Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: HqR/c3K1i/ldN8LlKxHvF+oedBncBJkyJXUBg7rjGKE=
Subject key identifier: 13:D0:8D:82:15:39:49:85:D3:24:3D:11:80:7D:47:40:EB:73:1B:0D
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 01984F31E83ECC7F9F7DD2D68C2F2B4B5253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 1338
Signing time: Mon 28 Jul 2025 04:02:07 +0000
Manifest this update: Mon 28 Jul 2025 04:02:07 +0000
Manifest next update: Tue 29 Jul 2025 04:02:07 +0000
Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: 9n6/9DlcqMpT72NMv1m1Em/xgnGLFMbiRSfaydPs+Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:e8:3e:cc:7f:9f:7d:d2:d6:8c:2f:2b:4b:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Jul 28 04:02:07 2025 GMT
Not After : Jul 29 04:02:07 2025 GMT
Subject: CN=13d08d8215394985d3243d11807d4740eb731b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:29:6e:88:2a:cf:47:f3:3b:71:0c:30:fe:
b3:52:31:4c:e5:b8:62:63:7f:af:89:ac:8f:51:c7:
c6:83:fe:a0:b4:11:7f:0a:ca:21:56:0c:27:71:36:
b0:32:94:a1:60:f7:28:60:c0:fa:04:8a:13:f2:2b:
24:bb:5c:ef:77:12:f8:53:20:85:86:0f:89:32:de:
7d:51:e5:9c:86:d0:63:89:4e:c6:18:42:34:64:0a:
be:db:d7:5b:1f:53:6c:2a:48:e1:d1:94:3d:bc:1a:
bc:f9:6d:db:31:79:5e:bf:c6:3c:d1:ba:e5:6c:5f:
db:2c:fe:9c:c0:32:8c:ac:8b:3a:63:70:1f:85:a4:
ba:be:b8:cc:a4:c7:08:a0:8e:6e:df:c1:31:97:56:
43:ba:61:39:a4:42:72:a4:57:64:7f:9d:82:54:da:
be:61:f8:2d:d0:64:41:32:c0:ac:57:bb:7e:13:74:
62:c1:b2:e9:c8:1a:99:90:72:7f:68:e4:5b:c6:a0:
40:aa:f3:de:7d:24:0f:bf:ec:9e:80:4e:64:e1:e5:
13:f4:7c:6e:5d:f4:f5:5b:11:d1:24:eb:40:c1:ad:
bb:73:3c:36:d4:6c:4e:ff:0e:13:2c:50:9d:75:ef:
78:98:79:85:91:9d:10:29:76:b9:bf:29:2e:b9:c1:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:8D:82:15:39:49:85:D3:24:3D:11:80:7D:47:40:EB:73:1B:0D
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d4:9a:f2:de:fd:3a:b0:ac:c4:1d:16:8d:e0:4a:18:27:8c:
b3:fd:d5:78:2c:db:72:e7:88:df:3b:34:9b:8f:7a:69:92:90:
55:f8:fd:2a:6f:42:f3:6b:c4:72:12:65:53:d8:92:41:20:67:
17:6a:d1:cd:8c:e1:41:2b:e3:ca:05:69:f1:93:81:c4:be:c9:
af:79:2e:1c:bc:81:88:1b:d6:82:90:1f:7f:cd:c4:06:5b:e7:
de:62:2c:94:39:ca:c8:b9:d5:20:1f:a8:34:e2:48:91:c1:0b:
c8:bf:44:51:c5:ca:30:c5:14:97:ca:48:c3:b9:1a:d0:4b:24:
54:00:ff:27:51:c9:03:84:3d:88:ad:32:40:89:de:7e:59:87:
d8:1d:31:97:07:ca:7d:a9:ca:e3:e9:55:e1:5c:1b:a9:ea:1f:
c0:93:e6:f6:ae:0b:6e:49:f6:74:8e:45:77:b5:c8:7c:2c:a0:
43:fa:a2:fd:8d:a9:7f:34:ec:5e:fd:84:c0:61:ad:6c:4b:c1:
b5:50:52:68:ce:10:a6:17:ce:4f:95:c8:cf:fc:6f:a1:ef:d4:
41:48:55:02:0e:9b:cc:e2:86:dc:a3:77:59:9c:65:a2:ae:1b:
b6:e3:de:92:76:d3:93:4b:05:1a:9e:f0:b5:5a:3b:7d:14:1e:
3f:fd:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:10:37 2025 by rpki-client