Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: PIsgpuP6qN2e86QFanb58y6E2fA9k5uyYXaGC+X6RlI=
Subject key identifier: A9:C2:A1:0B:AE:13:00:FA:C1:C7:41:01:C1:1D:90:18:64:C3:0A:42
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 019A7293722DA6A6868CAC3CD6A20BC34ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0CD9
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: dfr6UQXFGpvHhz35Cq1Z817WUWE5NEmJobW80+znScw=)
2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:72:2d:a6:a6:86:8c:ac:3c:d6:a2:0b:c3:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=a9c2a10bae1300fac1c74101c11d901864c30a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:5c:50:35:30:01:2a:96:b0:57:66:42:23:
cc:86:80:e1:36:57:75:a7:36:6f:25:ba:cf:94:33:
e5:3a:70:dc:59:2f:f6:d9:27:6a:af:75:29:8a:ef:
51:5f:39:c5:ca:1c:e0:14:42:fe:03:48:99:10:34:
1a:bf:d9:3a:63:c8:ed:79:4f:e1:c7:c7:91:73:de:
a4:77:ca:ab:ff:05:50:d1:86:32:6a:18:4d:e5:01:
bc:3f:6b:c8:4d:fe:26:59:0d:8e:e3:2e:41:c9:5e:
6a:92:f1:49:47:83:64:61:51:f8:af:de:5d:41:20:
5e:f6:d0:f7:14:59:10:95:98:e1:0d:85:eb:71:5e:
b3:15:b1:7e:bc:95:31:82:9a:65:70:60:0d:26:b9:
6f:b7:bc:d5:4b:38:ff:92:6e:a6:d2:95:c2:bd:e4:
2d:50:c8:91:67:e3:08:6f:4d:cd:9c:88:00:af:51:
ff:9d:ea:7b:f6:52:2d:68:67:68:b7:94:fd:59:61:
b9:b9:b8:8c:ab:43:c3:81:66:1a:8f:0d:b4:8e:57:
2c:a4:e7:d3:ad:c4:e7:f4:8c:d5:c2:63:b6:4e:1c:
57:39:78:ab:db:cf:22:f8:f8:12:b5:82:95:d3:56:
73:1a:e6:46:a6:e0:0f:f3:68:9f:b1:42:04:ba:dc:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:A1:0B:AE:13:00:FA:C1:C7:41:01:C1:1D:90:18:64:C3:0A:42
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:f7:06:3a:19:70:f8:1f:84:6d:0d:8d:69:4f:c5:92:e3:
7f:96:31:cf:f3:6c:44:dc:c0:69:bd:cd:0b:ab:fc:7c:d4:00:
b6:98:45:7e:80:c6:25:e7:3d:72:c6:d8:9f:98:2d:63:3a:ef:
89:bf:aa:6f:84:ff:ce:69:ef:7a:97:cc:4c:60:be:41:dc:22:
54:4d:7f:79:c0:e5:b3:cf:4b:74:df:91:87:41:d8:a8:ab:ee:
2e:18:3f:bc:ba:f9:af:97:33:c9:9f:c8:8e:3a:a8:ce:25:27:
7b:78:7f:dc:e1:59:fb:4a:84:93:ac:0c:46:33:ac:49:77:15:
06:c4:6e:38:a0:4a:c6:f8:17:3d:98:72:2e:fc:ec:b3:26:05:
76:bb:14:b0:bf:5d:2e:72:eb:f3:6c:4c:53:03:0e:01:bc:ec:
44:7b:98:77:3d:e2:17:0d:02:7d:03:9d:02:5d:12:c1:80:45:
bd:dc:39:f5:8b:f1:a6:4e:3f:ce:93:17:22:59:a7:f6:75:43:
95:d8:54:77:43:3e:91:3d:8b:99:aa:90:62:1e:07:59:52:4e:
6b:f4:a8:61:e7:70:aa:b3:36:28:3a:86:65:e0:12:eb:b8:0f:
5a:3b:28:38:27:51:dd:2e:a8:79:de:6a:b3:64:8d:f7:fb:ac:
26:e1:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:56 2025 by rpki-client