Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: kr33G2HhVvQpyKXftIQlGEr1Fzswe+SmsTUhZ+GqTcs=
Subject key identifier: 04:66:65:4A:18:05:C8:6C:DB:98:29:B2:7E:C5:00:75:3B:09:CF:5F
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 019854FCEB5BF0942B2E900482669E90EFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 13
Signing time: Tue 29 Jul 2025 07:01:58 +0000
Manifest this update: Tue 29 Jul 2025 07:01:58 +0000
Manifest next update: Wed 30 Jul 2025 07:01:58 +0000
Files and hashes: 1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: k4IC+La4yeRYYiMv71IP7XApH8g7m9Oc5B/Xs6/0Rg0=)
2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:eb:5b:f0:94:2b:2e:90:04:82:66:9e:90:ef:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Jul 29 07:01:58 2025 GMT
Not After : Jul 30 07:01:58 2025 GMT
Subject: CN=0466654a1805c86cdb9829b27ec500753b09cf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:3a:ac:4d:34:1c:f5:96:c8:d7:94:82:75:
92:9e:b9:e5:d4:72:83:c9:b9:65:fb:d2:f5:bb:64:
50:d9:0b:0d:e0:8a:a1:f0:1b:a5:4d:e0:2c:87:12:
1a:9e:04:76:ed:6e:6e:7a:72:05:f4:52:6c:0b:66:
08:8a:d5:05:3e:c8:07:9c:51:9e:09:1a:49:de:28:
82:78:b5:ed:ef:d6:c1:65:f7:a7:68:6e:08:cf:68:
df:43:48:71:ed:4d:63:53:dd:07:72:18:17:4a:66:
d9:6a:1b:79:60:ed:33:c3:44:c4:91:bf:5f:48:5b:
96:a3:39:68:8a:67:66:44:9d:0a:d5:f9:f9:2e:3c:
36:62:91:50:06:28:65:0c:7b:5d:72:9d:27:09:4c:
e8:8a:2b:f2:67:b7:f9:cb:0b:59:1f:95:ed:66:f4:
1a:99:47:4e:6e:37:28:f5:45:aa:c0:b1:3b:ce:5e:
75:48:e8:e9:e6:7c:cb:17:6e:8d:4a:68:e0:a5:9c:
91:27:32:02:15:92:81:9f:ce:38:6e:cd:60:24:d4:
2e:e2:79:5f:e8:1e:5a:5b:d5:ec:0d:9f:04:09:d1:
8f:cf:2e:65:aa:31:6a:ac:6e:11:8c:60:10:d1:54:
58:cc:21:e9:d5:c8:37:fa:9e:eb:b7:1d:5e:e0:7d:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:65:4A:18:05:C8:6C:DB:98:29:B2:7E:C5:00:75:3B:09:CF:5F
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:2e:b2:dc:e8:5a:14:b1:55:4c:e3:7e:8d:c8:b6:29:b4:
89:46:8c:e8:81:3d:43:56:cc:18:ce:6b:fb:43:1d:9c:64:5c:
af:05:67:c6:04:34:23:f9:24:3d:79:48:18:4c:d0:6b:1b:9c:
be:39:f0:2f:98:bd:d3:55:ef:00:a3:a7:48:c8:ef:f9:d3:2d:
12:a0:33:33:30:79:1b:96:cf:95:ba:02:3a:2f:5f:82:ea:df:
b0:5e:f2:ac:0c:bb:3a:c6:61:5a:69:a6:6c:a6:40:b3:2d:b9:
aa:6c:1b:79:37:a1:26:a4:4c:48:a6:ed:23:e3:04:09:cb:f5:
ef:43:4d:bb:38:44:6d:82:87:42:db:48:45:11:e9:f7:28:9d:
d1:44:c6:de:7d:30:df:85:9f:a3:ad:46:9f:ce:4e:96:7a:e0:
84:a7:e3:d7:c9:2f:ae:06:80:35:99:06:f4:3f:4a:80:f0:e4:
a2:ee:be:bc:df:34:da:d7:00:4f:f2:32:5a:23:d9:b4:38:60:
d7:69:24:67:99:30:a5:a5:03:47:a0:48:f1:65:bc:dc:5d:40:
b4:ff:2a:6b:f3:57:58:34:94:16:2a:cf:21:a1:71:87:fc:32:
e8:e2:ea:04:f1:98:14:e9:a0:34:4b:f3:bc:be:04:07:ac:3f:
96:f4:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:48 2025 by rpki-client