Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File: ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier: 8HVa0dagY7UMLglo5E48wZrZkrN83FIf9mB9ybHlsBk=
Subject key identifier: 67:DC:50:44:32:4A:5B:5B:AD:6B:1B:3B:7C:C1:E9:30:AD:19:A7:E6
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial: 019A4FCFF00A4500EBE783AFA37E9AC5BDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number: 0623
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: 1ebzQRNytyLnxxt+zrtY4ER1rW0zkSLehZIcz8XqniE=)
2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f0:0a:45:00:eb:e7:83:af:a3:7e:9a:c5:bd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=67dc5044324a5b5bad6b1b3b7cc1e930ad19a7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:20:93:64:34:07:83:0f:b8:e4:c6:db:c4:
5f:1f:40:83:74:07:ba:cb:bf:80:e3:f0:8a:7d:df:
04:60:39:e6:03:dd:4f:f6:f3:10:72:38:f5:4c:6b:
5d:a9:51:0a:88:e6:1f:27:9b:57:69:67:4e:ce:82:
f3:52:f1:c7:2b:8d:f9:e1:c3:01:66:a6:95:5d:87:
26:54:9e:be:16:e4:2b:c5:8d:08:9f:b2:f0:91:4d:
a2:aa:52:3b:a6:71:3f:80:fd:10:84:c0:9d:b4:6d:
c0:3d:e0:20:73:78:82:c2:ec:cf:79:30:95:b5:1c:
b1:06:7c:ab:e9:59:50:23:54:7b:68:c2:15:28:d7:
9e:30:90:db:11:58:47:02:c4:25:fc:2e:c0:bd:df:
22:db:6f:41:38:7d:ea:1b:f0:23:a3:f3:97:90:a9:
05:13:1e:c7:74:3c:d4:8e:fc:a1:29:6e:16:7e:7d:
da:9b:03:80:6d:49:45:12:8c:57:de:69:d0:41:08:
c0:74:1e:c9:17:5e:5c:e4:5b:8b:68:30:79:9c:d7:
98:bf:95:9a:94:19:28:ec:5c:01:82:37:4e:0d:e5:
a7:3d:f4:38:75:65:f7:e3:b0:c1:74:fe:ce:b9:82:
29:ae:f1:4e:07:44:ac:2b:77:3d:c5:c0:c6:e7:66:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:50:44:32:4A:5B:5B:AD:6B:1B:3B:7C:C1:E9:30:AD:19:A7:E6
X509v3 Authority Key Identifier:
keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e1:52:cd:d8:9c:6c:c9:e5:5c:15:8b:dc:06:82:e8:53:93:
a7:7c:d2:7d:4a:0a:fa:e1:c4:cb:bf:d7:37:0b:88:e9:99:12:
20:21:af:29:21:fe:95:66:52:00:3d:c1:25:fe:02:c0:bc:92:
31:85:13:26:e4:8e:26:71:fa:cf:91:e4:bd:7a:34:47:61:4f:
4e:0b:3d:f4:8d:e8:cd:03:d7:25:3b:c3:e6:3b:ef:81:9a:c3:
a2:13:b7:3a:6a:8b:e0:87:d3:df:e5:1a:40:20:81:cd:ca:46:
b5:2e:7e:bc:32:db:3d:2e:24:f2:52:76:fa:41:3a:24:d5:0f:
c0:5f:3f:28:71:44:49:4d:00:2e:5c:f2:62:db:70:dd:c1:a3:
58:a7:08:46:9c:17:c4:a7:c7:6b:4b:3e:b0:d3:b0:4d:b4:1b:
a2:7a:ff:4c:35:93:75:1c:b9:e5:3e:1d:54:94:00:de:79:e0:
5c:c6:85:26:dd:2f:30:22:91:d8:20:ab:8f:ff:c5:5f:98:e2:
c9:46:c4:c9:60:6b:34:1b:c7:4b:92:8c:29:17:31:21:b1:07:
f7:c1:3d:79:c1:81:19:8c:51:ae:3b:27:b7:a9:bb:47:17:b4:
99:a8:04:23:29:ff:4b:69:b9:c9:f1:9e:be:3d:e6:e1:04:fa:
71:49:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:12 2025 by rpki-client