Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: YhERPVyoo2mIro9wTQUB+ZVUTvCz3RVlGSnOBR2FviA=
Subject key identifier: 50:E0:B6:D8:83:C0:1E:FE:5A:2C:83:99:54:00:18:03:BB:01:66:38
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 01976929B93F3B1C099727042008B49F72EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 12C1
Signing time: Fri 13 Jun 2025 12:00:31 +0000
Manifest this update: Fri 13 Jun 2025 12:00:31 +0000
Manifest next update: Sat 14 Jun 2025 12:00:31 +0000
Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: Q8eNBZCkwONR/iifGoF7+opRlYATRTE2BdsTV6agIMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:b9:3f:3b:1c:09:97:27:04:20:08:b4:9f:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Jun 13 12:00:31 2025 GMT
Not After : Jun 14 12:00:31 2025 GMT
Subject: CN=50e0b6d883c01efe5a2c839954001803bb016638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:47:14:59:55:77:c0:3e:ef:54:92:41:86:
29:7a:55:17:99:2f:46:1a:b3:c5:7c:28:8f:5e:a7:
29:1f:49:12:34:af:dc:d6:f6:e8:71:19:8b:a8:22:
ce:f8:60:1c:a4:d3:c1:63:c3:5e:b9:5e:d7:25:99:
05:80:a7:a0:b4:bb:f1:f4:4f:bd:c0:74:b5:0a:5a:
78:27:38:e2:af:b3:bd:c1:dc:7c:a4:3f:e2:78:de:
8e:fa:c0:0f:ba:cb:82:81:6e:02:0f:c8:e0:28:f9:
d8:59:9c:71:ff:1a:8d:59:8a:bf:61:46:52:ba:d5:
90:cd:5f:7f:8f:fa:5b:d8:7e:72:e0:31:58:a6:13:
35:cd:e5:5b:e1:ee:c8:ef:1c:c9:e4:d1:5d:3e:8a:
11:ef:2b:c3:0a:ef:47:a4:78:dc:81:5c:6d:bf:44:
54:cf:d5:0c:70:ba:b9:dd:29:45:9c:c2:b1:58:8f:
d7:08:e4:d9:85:a5:e2:78:45:58:9a:05:a5:74:02:
5e:9b:6a:92:b4:c8:37:90:8e:88:0c:33:52:df:c8:
9a:76:98:c6:04:5e:bf:e0:65:4a:6f:51:61:88:48:
a9:ba:88:1b:e9:87:28:19:a4:d9:7c:4e:06:f8:1e:
d9:6b:1b:30:ef:2e:75:de:26:56:af:33:c4:84:b6:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:B6:D8:83:C0:1E:FE:5A:2C:83:99:54:00:18:03:BB:01:66:38
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:6f:23:37:b1:97:f6:48:b3:13:dd:4b:43:ac:f9:d7:89:
1c:0f:d6:00:77:55:43:1a:67:cd:03:95:95:00:0e:db:a0:70:
cb:6a:a6:79:39:18:77:c8:e8:30:85:13:cf:24:af:dc:fa:da:
c0:0a:dd:0f:07:81:9b:76:ca:59:c1:6c:88:3f:0f:86:5b:af:
b4:cc:8d:50:05:64:bd:7c:dd:80:b2:b7:17:2b:b2:37:5d:3b:
af:39:00:8b:dc:7e:e7:91:a7:6b:49:f9:25:10:ca:30:40:17:
bd:71:2d:54:ec:62:d8:fc:ae:3c:36:28:4c:4a:4f:62:90:0c:
ba:9f:fc:57:0f:72:59:f2:e5:6f:b7:13:fd:88:21:ec:2d:a2:
3a:35:70:8b:26:f5:13:fc:79:be:a6:72:d8:07:47:38:87:fe:
41:ed:29:70:74:8f:e6:23:71:34:20:07:cc:7a:3e:0d:16:6d:
e2:dd:0f:d3:db:99:99:48:7e:f0:37:58:7d:9f:13:11:74:53:
72:d0:88:9d:06:c0:ad:ee:c3:22:49:c4:af:e1:e5:ba:33:51:
b0:e5:e1:de:91:0e:1c:13:7c:51:53:b7:b1:dd:81:15:6c:8f:
eb:19:49:f1:b4:32:b5:92:40:91:b8:49:57:a8:3b:c0:98:ab:
70:0f:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:37 2025 by rpki-client