Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: PjE5IaVlRtGFKRN44eC+WhV1NJR6z9eLH4pKSYy0bBo=
Subject key identifier: F4:4C:BD:1A:33:0E:A1:1B:8B:D4:B8:E8:90:A6:49:ED:4B:3F:18:EB
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019845BFA6797C0B5369D39604564E46AB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 1534
Signing time: Sat 26 Jul 2025 08:00:44 +0000
Manifest this update: Sat 26 Jul 2025 08:00:44 +0000
Manifest next update: Sun 27 Jul 2025 08:00:44 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: wkfts7WzhEMvIlenvKc93fLwU0awerj5ti9Nf4N/26o=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:a6:79:7c:0b:53:69:d3:96:04:56:4e:46:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jul 26 08:00:44 2025 GMT
Not After : Jul 27 08:00:44 2025 GMT
Subject: CN=f44cbd1a330ea11b8bd4b8e890a649ed4b3f18eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:7f:bf:93:f2:52:59:7c:02:6b:47:57:d0:
5f:aa:30:d8:22:b9:75:97:d7:2b:eb:2e:55:e4:1c:
ac:05:7d:e7:f0:19:16:25:69:b8:ee:95:5c:74:eb:
d1:a3:41:79:f6:94:94:fb:c6:0e:76:a3:b5:0b:ea:
34:fe:35:85:04:ab:55:b6:82:e4:17:50:6d:79:ae:
ec:4f:b7:19:e6:bf:17:40:01:fa:bc:8f:5f:89:ae:
a0:f2:51:ad:fb:1a:9d:78:97:30:81:f4:7f:51:db:
9d:5b:a1:e4:64:66:01:66:1f:95:68:91:b6:cf:1d:
b5:22:55:9f:70:d8:4f:a8:dd:32:bd:9a:74:12:6a:
21:b4:09:25:5e:e2:93:39:2a:d8:c4:59:15:2d:cc:
03:f6:db:d7:99:0c:99:d7:4c:8b:32:c0:40:a1:2b:
7a:b5:d7:26:1f:06:f7:c7:2d:f2:5e:bc:73:71:91:
74:11:c9:ba:21:ad:09:2f:39:31:90:72:93:4c:65:
91:56:ef:bf:fd:5f:f4:99:80:f7:a6:1f:f3:32:a0:
f8:74:61:ea:d2:07:f7:bc:f3:29:14:0d:dd:92:bd:
a2:1f:70:c3:33:0d:61:b0:9b:ec:e5:b6:14:b6:09:
87:49:71:c9:29:20:d9:2b:63:f4:12:07:ae:0d:68:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:BD:1A:33:0E:A1:1B:8B:D4:B8:E8:90:A6:49:ED:4B:3F:18:EB
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:b3:38:1a:d9:b6:bf:87:f1:5a:9f:11:b0:9a:fd:f0:50:
f4:2a:d9:66:d2:aa:cf:df:22:e0:a7:ed:e9:d1:d2:4a:03:3f:
b7:f8:67:58:0a:b0:b4:1a:3c:70:6b:0e:fd:b8:c5:4c:c8:15:
fa:43:3e:31:b3:16:63:7a:79:10:3f:ef:c9:0f:02:87:82:47:
04:f7:7c:c1:9c:f7:b3:c4:e6:94:86:58:2f:63:75:a9:56:31:
af:7f:62:b2:15:32:2b:0c:be:eb:c4:00:84:98:4d:db:ba:d5:
95:75:a3:c4:29:64:55:24:52:43:44:b0:29:0f:0d:dc:97:7a:
c0:a3:d2:bf:da:c1:87:32:01:91:a8:70:ff:18:17:af:a0:06:
63:4d:cc:59:35:f6:77:f7:96:a7:a7:ee:aa:20:0d:ba:5e:97:
96:32:59:6d:56:02:44:02:97:8d:1c:4e:83:bc:e9:a6:44:cc:
7d:17:98:7d:fd:6b:5f:40:0c:87:08:eb:46:fb:2f:65:06:02:
33:4f:ed:39:da:93:14:0d:5a:21:bb:89:9e:d6:2a:60:d7:e5:
87:9f:53:ae:11:8a:59:3c:9c:a0:2f:ec:ad:97:a1:0e:31:62:
8a:e3:89:3e:ff:3d:85:50:21:ae:96:df:72:77:48:70:43:1f:
71:d7:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:54:50 2025 by rpki-client