Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: aChByf4suUfrqJRKsJ5RggKg0rT0KeI+YnSFR8eRXN4=
Subject key identifier: 30:47:91:59:69:BE:71:3E:AD:49:B0:B0:3F:E3:15:DE:7F:73:9B:8C
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 01976DAB2588B7B12ED31B491AF733959F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 0572
Signing time: Sat 14 Jun 2025 09:00:22 +0000
Manifest this update: Sat 14 Jun 2025 09:00:22 +0000
Manifest next update: Sun 15 Jun 2025 09:00:22 +0000
Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: P9IpOu9on17OKxr1SW8dExfmn0nvR/KpCQbIL41YGBE=)
2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:25:88:b7:b1:2e:d3:1b:49:1a:f7:33:95:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Jun 14 09:00:22 2025 GMT
Not After : Jun 15 09:00:22 2025 GMT
Subject: CN=3047915969be713ead49b0b03fe315de7f739b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:4d:67:be:77:7a:a8:c4:99:26:55:af:4f:
0f:6b:25:5b:dc:11:0e:73:50:32:a6:2b:5c:65:6f:
6f:d4:47:aa:f9:17:e6:0d:54:79:e7:ae:23:d9:f6:
eb:62:3e:45:0d:1a:13:ff:00:5d:98:f2:b2:06:80:
88:39:8d:86:13:69:1f:27:a1:83:c2:27:86:5c:88:
50:10:e5:ad:d3:37:b1:79:24:94:b9:a4:38:52:89:
38:18:b4:fb:94:e2:40:f9:12:c8:cc:33:40:a6:4a:
ef:78:de:01:47:02:4a:dc:17:51:ed:06:0c:44:24:
12:7a:83:86:07:43:ed:8e:bd:9c:25:aa:e7:96:a4:
85:76:a6:4b:e1:c6:50:63:cb:9b:9f:39:ee:a4:b4:
c3:cc:1b:b8:aa:b8:4a:e0:c9:9c:a4:91:fd:69:28:
02:c3:6c:21:ee:8b:cb:c7:10:7c:1f:af:f1:37:5c:
c7:b5:d1:64:c4:00:84:72:3c:4f:71:b0:1f:50:7b:
d0:3e:42:51:f0:3f:17:f7:c0:ae:31:b5:da:21:51:
f8:48:e9:d1:fb:c9:07:18:fb:75:82:20:5b:2d:25:
89:6a:21:a6:45:f7:d7:75:48:ae:82:48:2e:04:80:
b9:25:4c:eb:db:ca:96:cd:04:f6:84:e9:be:10:92:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:91:59:69:BE:71:3E:AD:49:B0:B0:3F:E3:15:DE:7F:73:9B:8C
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:dc:ee:f2:b0:84:65:5a:76:00:11:e5:8a:1f:5e:17:d9:
56:36:cc:ed:56:74:36:2f:16:70:4f:28:12:83:08:8d:7b:ef:
da:55:bd:c1:fd:3a:f6:db:99:f5:6c:60:40:92:15:26:21:51:
0a:b3:0d:55:5f:33:b8:c4:b0:72:54:9a:1d:ab:97:5c:e5:e0:
7d:14:47:7a:6a:53:23:8b:da:49:00:f0:c5:ac:4b:f8:ca:5a:
41:4a:80:03:63:36:62:e9:e4:e2:98:44:6c:86:64:d7:8a:9d:
72:8d:4c:52:61:ee:07:9e:0d:fd:6c:fa:da:6e:32:93:94:fe:
74:2f:4d:69:af:fc:52:20:a5:d7:00:94:3f:f2:4c:dd:ad:5b:
af:60:b3:05:35:9d:8f:15:c9:f5:23:06:0c:61:fb:42:9f:df:
b2:30:60:37:84:b6:a7:ca:d4:25:1f:4b:5d:9a:fb:0f:61:cc:
46:18:1d:08:f3:c8:a8:31:f4:e9:58:5b:54:98:e4:e2:40:e7:
7b:e7:a8:3e:8b:9f:f4:f9:e4:cc:83:16:92:f2:36:04:01:20:
1c:45:ee:38:f3:c7:a6:4a:b5:10:b1:21:43:85:73:5a:b1:2a:
df:9c:15:4e:63:83:66:87:3a:2c:fa:13:8e:92:c0:b0:ad:91:
c2:04:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:41 2025 by rpki-client