Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: q3tcLIlJG6KfGQhJYoa/ZdyQWt4CxTQCqehuUXKN9t4=
Subject key identifier: C2:C9:78:1B:F9:BF:99:C2:91:B9:BC:C5:E0:98:53:DD:6E:45:AD:AC
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 019883567B3CC585D01BA6C71F5E959435AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 1353
Signing time: Thu 07 Aug 2025 07:02:19 +0000
Manifest this update: Thu 07 Aug 2025 07:02:19 +0000
Manifest next update: Fri 08 Aug 2025 07:02:19 +0000
Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: NLUNhIFkwuiXMn9sK0qhB9KTfOpoh08oPfxjiDKYIlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:7b:3c:c5:85:d0:1b:a6:c7:1f:5e:95:94:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Aug 7 07:02:19 2025 GMT
Not After : Aug 8 07:02:19 2025 GMT
Subject: CN=c2c9781bf9bf99c291b9bcc5e09853dd6e45adac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:f7:54:ff:62:07:b8:6f:b6:46:6c:fe:73:
55:c8:23:c7:c8:f3:47:9f:e0:33:4f:17:2a:da:1a:
d4:01:fc:32:10:54:67:d2:6d:27:f9:cd:f4:bb:49:
f0:84:fa:6c:97:aa:2d:85:eb:f1:e9:22:6a:aa:58:
33:50:0d:b7:cf:90:a4:3a:05:ed:03:69:9c:ff:20:
6e:94:f3:d2:57:12:ee:aa:8b:31:3f:00:b3:60:09:
a9:0b:c2:ab:3c:d6:bf:1a:ef:0d:d2:a5:d1:53:00:
eb:01:9e:40:1e:6b:71:cd:2b:a7:ff:5a:db:69:e2:
1e:c8:82:0c:08:61:6d:bb:9a:ce:f7:27:e7:78:64:
d7:9f:66:35:d5:b1:e3:f9:46:5f:aa:26:f5:14:e7:
b4:dc:43:4e:a8:d1:37:bc:99:d4:49:bf:ee:0e:d2:
79:dc:57:19:5a:dc:fc:e0:59:11:c2:54:cd:24:94:
f9:dd:73:0b:c5:69:e4:42:29:29:20:fe:65:22:ba:
60:a8:7c:e8:31:85:a3:af:30:81:2f:ad:82:fb:f0:
2f:ff:23:0e:48:35:4c:30:7c:79:0b:2a:f4:d6:6a:
36:e4:68:e4:bc:6d:d2:49:bc:cf:a0:25:36:9a:96:
61:f0:a9:09:42:bc:93:5c:dd:b3:73:c0:1d:4e:b0:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C9:78:1B:F9:BF:99:C2:91:B9:BC:C5:E0:98:53:DD:6E:45:AD:AC
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:60:be:c8:ba:e5:1e:18:3f:fd:d2:05:1a:50:f3:93:78:bb:
84:99:53:9c:88:c0:a8:e8:05:b9:d3:26:b7:90:b0:5a:80:6b:
a2:d9:a7:c1:38:6f:18:c7:0d:a2:f9:2a:25:d6:ad:9d:e9:ad:
64:11:67:0a:94:a8:d6:2e:06:39:ca:c3:41:e4:79:f3:67:ff:
9b:64:bd:9f:69:7e:50:2c:ae:1f:b8:0b:75:72:62:76:47:28:
f2:05:09:1a:dc:fe:87:14:ae:ce:2e:27:24:39:db:51:15:53:
a2:6c:c9:52:bd:c4:06:6d:8f:2b:3e:6e:e0:bd:92:70:3c:52:
82:57:25:72:39:c5:de:cf:11:b4:6f:7d:8d:fa:8a:b7:15:06:
ce:ae:8b:c2:57:e7:17:82:91:59:59:5a:b4:22:77:c1:11:15:
5a:b4:a9:b0:1f:f8:94:2d:bb:09:0a:5a:cc:36:53:42:1e:43:
01:b9:a2:91:8b:55:3c:a3:de:01:22:04:2b:11:70:b9:ff:ef:
83:3d:8a:fd:61:f5:73:4c:84:e5:49:18:2e:e5:30:10:94:85:
d9:1c:03:99:78:3e:c6:8d:2d:b3:8e:28:c5:17:ed:44:1b:a9:
af:45:12:1d:dd:13:fc:5b:f9:f9:dd:eb:eb:b7:1d:f1:a1:75:
dd:46:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:37:35 2025 by rpki-client