Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: Sd7nJiPir7LCS5I3DjkA0Y+zvEpIArNbQqZP8Rt8WLQ=
Subject key identifier: 19:39:45:9A:99:76:69:CB:53:3F:48:FA:05:A0:72:EB:73:F6:81:CC
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 019A54C0282CFC01249BEEA59C77779273BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 1444
Signing time: Wed 05 Nov 2025 16:01:10 +0000
Manifest this update: Wed 05 Nov 2025 16:01:10 +0000
Manifest next update: Thu 06 Nov 2025 16:01:10 +0000
Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: rZTbNZxA+3oLgVtacNEfyOcC5PCfvmeTcifYe9aZA3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:28:2c:fc:01:24:9b:ee:a5:9c:77:77:92:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Nov 5 16:01:10 2025 GMT
Not After : Nov 6 16:01:10 2025 GMT
Subject: CN=1939459a997669cb533f48fa05a072eb73f681cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:d7:38:f6:27:7a:df:35:30:86:a0:a6:c9:
a2:f7:4c:84:f1:68:53:46:f1:26:65:6e:65:16:06:
69:85:ba:f3:0e:7f:91:a4:6c:0d:2d:df:3c:44:e2:
98:cb:2e:c0:01:46:85:bf:74:22:70:58:3e:9b:b3:
4c:2a:6d:7f:56:c7:63:6d:76:1b:ae:30:a8:61:ab:
37:71:8c:89:26:71:5b:3c:e5:76:36:48:74:7a:93:
26:ec:5f:ad:c3:52:63:75:eb:40:27:a6:6b:ec:58:
a9:38:78:69:0d:16:39:b8:9a:c5:1f:7a:ba:d2:ef:
7d:1b:39:04:1e:ac:83:15:77:23:6e:38:da:ea:45:
6f:14:ba:ec:75:89:b7:76:e7:8b:94:ef:ae:d9:fa:
65:e1:75:dd:b0:2e:dc:4d:21:e0:b2:b7:d3:2e:45:
a0:46:07:c0:b5:14:44:a3:1d:a9:7a:03:28:74:7c:
b8:49:ac:13:29:7f:84:43:97:fc:b4:9d:81:7f:da:
26:f0:63:c8:a1:e1:eb:3d:9a:6f:3d:64:1d:68:f4:
c5:18:d3:bf:59:ae:01:22:36:ca:9c:b4:20:ab:55:
87:98:07:be:07:ec:d0:ab:66:a3:a8:a6:0d:3e:73:
3b:bf:49:22:af:9c:a7:be:b3:cf:74:bb:3e:e3:db:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:39:45:9A:99:76:69:CB:53:3F:48:FA:05:A0:72:EB:73:F6:81:CC
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:57:8d:ea:5d:1e:87:34:7d:2c:c1:a4:c2:60:2b:f5:56:7f:
b8:32:70:a7:d1:9c:a1:42:00:6d:9a:38:4f:66:c9:da:51:84:
9c:32:44:14:08:42:aa:78:ba:77:e0:d5:8d:26:09:e8:58:31:
34:dc:81:ed:2e:0f:e8:85:97:dd:05:82:7c:d7:6d:cd:ed:4f:
a7:bc:68:d1:de:5b:82:8b:e7:0b:4c:3b:54:0d:e7:9e:3c:d7:
1f:5e:45:61:fc:22:b3:14:7b:a2:94:46:90:08:4f:99:4f:70:
71:8d:1c:6e:37:07:54:c5:94:b6:40:da:66:4a:0e:7c:b9:db:
4c:56:63:13:86:02:fb:b1:41:d7:3e:64:cf:41:4a:98:2a:3f:
c7:ed:c9:65:f2:6c:3b:ae:c3:2e:0e:b5:c6:ad:6c:f6:67:da:
5d:d5:07:0b:fc:fe:bf:78:22:78:89:6d:94:67:bb:1f:56:18:
59:45:5e:e9:44:09:b6:41:ed:1c:d4:df:35:9a:79:55:04:e3:
24:94:0f:a6:17:f6:f7:98:35:c3:d1:80:ea:d9:f8:dd:2d:cb:
1b:69:5f:95:75:25:66:19:a5:43:d4:fc:bc:d9:42:0e:d3:41:
3f:68:91:fa:e6:3d:0f:eb:96:77:f1:1b:37:a4:25:2a:9b:63:
65:1d:42:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwCgs/AEkm+6lnHd3knO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3
MmIzM2QwHhcNMjUxMTA1MTYwMTEwWhcNMjUxMTA2MTYwMTEwWjAzMTEwLwYDVQQD
EygxOTM5NDU5YTk5NzY2OWNiNTMzZjQ4ZmEwNWEwNzJlYjczZjY4MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcDXOPYnet81MIagpsmi90yE8WhT
RvEmZW5lFgZphbrzDn+RpGwNLd88ROKYyy7AAUaFv3QicFg+m7NMKm1/VsdjbXYb
rjCoYas3cYyJJnFbPOV2Nkh0epMm7F+tw1JjdetAJ6Zr7FipOHhpDRY5uJrFH3q6
0u99GzkEHqyDFXcjbjja6kVvFLrsdYm3dueLlO+u2fpl4XXdsC7cTSHgsrfTLkWg
RgfAtRREox2pegModHy4SawTKX+EQ5f8tJ2Bf9om8GPIoeHrPZpvPWQdaPTFGNO/
Wa4BIjbKnLQgq1WHmAe+B+zQq2ajqKYNPnM7v0kir5ynvrPPdLs+49t3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk5RZqZdmnLUz9I+gWgcutz9oHMMB8GA1UdIwQY
MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt
MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk
LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaleN6l0e
hzR9LMGkwmAr9VZ/uDJwp9GcoUIAbZo4T2bJ2lGEnDJEFAhCqni6d+DVjSYJ6Fgx
NNyB7S4P6IWX3QWCfNdtze1Pp7xo0d5bgovnC0w7VA3nnjzXH15FYfwisxR7opRG
kAhPmU9wcY0cbjcHVMWUtkDaZkoOfLnbTFZjE4YC+7FB1z5kz0FKmCo/x+3JZfJs
O67DLg61xq1s9mfaXdUHC/z+v3gieIltlGe7H1YYWUVe6UQJtkHtHNTfNZp5VQTj
JJQPphf295g1w9GA6tn43S3LG2lflXUlZhmlQ9T8vNlCDtNBP2iR+uY9D+uWd/Eb
N6QlKptjZR1Cew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:46 2025 by rpki-client