Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: xzdQFa1aMVeR5JXy30RjTfHC38w0Gqos9NENqKPdYk4=
Subject key identifier: 3D:D1:DD:60:C6:3F:F3:C9:64:38:08:88:31:E3:27:D1:A4:30:79:54
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 019A221B60989754EC0C85537A004E6EC7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 1199
Signing time: Sun 26 Oct 2025 20:00:10 +0000
Manifest this update: Sun 26 Oct 2025 20:00:10 +0000
Manifest next update: Mon 27 Oct 2025 20:00:10 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: NCtguHSKoPiiXvQMRE8rhJkx+LiNzlAlvYJ26o5Q4Ew=)
2: PQhxpowWbirpi73sooxP6-CQe0w.roa (hash: I/+Rv+eczGu/4NSVaZNewfe6Bd3n9RCdyw3Ufabk0jk=)
3: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:60:98:97:54:ec:0c:85:53:7a:00:4e:6e:c7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Oct 26 20:00:10 2025 GMT
Not After : Oct 27 20:00:10 2025 GMT
Subject: CN=3dd1dd60c63ff3c96438088831e327d1a4307954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:e2:99:c4:31:3c:c2:7d:18:22:de:56:d0:
86:e4:62:31:17:72:86:df:12:d5:c5:27:20:6f:30:
ab:87:ba:3b:ac:07:0c:bf:1d:ad:06:83:b9:2a:a0:
5b:cd:79:09:6e:07:40:81:3e:bb:4a:72:3f:8d:67:
55:84:86:4f:0e:45:fb:7f:e1:85:45:60:78:38:4a:
e3:a6:ea:c8:a3:da:09:81:7c:05:31:bb:ba:4e:40:
f5:98:f9:ac:78:ea:3e:1a:fe:62:48:d4:c1:14:38:
b7:b3:d5:c4:05:ce:5a:ba:3a:88:44:54:b7:69:9f:
e3:30:47:cc:08:86:ff:c4:2a:fe:e0:35:6d:f0:6e:
d1:ab:c2:9d:9c:b7:72:f0:82:30:6a:73:7f:3a:62:
11:31:f4:33:74:38:98:83:b9:fb:bb:0f:6e:8f:03:
16:80:ef:c0:95:20:0d:e2:1b:21:16:a8:86:f9:c9:
ed:1f:d4:3c:c5:7a:f5:1e:a1:2d:75:9c:8c:63:b8:
ca:99:40:bc:53:70:24:bc:a3:72:0d:88:27:38:ea:
2e:74:9c:be:f0:ee:39:63:99:8e:09:01:df:74:e6:
ea:a1:14:12:55:d3:79:94:4f:0c:19:1c:9c:33:d1:
58:af:db:43:3e:0a:f4:66:ed:43:ab:95:4c:67:11:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:DD:60:C6:3F:F3:C9:64:38:08:88:31:E3:27:D1:A4:30:79:54
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:20:6b:57:ce:91:e4:8f:82:b1:8e:9a:21:17:d1:e9:6e:fe:
4a:7f:c4:8e:fb:81:b9:50:8c:4c:19:03:5d:d7:03:a9:69:cb:
62:50:1a:4d:f7:3a:13:c5:c5:f9:bf:60:f5:63:99:65:29:15:
77:db:2f:a6:b9:21:3a:2a:52:31:bd:d6:ff:ce:d3:f4:2d:f8:
5d:cc:d9:a8:67:77:f7:7d:06:21:31:bd:f0:25:f7:00:c4:01:
a3:e7:fb:0b:d1:67:b2:13:a6:26:86:28:5c:4c:0a:c8:f3:e5:
d2:99:32:e2:35:42:7e:cd:0c:ac:02:7f:5a:e8:e3:59:a9:34:
e7:dc:7b:f0:b4:02:2c:fe:b9:83:a2:5b:4f:5f:a2:f0:d8:72:
c0:67:75:d3:3a:25:45:15:57:67:5e:97:3b:e8:75:a4:04:95:
83:33:6c:3b:d0:35:44:96:43:74:b1:54:35:e2:c0:c2:cd:a0:
22:e2:6d:db:74:44:c7:13:4a:c7:9b:83:85:5e:53:f3:8a:bd:
7c:63:54:9b:7a:05:0f:84:63:1f:7c:c5:53:23:9c:ce:9d:af:
de:bb:73:39:f0:b7:29:0b:c0:e9:68:a5:b3:44:ac:95:4b:22:
71:7c:52:6f:bb:0e:f0:76:79:c5:cb:c1:58:a8:73:29:e5:f5:
1d:7d:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:04 2025 by rpki-client