Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: I89xr8Rm5kKnOn8ajD+3vJy0n3Z2Tnj0zJ5vqaKpxxk=
Subject key identifier: 86:FE:EE:DF:57:63:3F:42:33:E9:AE:13:A6:AF:EC:F7:4C:06:A7:FA
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019841AC2B59F49C51E3833CA0A195002F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1600
Signing time: Fri 25 Jul 2025 13:00:58 +0000
Manifest this update: Fri 25 Jul 2025 13:00:58 +0000
Manifest next update: Sat 26 Jul 2025 13:00:58 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 4qFQGy5nJYpjgJgQS84uJ1Px58a7Iy0HPPv9qvmNXLQ=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:2b:59:f4:9c:51:e3:83:3c:a0:a1:95:00:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jul 25 13:00:58 2025 GMT
Not After : Jul 26 13:00:58 2025 GMT
Subject: CN=86feeedf57633f4233e9ae13a6afecf74c06a7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:fe:2d:85:0b:51:4a:48:2f:bb:5c:94:9f:
20:69:b7:e6:de:fa:6a:60:12:15:6f:b0:04:08:d1:
54:11:35:57:4d:33:23:cd:99:77:73:94:5c:94:41:
22:46:67:6f:eb:80:70:0c:25:68:58:ef:ad:b5:06:
10:1c:45:9c:9f:ff:0b:ca:9e:37:7c:fe:8e:df:f5:
54:72:45:8e:28:0c:fc:ff:de:c0:c5:e1:38:9b:d9:
ac:91:e2:8d:0d:8c:b2:7a:69:da:b7:88:e8:13:94:
3b:0b:fb:72:ec:ae:7e:de:9e:68:3c:e9:a8:a7:59:
c0:1a:5c:8b:fe:49:28:7d:00:c8:02:17:3d:16:92:
c9:6c:6d:a1:d8:b8:d8:6f:ab:9f:4b:2a:bd:a7:97:
d6:fc:dc:4e:05:d9:5f:a5:9f:bb:26:5a:5f:7f:22:
d9:f6:ce:e2:c3:94:b6:ab:1d:37:4b:dd:ce:8f:3e:
a5:e1:78:04:94:3a:4a:71:6b:1f:df:92:ad:ac:71:
75:6d:42:8f:d9:0c:85:b5:22:6c:fb:78:72:78:bb:
1e:40:3c:ad:c5:9a:44:9e:81:ce:74:81:56:7b:02:
0b:2d:dc:36:cc:55:6f:15:65:7c:82:7c:8a:f4:3e:
ad:a3:eb:7b:db:2e:5a:cd:a9:64:2a:86:b8:f2:d1:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:EE:DF:57:63:3F:42:33:E9:AE:13:A6:AF:EC:F7:4C:06:A7:FA
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:67:f4:e5:b9:6d:96:56:90:f0:2d:d1:7b:78:3e:43:d3:
ea:fe:98:e7:ff:98:62:93:08:1b:0d:16:d4:27:3d:ea:09:57:
73:9d:de:92:e5:d6:6d:71:77:21:48:51:51:64:83:66:7f:ac:
eb:8c:3d:79:50:72:db:a8:43:9c:9c:3f:f4:17:6d:21:ba:4a:
e7:71:73:b7:b5:e0:4a:4d:68:1b:d4:8a:e5:cf:0a:5c:4f:89:
8c:16:40:09:87:17:17:e8:74:92:0b:73:a4:93:a0:fa:90:33:
9c:d8:38:82:fc:3c:94:61:76:2b:30:10:a7:b4:2f:b0:7e:23:
92:87:be:77:bf:8e:f4:f4:43:c9:d9:8b:48:59:ec:e0:40:5d:
99:58:5a:d3:de:d2:e5:37:ac:17:4b:a3:02:49:63:b0:03:c4:
b8:8a:ee:71:96:79:29:dd:f9:80:c1:0c:c1:c3:90:84:07:d7:
b4:65:86:20:94:cf:6a:d9:cb:46:fc:6d:16:e5:3a:15:b9:10:
84:8b:d4:13:fc:65:e0:f1:7e:a5:50:61:64:69:d9:67:e6:d4:
f1:3b:12:88:b3:a1:f7:8e:a1:05:a1:82:ad:a1:fe:93:ac:e0:
43:66:1f:d3:66:74:ea:fd:e2:79:df:be:cc:fc:39:32:ca:f8:
ce:cd:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:38:31 2025 by rpki-client