Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: vwCqjbsVpkI4DrAOD+8yeM4aeEWl2gSp7kc5lFSRrVk=
Subject key identifier: 81:3A:08:81:D4:9A:47:2D:8C:6E:A9:7B:08:C1:77:1A:A0:66:40:28
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 0199500A5DCF5361A4D5E96C58FAD59896D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 01:01:20 +0000
Manifest this update: Tue 16 Sep 2025 01:01:20 +0000
Manifest next update: Wed 17 Sep 2025 01:01:20 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: oqhUMP12sKzI9QqNpGp6JnH+VOaJkES4AzPyJzp4byA=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0a:5d:cf:53:61:a4:d5:e9:6c:58:fa:d5:98:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Sep 16 01:01:20 2025 GMT
Not After : Sep 17 01:01:20 2025 GMT
Subject: CN=813a0881d49a472d8c6ea97b08c1771aa0664028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:db:2e:20:5e:d0:0d:b5:47:10:00:91:a5:
99:5c:90:cc:a7:6f:b9:14:0f:c9:ab:f0:97:2a:a9:
2e:47:75:6d:84:5f:1d:6d:29:e5:7c:12:80:c1:50:
59:54:0b:df:0c:d5:29:d6:99:5c:af:6a:da:15:78:
50:c7:75:0c:ae:33:e9:98:54:1d:bf:2e:ca:fb:8d:
81:e0:27:a7:c5:c8:9a:3a:b6:b7:02:76:16:47:57:
7f:f9:27:e0:bf:42:98:df:79:3f:a4:1c:42:d7:49:
eb:de:1a:69:72:20:6f:95:52:27:c4:b6:6f:d5:99:
72:8c:db:2a:a3:48:11:f2:b8:96:9b:de:ac:31:da:
33:59:a4:19:7b:b9:44:ea:64:ae:6e:24:fc:11:d2:
51:cb:36:c9:54:f6:ce:65:dc:50:44:35:5d:15:20:
7e:f6:97:5f:27:97:07:a1:b5:1c:71:e8:c3:28:78:
1a:b3:01:05:36:06:a9:35:4b:f0:3c:35:27:99:86:
08:17:df:0f:9b:7f:07:d8:68:d0:c8:fb:ee:64:8b:
4d:a9:c1:9f:bc:30:88:9b:61:06:e2:17:b7:45:21:
b2:32:88:53:eb:80:d9:18:b9:e3:fc:be:1d:93:8f:
77:4b:54:f2:a2:12:a1:64:1b:12:36:d8:e1:97:ee:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:08:81:D4:9A:47:2D:8C:6E:A9:7B:08:C1:77:1A:A0:66:40:28
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:f8:ef:50:f4:49:d7:1a:a8:0d:ab:c6:bc:0e:27:f9:d0:
92:09:e8:1a:25:25:f9:4b:26:77:1c:d5:f1:b4:54:6e:54:8f:
39:a6:ea:5b:38:33:a4:f6:4a:8c:4f:1d:45:53:ad:ee:12:52:
af:d4:77:cc:b5:88:d6:61:cd:78:51:f7:a8:51:45:8b:26:cd:
67:9f:04:9a:5f:86:9f:e6:65:4e:8f:ca:d6:b3:d6:ae:17:0f:
81:8d:88:e3:eb:0d:dd:db:8b:12:fa:7b:67:33:f2:b6:a9:85:
9a:8f:0c:39:ee:83:db:c6:36:32:af:4c:30:ed:0f:ab:0c:ae:
b8:3f:24:37:50:ab:b8:d5:db:80:e8:a5:a0:11:d7:ce:52:27:
cf:5c:62:e1:95:3c:5e:b2:99:cf:16:53:d3:5f:e6:55:4b:68:
b6:06:1b:04:1f:6e:cd:c7:9a:ae:40:a6:bc:d3:ca:ac:26:b0:
d2:29:8d:d9:0c:7b:24:72:41:81:18:e3:29:5d:be:6f:a9:da:
c3:ec:13:9a:d4:16:69:20:96:c0:af:6a:c4:ad:9d:ee:d2:3c:
f2:0d:6b:03:28:a2:42:2b:0a:ba:bb:de:56:20:55:6e:47:13:
b4:0c:db:cd:fb:42:fe:01:1d:17:5b:1d:6b:5a:7e:77:d5:c1:
57:a1:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:10:27 2025 by rpki-client