Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: m0haqoweuHzTUNNPAkFhJBxOPn3J4P/XQDvqFxT54YA=
Subject key identifier: 4D:5F:FB:AD:DE:1C:81:44:46:1F:08:67:C8:1C:22:4D:78:00:32:28
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 019A21402732392699644966839C95644FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 0EC0
Signing time: Sun 26 Oct 2025 16:00:43 +0000
Manifest this update: Sun 26 Oct 2025 16:00:43 +0000
Manifest next update: Mon 27 Oct 2025 16:00:43 +0000
Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: 4vZVCHO+UjFohjPfOgrbCeEC6MwkOW9b+nAZrBkTpAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:27:32:39:26:99:64:49:66:83:9c:95:64:4f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Oct 26 16:00:43 2025 GMT
Not After : Oct 27 16:00:43 2025 GMT
Subject: CN=4d5ffbadde1c8144461f0867c81c224d78003228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:9a:72:f5:d6:85:a8:f7:ea:3d:a1:d7:7f:
98:93:ad:ca:4e:cb:26:2c:ba:64:ef:53:ea:df:57:
f4:3a:27:fe:c4:07:32:d8:a9:75:96:09:3b:6f:fe:
a2:c8:01:a1:0c:49:1c:6f:30:09:8e:b8:e3:53:39:
bb:8e:ba:be:d5:ce:ed:8d:1f:b1:cd:cc:b6:28:d9:
3b:6d:54:40:8e:b2:d3:66:7f:76:53:8f:9c:4f:01:
22:f7:26:7c:f6:03:c2:da:5b:f2:ac:3c:72:ae:c7:
57:cc:c1:e2:f0:07:8d:a0:80:ef:24:01:40:4e:b5:
21:00:eb:15:55:68:99:61:55:03:72:a6:87:15:8e:
5c:72:ed:c8:9c:b2:93:be:45:40:0b:44:82:10:36:
9e:fa:06:88:5b:1d:3a:6c:0e:26:e1:bf:2a:dc:e9:
e7:34:f1:36:29:61:8b:2d:a3:01:59:12:73:bf:2e:
88:0c:ec:a1:77:24:be:97:eb:03:b8:19:ac:69:4e:
19:42:10:66:40:62:2f:5c:6a:8f:ef:19:ef:9b:9a:
81:65:89:82:5c:e8:43:ea:1e:75:95:a1:cd:0e:51:
de:29:d9:36:a4:e4:00:cf:79:dd:89:d1:71:1d:ff:
c0:53:cb:f9:18:a0:44:2f:01:05:7b:86:a0:e0:f4:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:FB:AD:DE:1C:81:44:46:1F:08:67:C8:1C:22:4D:78:00:32:28
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:77:34:78:d3:30:a9:a7:e7:72:9a:bd:eb:cc:f4:b5:ec:
da:1e:da:8f:03:5b:9b:4d:75:4f:55:7c:2e:11:1b:9a:e7:80:
33:5d:d7:dc:3c:e5:05:07:9c:61:75:d4:7a:b6:0b:0d:f9:6b:
bb:03:9c:bb:68:92:62:e7:db:3b:0a:c7:46:d3:83:8e:35:41:
81:19:9a:b5:5c:1c:3d:9a:d3:30:2c:d8:8e:c5:71:d7:93:67:
9a:7c:35:36:62:74:58:54:39:b3:07:aa:3e:65:c9:7f:be:53:
e7:2a:b5:9e:dd:e1:8d:b4:d2:43:71:d5:1e:d3:a9:61:ed:e4:
f8:65:b3:25:f6:ca:5e:ce:7e:1c:0f:5c:af:05:06:8f:92:8f:
22:50:3a:3b:dc:bc:db:4f:90:4e:4b:80:a9:22:37:3d:1f:8f:
3d:c3:38:2e:ee:e3:b9:81:fe:28:26:df:ca:f3:c2:29:65:4d:
5c:2d:b1:e3:7f:7c:ea:12:c2:04:40:31:59:ba:d9:24:62:e5:
60:ae:e0:38:a6:d4:1b:68:11:4b:33:21:96:79:6d:88:98:a2:
a7:5d:7d:13:16:29:8e:43:25:09:db:d3:7c:57:8c:77:de:55:
5d:6a:f4:0a:f7:db:00:50:42:2c:8f:8e:4c:ae:62:de:ec:bb:
1d:b5:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:40:44 2025 by rpki-client