Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: ya7ton4INzIBaLIsKmJqlriMVtb39lIMxlbjRM8J8kM=
Subject key identifier: AB:2C:59:FA:1E:3E:55:CC:56:F9:F6:18:75:BE:57:46:1F:36:64:E2
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 0198537B481932D5548BC4ADE9E01BE441FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 05E9
Signing time: Tue 29 Jul 2025 00:00:44 +0000
Manifest this update: Tue 29 Jul 2025 00:00:44 +0000
Manifest next update: Wed 30 Jul 2025 00:00:44 +0000
Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: QQ2XEQ3E7xe2N+sizKphDD+4z4GO49adXwXIepI12Ow=)
2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:48:19:32:d5:54:8b:c4:ad:e9:e0:1b:e4:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Jul 29 00:00:44 2025 GMT
Not After : Jul 30 00:00:44 2025 GMT
Subject: CN=ab2c59fa1e3e55cc56f9f61875be57461f3664e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:8b:93:6a:c3:7c:02:8b:84:04:12:69:64:
3b:50:e7:2f:99:95:fe:f8:bf:ba:b4:0a:11:ed:72:
1b:13:a8:4b:32:bd:c7:53:08:dd:bc:4e:d6:fc:da:
11:00:17:2a:c2:6d:1e:d3:cb:14:24:da:32:69:fe:
00:e2:6c:d6:ce:2c:86:cc:07:21:8c:bf:af:49:7a:
83:ff:17:3f:60:ef:af:7a:c3:75:f9:e8:9e:5e:16:
01:81:9d:0c:dd:33:87:a1:29:5b:e7:59:3d:97:76:
a3:b1:08:73:d8:c5:d5:34:ed:4d:9a:fb:12:3d:15:
77:d5:57:59:0d:ee:be:1b:db:64:da:2d:6c:09:59:
73:70:01:83:b6:7e:82:44:1c:57:45:d1:5d:bf:dc:
96:29:9e:6b:cc:0c:3a:a7:90:08:51:4a:aa:92:73:
a1:40:86:67:7a:89:95:27:61:99:4d:c8:e6:bc:67:
23:86:70:20:bc:17:21:21:ed:0a:07:3e:87:e0:25:
00:2f:73:53:4a:43:e5:ea:68:25:51:80:bc:2e:6d:
80:9b:56:f5:bf:98:e3:7b:bb:b6:c1:70:98:35:61:
48:8b:37:5f:fa:be:98:01:0f:3a:70:0a:9d:87:25:
1c:4f:36:02:c8:06:0d:7e:14:35:ea:fd:7b:a6:e8:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2C:59:FA:1E:3E:55:CC:56:F9:F6:18:75:BE:57:46:1F:36:64:E2
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6c:8b:db:30:d0:2d:c1:5a:59:3b:c8:dc:04:06:91:67:de:
b2:0c:8c:0f:35:5a:6d:e8:0c:58:1d:f6:fe:81:84:19:46:68:
82:3e:a4:03:1a:9f:86:29:6a:4f:cd:a8:40:e5:b8:2d:57:ad:
7e:da:7d:66:98:f8:ee:ec:ef:9f:d1:13:00:37:0c:cd:81:56:
6f:01:b1:da:e8:d2:70:b2:0a:51:37:a9:3f:21:e0:ca:f7:80:
3c:7a:47:44:97:a3:c8:ff:1f:18:f2:cf:86:dc:b1:7a:91:e0:
29:94:b4:e8:81:ae:81:f7:da:53:02:aa:b1:b7:17:c6:2b:14:
ad:59:83:9b:38:9c:e5:17:df:04:aa:c0:63:76:70:db:e7:0c:
b4:03:52:30:aa:0a:bf:47:65:f5:57:e7:59:ac:44:44:1c:85:
17:24:3b:55:7f:12:e1:4f:9e:8c:17:55:89:15:52:bb:ca:e6:
2a:a9:6b:a6:ec:67:e1:c4:e3:7f:cc:9e:cb:92:f2:74:c7:18:
2c:84:7e:8c:a6:2c:45:b6:c5:58:1c:4d:ca:9f:81:8c:8f:ed:
a0:b6:d3:c0:2c:66:5f:17:1e:40:53:9d:04:70:08:52:bf:30:
7c:de:a6:33:1f:36:8b:74:8c:f0:89:90:a0:93:60:b3:46:7e:
87:10:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:35 2025 by rpki-client