMzIzMGUxMGNmNjdjZjBlNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP3160jEuHbnvybRt7rpEikiARYZ
VdCzKnbfnLGa4LbdD0BDgHxBLtcRuWKLUMdkCl/zNd4bEXUrn3rhYyyE59poEenZ
oy6F/Zzbu+XwSkK6UmPZ6DX8a41442OTDule6xIg4oqWF8UDHOvjZyRExRxW3sEw
zlbXTxbkcRjbBM4pmjnD04QPeeFkKGaiv0xmNlL7zxd3ffMP1Uqa7dRv8H14qRGL
sbM0/Z57CXYbTvCm8l7k+UMpZ3wZxp++mLGp5RTZm2jYQE4/VbnwQ0RpnqGoPz4E
gopB0S4AEpVNQnVeGn11x494rUDRWZE/9ZvdcLfJa2tVkgd3n98hF/+PuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrfLOxAluvhIx3wMjDhDPZ88ObHMB8GA1UdIwQY
MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt
YjkzMWFlNTM5ZTdkLzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk
LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzsSoRzo
4bnylwcd3NwUIyDPBwxMhFCBFhL9sUhI/cW/nCKN1m3wpitXQZ0xChemq2kE66pD
jZ/w1ypxJ+6JpCp1dujix/+WShRp6PE1U0ZUDFKhJBtyXPN5mlBa4Kbt1Fhoa4eL
mn7wtBmZoYkFSyO55GnSBnsPwQbPpRyLlaB82A618yt9IN9Z0VoW2jxMtfeiBDQJ
rw1a07OIZPi3eRhXSGl4lGumfuL4btWTU6UPor0q4ID43Du5zc7fmBRtoIAtcyUe
kn+wIQH1e2fdfEU7K0BO07OKN2H4535Mmj3qWple5AD6IjqH0obNzIMzkkRO++V+
L7QUPwG+GPdN0A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:18:17 2025 by rpki-client