Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: yd3hHfpWOisf0NU+UWkyEGK6I4c/DrDFtD5heWjDdnM=
Subject key identifier: 68:C7:36:4B:84:CD:6C:30:B6:41:F6:B3:18:B0:5F:88:81:60:AD:4A
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 01984B8A9E9C0F89CEF01B4D6539ED99763F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 1161
Signing time: Sun 27 Jul 2025 11:00:32 +0000
Manifest this update: Sun 27 Jul 2025 11:00:32 +0000
Manifest next update: Mon 28 Jul 2025 11:00:32 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: ldg415BAcvfL7CszgVsuW9IpeRYKlfe2FVZvoNDpBLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:9e:9c:0f:89:ce:f0:1b:4d:65:39:ed:99:76:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jul 27 11:00:32 2025 GMT
Not After : Jul 28 11:00:32 2025 GMT
Subject: CN=68c7364b84cd6c30b641f6b318b05f888160ad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:b6:6e:ff:f7:12:81:70:bb:ae:4a:41:58:
99:15:50:d2:fe:cb:2a:de:47:47:97:eb:91:ee:d9:
7d:4c:c7:5c:e5:38:83:c5:af:81:75:e8:66:c6:e1:
fe:8f:9b:8a:e0:53:ed:14:98:b7:47:8e:3e:fc:9c:
69:4e:2e:07:93:25:e4:c3:e2:24:65:91:a4:9b:81:
b4:ac:4a:80:1b:7d:e7:3c:55:7d:fc:7b:bc:d6:90:
93:9c:74:c4:b5:f5:b0:9d:11:6c:57:eb:cd:df:f3:
e5:83:d9:1d:12:a6:34:e2:99:30:30:14:91:af:c5:
94:67:48:6e:e1:dd:62:c6:98:4f:15:88:13:71:d8:
b3:1d:a9:1f:28:61:3c:4a:cf:6a:ce:00:e3:d0:d6:
2f:6f:08:49:cf:1f:e9:26:30:39:93:18:d8:09:0f:
b7:18:e8:7a:27:01:ba:4e:bb:08:45:c3:58:dc:04:
d4:25:41:12:c3:28:45:0a:db:18:b8:87:b5:ae:24:
2d:fc:24:e5:18:cc:5b:a5:ad:80:fe:f3:1e:ca:a0:
19:e9:4c:f3:da:b6:7f:e4:a8:b3:9d:08:eb:f8:74:
02:0f:a5:74:d0:0c:25:e5:17:4a:f1:60:63:dc:cc:
03:fd:e7:2e:04:f3:07:e3:4a:85:15:6b:0c:fa:af:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C7:36:4B:84:CD:6C:30:B6:41:F6:B3:18:B0:5F:88:81:60:AD:4A
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:eb:1b:b0:00:5f:bd:23:7c:23:d8:1f:fc:2c:ee:00:ba:13:
8a:cf:4f:03:50:95:19:80:90:55:32:a9:4f:25:ee:f8:cf:18:
e0:16:1f:ee:81:00:a6:bf:4d:2c:e1:6a:06:85:2b:c7:de:9f:
42:3a:dd:c6:c6:dd:e0:74:e0:dc:e4:b1:6a:e9:41:59:87:03:
e6:ce:dc:ba:34:f2:05:7a:f2:f8:91:21:60:c9:74:bc:ce:78:
1e:5e:ad:c8:36:bb:61:e3:d0:b8:30:52:e0:1b:69:06:b9:55:
68:9e:7f:28:80:12:98:1c:8a:3a:39:fb:21:ce:3a:5a:79:89:
29:9f:02:8a:f5:9f:34:48:5d:11:33:f0:da:c4:57:fd:af:f6:
4f:2d:cd:c4:76:5b:94:fa:ff:00:10:02:3b:3b:f4:1c:a1:91:
5b:68:c4:75:34:b4:0e:5b:bf:91:20:f4:ff:3c:52:9f:f8:f3:
69:e8:41:66:c8:44:85:bd:29:65:4d:5a:0e:8c:c4:eb:39:47:
2e:05:f1:34:79:66:53:fe:d9:12:aa:41:ea:4f:6e:b2:8a:ac:
65:b5:25:d9:64:b5:e7:6f:8f:0c:7f:c8:93:1f:b0:43:72:48:
a2:d0:3a:0c:c3:fe:68:c5:98:9d:11:83:43:4b:e8:5d:9c:0a:
1a:5c:2d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLip6cD4nO8BtNZTntmXY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl
OTliNDMwHhcNMjUwNzI3MTEwMDMyWhcNMjUwNzI4MTEwMDMyWjAzMTEwLwYDVQQD
Eyg2OGM3MzY0Yjg0Y2Q2YzMwYjY0MWY2YjMxOGIwNWY4ODgxNjBhZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvge2bv/3EoFwu65KQViZFVDS/ssq
3kdHl+uR7tl9TMdc5TiDxa+BdehmxuH+j5uK4FPtFJi3R44+/JxpTi4HkyXkw+Ik
ZZGkm4G0rEqAG33nPFV9/Hu81pCTnHTEtfWwnRFsV+vN3/Plg9kdEqY04pkwMBSR
r8WUZ0hu4d1ixphPFYgTcdizHakfKGE8Ss9qzgDj0NYvbwhJzx/pJjA5kxjYCQ+3
GOh6JwG6TrsIRcNY3ATUJUESwyhFCtsYuIe1riQt/CTlGMxbpa2A/vMeyqAZ6Uzz
2rZ/5KiznQjr+HQCD6V00Awl5RdK8WBj3MwD/ecuBPMH40qFFWsM+q+l5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjHNkuEzWwwtkH2sxiwX4iBYK1KMB8GA1UdIwQY
MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt
YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm
LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+sbsABf
vSN8I9gf/CzuALoTis9PA1CVGYCQVTKpTyXu+M8Y4BYf7oEApr9NLOFqBoUrx96f
Qjrdxsbd4HTg3OSxaulBWYcD5s7cujTyBXry+JEhYMl0vM54Hl6tyDa7YePQuDBS
4BtpBrlVaJ5/KIASmByKOjn7Ic46WnmJKZ8CivWfNEhdETPw2sRX/a/2Ty3NxHZb
lPr/ABACOzv0HKGRW2jEdTS0Dlu/kSD0/zxSn/jzaehBZshEhb0pZU1aDozE6zlH
LgXxNHlmU/7ZEqpB6k9usoqsZbUl2WS152+PDH/Ikx+wQ3JIotA6DMP+aMWYnRGD
Q0voXZwKGlwtVg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:18 2025 by rpki-client