Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: YdQt79V6SvZyg063zckcfH70scM3fL/1x3wPpjaOuIg=
Subject key identifier: FB:78:F3:6B:34:DD:92:70:40:BE:FA:AC:00:F1:AF:AD:1E:A4:B0:8E
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019A4D3D1316320A31A6C9FBA463F9C33CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 126B
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: dMPtE0lNAy6w9cumDeRd58CPRxB6grhDgbJKJ3dOV5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:13:16:32:0a:31:a6:c9:fb:a4:63:f9:c3:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=fb78f36b34dd927040befaac00f1afad1ea4b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:d1:74:be:f2:14:35:95:04:20:4c:ed:d8:
2b:cb:73:0b:99:e8:10:c4:2f:1e:21:0b:08:54:18:
0d:7e:cb:ee:82:49:c6:4c:31:b4:4e:c5:70:8a:56:
14:d6:cf:3b:37:66:d3:c2:45:f7:10:05:22:23:34:
21:de:c9:97:ce:1b:69:a9:8a:67:23:db:1f:3d:a2:
92:87:15:67:d8:ec:01:ae:d1:11:a8:bc:28:6d:8c:
a2:f6:6b:18:13:7f:e8:e7:27:31:ef:ab:87:df:af:
3c:1e:b3:2e:38:f3:03:61:cf:8a:b1:23:e6:77:55:
c4:ed:24:48:9c:66:fb:68:d9:3c:53:a9:18:c1:da:
8d:01:85:12:c1:93:37:b1:c0:26:1b:38:c7:fe:13:
37:84:c1:b1:f6:f5:9c:72:33:73:54:3c:09:e8:a9:
33:63:93:93:c1:3f:ee:22:e4:5c:27:ee:93:b9:49:
8a:9f:f9:0e:bd:3b:8a:03:90:bd:4e:f4:12:0f:ba:
82:88:e9:59:76:d6:13:19:8d:84:b1:be:ec:2b:ed:
c9:2e:b9:6f:8e:d5:34:ca:4a:63:a5:ac:21:15:7f:
f7:06:c7:15:5c:c3:25:b6:81:9a:9f:60:ee:6c:99:
a2:b4:fa:7b:c8:fd:25:28:bd:66:33:7f:d5:43:ac:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:F3:6B:34:DD:92:70:40:BE:FA:AC:00:F1:AF:AD:1E:A4:B0:8E
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:af:e0:3a:3b:47:4d:f6:ae:a6:d3:50:29:76:67:af:a5:
66:bc:5a:f4:b6:cf:48:ba:0a:5c:4d:4e:bf:88:06:4c:4d:bc:
7c:a9:2c:8e:07:51:59:55:f1:11:bd:4f:4d:ad:7a:ee:d4:df:
bd:02:a0:d7:56:30:3b:f5:8a:12:72:27:86:6c:64:f9:40:6f:
85:4d:8a:0a:e1:69:97:55:f6:19:b3:6b:1d:b0:af:9c:6a:e1:
5c:13:59:3a:bf:35:48:2c:6c:45:28:2d:69:95:0b:63:02:92:
bc:12:da:d1:53:c9:d0:e8:e1:74:94:c7:bc:11:d4:5d:0e:5e:
55:73:ff:51:aa:7b:c6:cb:31:54:47:73:cc:0c:3f:4d:ef:10:
e1:33:de:c7:04:6e:09:11:89:15:3c:84:57:70:e5:bc:a8:e2:
ff:b6:e2:c5:25:48:70:68:92:a6:07:b5:c4:7a:f0:f6:4f:25:
ce:b0:c4:f7:f0:c0:ba:12:9b:5d:49:a2:b5:11:64:ba:e6:4b:
45:3d:bd:bb:5d:07:ff:71:8d:16:50:e1:2f:a1:b3:1e:2f:09:
ff:76:de:d2:33:9e:b2:3e:77:2e:38:db:48:00:59:a7:29:09:
6a:60:6b:43:03:d7:8a:ad:57:93:58:00:df:f5:00:ae:c8:4f:
17:bb:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:08 2025 by rpki-client