Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: +sYVSJJbIkj1AdqbB/sLz3bSzhOnRLvaZ2K3lf36P2g=
Subject key identifier: 98:DE:07:EF:10:AE:7A:CA:AC:45:6B:4B:A6:20:41:1B:6A:89:F6:E9
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019A71EEADEA9FB0B59F781471E301A6A151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 1654
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: 8KXRDSAZ38iYNJsvzDfykESF7+/uEkDZDVhZcAm8gnw=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ad:ea:9f:b0:b5:9f:78:14:71:e3:01:a6:a1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=98de07ef10ae7acaac456b4ba620411b6a89f6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:bf:1f:bc:0f:db:68:d3:bc:1b:89:97:fb:
6e:2a:f8:3b:a1:27:56:c1:75:4d:d6:05:7f:b1:e1:
4f:90:31:a7:20:9e:f3:f6:31:d5:b7:bd:0e:8f:86:
c1:5f:52:ad:be:cc:70:da:b2:e1:7f:9e:24:9d:ea:
9d:22:08:2b:ec:1e:90:32:5b:4a:f2:9a:cd:e9:ec:
40:18:b2:58:15:9b:01:f5:6d:92:cd:64:9a:37:98:
14:d6:dc:b3:df:f5:04:ac:58:1a:07:04:b1:17:6a:
b5:ae:17:2d:93:7f:77:cb:48:af:15:30:5e:6f:6c:
84:78:14:2f:66:7f:e6:e5:48:8a:57:5c:fc:96:25:
97:ed:a2:ee:da:45:7c:8a:78:d2:38:98:eb:4c:dc:
98:02:30:af:c7:a1:3d:47:59:00:4d:18:e5:27:b3:
bb:da:87:c4:41:09:f4:79:bc:79:9b:8c:c2:60:b6:
05:5e:47:3d:f6:3e:85:7a:e5:ec:1b:4f:99:45:0a:
ff:e3:ea:86:ec:be:e9:ed:ae:80:99:7f:61:47:7f:
4e:ad:79:f5:73:dc:eb:ae:97:86:1f:9d:46:34:40:
a1:56:b9:42:be:79:5e:0c:64:92:0a:69:54:b8:01:
7f:f8:54:74:ca:1f:52:16:1b:fd:89:f7:c9:a1:1a:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:07:EF:10:AE:7A:CA:AC:45:6B:4B:A6:20:41:1B:6A:89:F6:E9
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:52:0e:90:11:22:77:64:c3:81:a7:76:1f:5b:f0:fd:51:
75:b1:a3:2e:53:3f:24:19:4b:a9:28:54:36:bc:b0:fd:b2:b6:
e6:80:08:f4:b5:da:78:2f:5c:38:c3:3d:2c:d9:e5:9a:0b:99:
6e:b7:a4:40:01:f2:dd:49:07:2a:a9:c7:5c:17:eb:c0:90:4d:
d9:46:74:c5:b0:ce:4d:0c:7b:3d:47:b6:39:3e:7f:9c:00:6c:
37:99:94:6e:fa:b8:cf:48:90:58:29:4b:3f:93:e4:7a:2d:71:
10:de:af:0c:c6:3b:c1:29:ec:9b:ec:8f:c9:8c:06:bc:da:0a:
b1:3a:d6:f4:01:4f:1a:27:2d:69:d8:bc:eb:c5:3d:bd:c5:18:
86:fc:66:ef:d2:14:cc:d3:02:76:bb:1b:d9:cc:34:61:a7:a9:
14:53:e8:4b:92:1d:aa:9c:22:39:52:f2:81:82:71:38:ed:d2:
6c:fb:ce:44:a3:ca:05:0a:f5:b6:ce:df:d5:9f:ae:15:7e:1f:
5f:7e:0e:e7:53:b7:a2:1a:f0:54:0a:29:17:19:73:dd:99:63:
cf:fb:7e:16:d5:ba:61:bf:44:8a:7c:6a:90:24:93:13:37:46:
7e:45:2a:bd:3f:cc:80:10:b4:c9:62:c8:e6:c7:40:fc:3e:2e:
1a:7c:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:10 2025 by rpki-client