Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: MDNaLI5jX8DVMKx2Zb9GS6ZFJ//ItR9GkI9x2WD9h84=
Subject key identifier: 26:A9:E1:E3:E8:72:C3:1B:81:4D:67:AB:80:E8:4E:39:D3:E4:AB:AE
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 019A552DCE086361A7CB0F3730B9C82CB298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 06F3
Signing time: Wed 05 Nov 2025 18:00:56 +0000
Manifest this update: Wed 05 Nov 2025 18:00:56 +0000
Manifest next update: Thu 06 Nov 2025 18:00:56 +0000
Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: ne3UELArOzhWqcC+BgtdED5j9qu0zzijEETL1BMeBds=)
2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:ce:08:63:61:a7:cb:0f:37:30:b9:c8:2c:b2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Nov 5 18:00:56 2025 GMT
Not After : Nov 6 18:00:56 2025 GMT
Subject: CN=26a9e1e3e872c31b814d67ab80e84e39d3e4abae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:09:bc:50:07:c6:64:58:7a:ce:3a:39:64:
0c:e3:39:9d:fe:23:2c:be:11:3f:07:2c:74:49:45:
3d:fa:40:cb:8a:39:63:87:35:18:44:bb:4d:72:84:
eb:c5:b8:15:2c:ca:93:b2:d9:cc:17:23:f7:7b:72:
66:9a:9e:87:52:56:2d:a6:d4:f4:d2:b2:04:22:7b:
f6:31:a6:ab:de:67:10:dc:7a:ad:31:09:be:6e:74:
e1:e7:3a:b6:0d:37:b9:5a:93:19:1f:a4:68:37:33:
bc:1d:79:c1:92:57:0b:7b:98:cc:12:96:65:87:dc:
7f:dd:38:a8:0f:65:e3:0a:01:02:78:2f:01:b1:23:
91:7b:c4:67:b9:7a:22:fc:5b:08:28:7c:b4:18:5b:
dd:07:35:13:c6:b0:e5:1c:59:7d:cf:25:32:85:05:
97:dd:cd:32:8a:ec:ed:8a:ad:71:dd:6a:de:3d:b9:
b4:07:bf:f5:d1:85:1f:de:79:c0:33:f3:b6:84:48:
2d:e0:c2:bb:79:87:87:9d:cc:5c:d6:7a:16:da:50:
3a:86:d9:dc:5a:f9:2d:11:ac:7d:aa:76:09:49:05:
61:18:3f:de:40:1f:ce:8a:3d:7d:ed:a6:74:cd:59:
d6:c9:21:c0:9b:c4:ff:dd:2d:aa:df:b5:c9:b7:a4:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:E1:E3:E8:72:C3:1B:81:4D:67:AB:80:E8:4E:39:D3:E4:AB:AE
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:40:fd:9c:f0:61:98:2d:37:45:a2:a8:d8:29:6a:dd:0b:7a:
9b:36:b1:63:5f:ed:b3:3c:aa:b5:3d:f3:d8:c0:f0:f9:02:6e:
6f:a5:8c:b5:7e:6b:a9:7e:91:5d:71:02:06:33:c3:f4:64:69:
bd:38:34:f6:49:e2:34:50:56:79:6f:35:48:81:91:a0:73:25:
b1:9d:eb:2f:a9:03:05:72:02:17:76:fe:31:26:39:2d:1b:9f:
97:6d:49:b7:45:39:a8:c1:ad:05:73:22:e2:9b:e9:06:ab:28:
ad:50:5e:99:d8:89:64:82:66:22:26:a6:27:d6:63:96:ae:2c:
1e:7a:2e:5f:ca:93:97:92:ea:cb:d3:a1:bb:b8:0a:cc:13:d9:
7c:97:bf:27:2e:a9:43:ea:d7:ae:5d:51:8e:a0:2c:30:36:b4:
d6:cc:4f:e7:1b:be:8e:06:76:88:b7:3c:23:d9:43:71:5f:c9:
a6:c0:cd:c7:d6:86:ee:45:9c:a0:41:3d:51:d3:f3:b6:50:f0:
3c:1e:b2:f3:78:6c:67:76:6d:fa:d9:f8:80:2d:96:98:89:f8:
6a:9f:d1:24:22:bf:de:78:11:4f:8a:f2:60:a8:d4:3d:50:dc:
c3:77:99:15:32:b0:85:46:6e:b7:a9:c0:0f:74:02:3d:6b:19:
a7:a2:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:34:17 2025 by rpki-client