Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: pXxxKuHCN3Fi1rA113yaos0UPo50tRITQ8fECTv2dbc=
Subject key identifier: AC:D6:D2:78:28:69:4E:7A:F1:2E:6B:A2:A9:C3:76:CB:8E:FB:66:7F
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 0198849EE93AE386DCE30BA0B5E2C065C9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 1075
Signing time: Thu 07 Aug 2025 13:01:03 +0000
Manifest this update: Thu 07 Aug 2025 13:01:03 +0000
Manifest next update: Fri 08 Aug 2025 13:01:03 +0000
Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: LQbKTItYRhBM7Xmoj70aVjZe+RDndxK3BBsXSClUVDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:9e:e9:3a:e3:86:dc:e3:0b:a0:b5:e2:c0:65:c9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Aug 7 13:01:03 2025 GMT
Not After : Aug 8 13:01:03 2025 GMT
Subject: CN=acd6d27828694e7af12e6ba2a9c376cb8efb667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:81:ea:f4:e3:16:ec:3a:9e:dc:a0:be:80:
95:72:9f:7a:ed:d0:49:75:94:b1:c6:ea:17:80:40:
3e:7c:07:ba:cf:d6:52:49:ca:27:25:06:a4:41:bb:
db:15:6f:35:bc:f5:cc:64:93:93:fd:41:40:0d:0b:
6f:61:5d:db:e9:4f:20:1a:2b:17:37:02:ca:d9:25:
d6:d1:dd:f8:ad:63:d7:2c:dc:f8:17:26:88:1c:96:
dd:6c:1a:b0:df:72:4f:90:64:92:eb:95:22:6e:a1:
f6:51:f4:c0:23:da:9e:33:8a:2e:f5:6b:46:e8:6a:
17:9d:74:aa:d2:7f:c4:e0:c6:ee:75:1e:53:ae:a9:
45:58:7e:38:ab:06:9a:07:58:a1:e9:28:bb:fc:df:
80:e8:d8:ae:2e:83:0d:df:69:3d:71:ee:66:af:35:
9d:f4:4c:fb:56:25:a2:99:22:12:a5:5d:46:24:24:
21:7a:3b:1a:73:9b:46:dd:74:f8:e6:63:39:41:0d:
4f:6d:62:93:4e:a3:79:99:93:56:61:93:07:fa:ff:
e6:1a:64:fe:7c:e6:f4:09:fb:a6:40:a4:eb:ea:f7:
fa:c1:c5:77:18:e9:b3:39:2c:ea:b8:28:0f:bb:61:
b1:74:ac:af:20:e7:1c:7a:cb:a3:05:9b:d4:2b:da:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:D2:78:28:69:4E:7A:F1:2E:6B:A2:A9:C3:76:CB:8E:FB:66:7F
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:85:1b:7e:13:de:d1:59:01:2d:e2:91:2f:73:d4:14:ce:
2c:34:4e:68:79:82:06:b8:3a:5c:f1:57:8f:a6:eb:29:50:54:
20:be:1c:1d:ed:34:d5:f6:ce:f3:f2:24:1f:9a:80:c9:d8:ae:
47:c3:17:98:9e:d8:89:a4:fe:37:7b:77:12:3e:3e:1d:61:b4:
67:30:6a:7a:4e:b6:cb:e2:83:97:07:4d:f8:9e:e9:8b:95:b2:
98:e0:f4:4c:93:fd:48:70:90:4e:4e:33:f2:17:a0:15:15:3d:
04:97:7b:ca:0d:5b:cf:ee:46:b4:ac:4f:72:2b:be:fb:90:3a:
de:12:85:6a:4d:d3:ea:e9:64:22:eb:b4:1f:04:9b:fb:b4:81:
d2:65:d6:ad:3b:8b:6a:85:6f:59:0f:8d:3c:3a:7f:02:07:4e:
61:54:ee:a0:53:43:02:ea:9d:a1:21:0a:08:43:c5:3f:a6:3b:
dd:17:77:e6:34:dd:c8:d8:d7:4b:8d:cd:e9:a8:8e:ae:a5:f9:
81:9c:cf:94:cc:ed:08:28:f3:95:ec:9d:b4:2f:4f:fc:d6:35:
9c:18:12:2c:44:fd:00:0b:7e:ff:06:95:f4:8a:b2:5e:fa:35:
20:a5:61:f4:3b:4b:3a:56:68:fb:28:e0:5b:fc:5b:dd:1d:be:
0a:82:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:25:03 2025 by rpki-client