Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: 5KdRVdOBmAtFvRtOmKi4PEjYILRtyidiVcKclM8UIjw=
Subject key identifier: 4C:00:4F:3B:89:59:AD:06:CB:83:31:5B:3F:C4:20:40:CF:6D:72:DC
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019A522CBA826A1570419CBCFF16F73A75A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 1164
Signing time: Wed 05 Nov 2025 04:00:54 +0000
Manifest this update: Wed 05 Nov 2025 04:00:54 +0000
Manifest next update: Thu 06 Nov 2025 04:00:54 +0000
Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: D6QyOMaRy4xdJUwhuW6QoBNHEl83IRY2eFsfiAU0WmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:ba:82:6a:15:70:41:9c:bc:ff:16:f7:3a:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Nov 5 04:00:54 2025 GMT
Not After : Nov 6 04:00:54 2025 GMT
Subject: CN=4c004f3b8959ad06cb83315b3fc42040cf6d72dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:c2:bb:1a:1e:9d:42:b7:5a:43:aa:dc:29:
f0:a7:c2:e1:7d:e8:bd:a8:22:dd:4f:4a:d4:98:e7:
ec:06:dd:7c:cb:44:97:9f:80:70:82:09:d3:1a:a4:
03:60:11:3c:11:12:a6:11:a4:b5:d7:33:09:dd:94:
04:3b:b2:44:83:52:b1:a0:fb:67:de:c4:a7:0d:24:
6c:74:12:25:81:cb:ad:72:e7:e9:61:31:ae:2f:c4:
8d:21:27:08:10:79:fd:a0:a7:35:c9:f6:bc:6e:db:
3f:cb:ed:2e:49:28:30:b0:b9:80:3b:42:9d:3b:af:
07:5e:1c:8c:ff:4e:7c:2d:3e:12:ba:4f:ad:a6:b7:
6a:9a:a1:52:0e:9d:52:18:77:42:22:81:d0:b4:0d:
41:b7:08:eb:90:67:aa:d3:10:aa:40:b6:0a:22:7b:
df:d1:f6:fd:c4:f9:36:ef:1d:d4:19:59:ed:a1:6f:
e4:00:5f:bd:f0:3c:15:45:58:cb:6d:21:e7:b6:30:
22:64:0d:4a:4b:86:53:92:80:97:1c:08:76:79:c3:
69:76:d7:37:3f:3a:90:af:0b:81:aa:cd:cf:2c:2b:
2e:00:f4:34:cd:ec:42:5d:a7:9c:1c:9e:a4:04:10:
35:29:db:09:89:24:36:59:29:2e:9e:30:06:dc:cf:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:4F:3B:89:59:AD:06:CB:83:31:5B:3F:C4:20:40:CF:6D:72:DC
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:aa:27:80:b1:42:0b:5a:1e:f7:44:17:85:ac:be:1e:6e:63:
40:d7:15:05:fa:27:12:05:ac:56:51:48:41:36:dc:ef:48:f4:
ae:28:c7:af:36:06:66:38:d0:4e:d5:f2:4b:43:2d:36:e9:15:
1f:4a:1b:9d:e6:61:38:f0:70:58:70:09:c4:30:03:c9:26:39:
52:3e:e3:bc:59:c2:02:42:44:7c:c7:fc:37:d2:63:e2:bf:f3:
95:d4:ad:5b:d0:7c:e0:c8:f1:6d:88:0c:81:23:36:92:ac:b6:
c6:f8:6d:fe:5e:5e:e4:9c:9b:00:69:43:01:e9:c4:2b:24:38:
54:c2:18:d7:9a:09:c9:d9:c8:1e:fd:b6:ad:d3:45:69:ae:49:
3b:0a:92:07:c6:45:3f:cb:2c:fb:d1:87:34:94:e3:20:1b:1b:
0c:9b:b6:62:33:a4:c7:63:36:a5:d6:ec:61:c5:5e:5a:bb:4f:
a6:93:00:77:b5:53:92:e2:b0:12:37:28:de:33:20:7c:92:04:
27:d6:0c:29:55:f9:35:29:95:4b:37:e8:65:46:c6:d0:4d:d1:
1d:4e:33:bb:e7:42:6b:bf:46:43:7d:48:e4:4a:c8:ee:9a:9d:
ae:e4:00:54:be:1f:fa:02:7a:bf:ac:9f:bb:1e:6f:90:fc:99:
52:62:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:24 2025 by rpki-client