Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: 8KKIU38uSs/Hcwa7PwowEXw4/mWXglER4u45DvGbF9Y=
Subject key identifier: 98:0D:92:04:CD:59:DE:F4:49:4B:FE:5F:DD:75:A6:94:5F:05:20:F1
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019A71B90475D5CDC67F3813095E1E74C230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 1zofRmaZ8f9G64EtUbNLrpi9oxlNNhtt/Wmc7mbRZ8M=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:04:75:d5:cd:c6:7f:38:13:09:5e:1e:74:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=980d9204cd59def4494bfe5fdd75a6945f0520f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:b5:73:c7:a9:6b:45:cd:f6:b0:d6:10:42:
5f:08:d6:50:56:55:79:ce:de:7e:80:20:24:2e:3c:
af:8b:a2:7a:df:cf:7a:3c:73:63:44:1c:1c:d2:b6:
82:ee:e9:01:75:ff:46:50:c0:6a:da:e7:47:2e:9b:
44:95:9b:db:da:3a:b2:8b:84:01:b6:4f:68:ff:be:
24:e3:0a:c1:d8:69:f7:93:d0:7c:78:2c:eb:b0:71:
01:07:1c:15:0a:11:e6:7d:38:82:2f:1f:1a:fd:56:
73:89:76:52:31:14:c6:46:b8:1f:d4:50:70:59:27:
c9:54:de:f0:62:02:c5:90:29:a5:71:3b:ea:cf:76:
a4:71:75:be:44:5b:84:48:8a:42:71:3e:2a:01:dc:
ac:b0:d9:57:82:d2:e4:c6:a9:f2:ae:3b:cb:43:8e:
d1:ca:12:0b:d5:03:eb:30:53:f7:dc:e1:d9:7d:9a:
db:cf:27:c7:13:5d:e9:20:08:5c:a7:69:2b:2c:bb:
ab:09:f5:ba:56:a6:91:a5:94:be:d6:96:9c:50:6a:
5b:ef:c0:9c:d2:41:ba:f6:92:11:e7:29:db:19:f1:
96:d3:89:88:f8:30:d8:0f:cb:5d:64:63:4f:de:6d:
eb:59:c7:72:ff:b0:24:30:ac:e0:73:d5:89:99:97:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:92:04:CD:59:DE:F4:49:4B:FE:5F:DD:75:A6:94:5F:05:20:F1
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:a4:a7:26:19:27:c6:ac:a0:a6:0a:03:71:87:28:8b:fa:
7b:c1:07:f9:31:4d:ff:c6:ec:98:33:62:a4:b1:39:0c:62:ec:
73:70:6c:b0:8e:b8:1b:b8:a9:59:4e:5f:99:28:ac:3b:57:85:
ce:a5:33:ab:f2:39:08:09:0f:d3:a8:88:f8:88:22:d9:66:cb:
e5:96:1c:fe:58:a8:13:56:ee:b8:91:8c:3d:6d:43:32:f7:f4:
64:05:f6:37:81:c3:09:59:cf:9a:62:b1:d9:41:f1:fa:a0:25:
df:bf:67:18:65:bf:57:19:ae:d6:c1:39:3b:9a:87:7a:8d:47:
3e:dc:b0:5c:e7:86:ab:3e:c4:ef:8e:87:1a:21:84:3d:5d:ad:
77:ed:6e:d5:80:3c:a5:3c:78:6e:5c:f3:54:49:b4:e4:1a:8a:
52:07:d9:d5:58:0b:7b:22:03:38:f5:00:2b:f3:22:85:71:29:
4f:b7:00:5b:ee:62:91:a0:36:0f:9f:f4:b3:e0:54:7f:f0:0e:
c3:8f:f6:81:7d:c4:67:3e:53:fd:46:36:82:81:cb:be:5d:ca:
da:c8:86:12:f8:96:ed:a1:7e:44:e7:41:3c:70:2e:5d:90:da:
38:a6:cb:27:ab:1b:f0:2e:ee:4d:ab:1a:19:f3:fe:b9:31:de:
95:8c:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:31 2025 by rpki-client