Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: 4Bqwguhe6ucKPINGJyTwiibdYbUPmxLWCCUUXI4t2P4=
Subject key identifier: 84:61:D1:7F:4B:D9:8A:B8:31:A5:B5:8D:23:1F:1D:EB:6D:52:46:64
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 019A71B7EB6654E6D66B6A1D16B809C8D753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 012B
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: iHsD7YVhp+CR/M5BMhsLIrjOE1Lbhxta1Och8wfUbBI=)
2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:eb:66:54:e6:d6:6b:6a:1d:16:b8:09:c8:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=8461d17f4bd98ab831a5b58d231f1deb6d524664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:ee:9b:ce:f6:9f:22:3e:9f:2e:36:9e:43:
bc:4e:84:0b:66:49:50:35:ce:48:68:6b:59:08:b2:
10:5d:f9:ec:8e:4c:dc:1f:a1:92:83:14:2f:55:32:
12:cf:08:b7:8e:25:4b:f7:84:d9:4d:77:3f:10:43:
0f:e8:bf:02:4b:d8:c6:9a:c5:ff:09:98:d1:4b:a3:
bb:7e:08:ec:f0:c1:63:ca:a3:20:8b:37:c1:ee:4c:
5b:c6:f0:9c:fc:af:fd:53:bc:57:f8:dc:8d:41:a8:
32:95:73:e1:40:16:ba:5b:80:77:04:0f:ea:a0:f9:
17:b8:5d:e3:5b:0f:be:b3:f0:47:7f:ac:df:cc:0b:
bd:33:52:70:4a:10:c9:3c:cb:36:b8:3e:68:f5:86:
67:93:05:06:8d:b9:0f:99:93:6b:b3:c8:70:63:31:
89:3e:ac:28:86:fa:8e:b9:f3:90:bb:5c:59:96:6d:
76:6f:cb:f8:0a:8d:73:f5:59:df:51:1c:79:39:56:
36:48:f6:cc:f6:c7:f0:3e:3f:b2:5c:1c:79:cb:72:
75:c3:ba:88:c7:ed:5d:90:3a:14:73:84:b4:e5:7c:
f0:79:f8:4d:72:75:0c:bd:83:ab:34:97:1b:f0:51:
61:1b:5e:03:3c:ad:85:f8:7c:ae:91:47:42:a3:76:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:D1:7F:4B:D9:8A:B8:31:A5:B5:8D:23:1F:1D:EB:6D:52:46:64
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:42:7f:b0:34:24:e9:bb:9d:93:29:78:bd:f8:ca:cb:ab:
89:d4:69:83:1c:ec:75:43:5b:8f:3b:b4:c6:31:c9:54:c6:34:
72:a0:ca:0e:b6:ee:3f:82:19:32:f1:44:9b:61:48:9c:48:2b:
17:fb:e9:e5:19:2e:38:77:49:9b:9c:e7:c1:0f:7d:38:c5:de:
e4:fe:bd:75:c3:39:d9:cd:ce:0f:53:3a:54:6e:08:5f:63:11:
e1:37:34:21:10:f0:f8:e1:3d:66:a4:cb:3b:28:38:7a:22:9d:
64:64:cc:04:2f:10:a3:96:c9:f1:1e:00:cd:a5:73:17:2d:03:
88:c6:ec:fc:f9:03:57:87:7f:f1:17:5e:66:73:6c:8d:35:e0:
aa:7b:d4:25:8a:d9:34:04:16:35:37:8b:8e:82:b7:4f:30:b5:
c4:0b:8f:9c:0a:6e:27:0b:c9:7b:b0:7e:55:0f:06:36:c2:e1:
6f:72:61:2d:f9:94:e8:f4:dc:7a:31:9f:d7:93:8e:ce:55:af:
f5:9f:07:d2:a2:4b:93:56:07:8b:57:49:6a:ca:fb:db:7f:88:
1b:74:5a:e5:a7:58:c9:a8:52:2a:52:df:be:9f:95:83:6d:03:
04:4a:01:71:ca:1c:67:9b:ba:87:54:e7:7e:e2:41:71:84:db:
16:be:9d:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+tmVObWa2odFrgJyNdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODhjNjY0ODViYjYwMzQ0MTc0NTc0NmY5Zjg4NmEyYTZh
MTVhMzYwHhcNMjUxMTExMDcwMTA5WhcNMjUxMTEyMDcwMTA5WjAzMTEwLwYDVQQD
Eyg4NDYxZDE3ZjRiZDk4YWI4MzFhNWI1OGQyMzFmMWRlYjZkNTI0NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kfum872nyI+ny42nkO8ToQLZklQ
Nc5IaGtZCLIQXfnsjkzcH6GSgxQvVTISzwi3jiVL94TZTXc/EEMP6L8CS9jGmsX/
CZjRS6O7fgjs8MFjyqMgizfB7kxbxvCc/K/9U7xX+NyNQagylXPhQBa6W4B3BA/q
oPkXuF3jWw++s/BHf6zfzAu9M1JwShDJPMs2uD5o9YZnkwUGjbkPmZNrs8hwYzGJ
PqwohvqOufOQu1xZlm12b8v4Co1z9VnfURx5OVY2SPbM9sfwPj+yXBx5y3J1w7qI
x+1dkDoUc4S05XzwefhNcnUMvYOrNJcb8FFhG14DPK2F+HyukUdCo3a5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRh0X9L2Yq4MaW1jSMfHettUkZkMB8GA1UdIwQY
MBaAFG2IxmSFu2A0QXRXRvn4hqKmoVo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTIt
YjVhNGMyMjQzMmVmLzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84NjQ4YmYtODA0ZS00ZTQyLWEyMTItYjVhNGMyMjQzMmVm
LzEvYllqR1pJVzdZRFJCZEZkRy1maUdvcWFoV2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHpCf7A0
JOm7nZMpeL34ysuridRpgxzsdUNbjzu0xjHJVMY0cqDKDrbuP4IZMvFEm2FInEgr
F/vp5RkuOHdJm5znwQ99OMXe5P69dcM52c3OD1M6VG4IX2MR4Tc0IRDw+OE9ZqTL
Oyg4eiKdZGTMBC8Qo5bJ8R4AzaVzFy0DiMbs/PkDV4d/8RdeZnNsjTXgqnvUJYrZ
NAQWNTeLjoK3TzC1xAuPnApuJwvJe7B+VQ8GNsLhb3JhLfmU6PTcejGf15OOzlWv
9Z8H0qJLk1YHi1dJasr723+IG3Ra5adYyahSKlLfvp+Vg20DBEoBccocZ5u6h1Tn
fuJBcYTbFr6dyA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:49 2025 by rpki-client