Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: gXzUfQhVxWBmfKRSHuN5n1T5g6G00JYYOTDSF7h431Q=
Subject key identifier: 81:37:97:49:53:84:F0:08:E8:65:C9:46:F4:59:8A:23:4E:F4:61:A6
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 019A209B3C9E8F9AA61304429319949025F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 1429
Signing time: Sun 26 Oct 2025 13:00:35 +0000
Manifest this update: Sun 26 Oct 2025 13:00:35 +0000
Manifest next update: Mon 27 Oct 2025 13:00:35 +0000
Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: CB6CZrl9i80AQNfiHTjWf0TcFrNDHpgkHxwDKYzZ+Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:3c:9e:8f:9a:a6:13:04:42:93:19:94:90:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Oct 26 13:00:35 2025 GMT
Not After : Oct 27 13:00:35 2025 GMT
Subject: CN=813797495384f008e865c946f4598a234ef461a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:f4:b8:33:58:4f:21:4a:60:0c:ed:d2:0b:
c7:69:27:d6:4e:52:ee:64:c0:86:89:81:3f:f4:87:
b5:22:7e:45:d7:ff:e3:36:eb:80:53:41:51:15:c6:
cf:57:1d:55:74:ba:31:cb:f6:b2:16:a7:59:78:2f:
8a:c0:c3:df:3e:af:bb:26:05:97:16:a6:9e:35:6b:
2a:95:a9:6a:f4:f5:a1:85:37:81:36:01:be:8c:d6:
5e:e6:01:66:cf:b1:a1:cc:1a:09:68:4d:35:59:fe:
35:c3:3d:24:77:c9:36:17:d2:b9:b6:78:2f:55:cf:
a6:13:93:24:d7:29:b8:ed:ec:e8:1d:2f:f4:72:b3:
2d:9a:dc:77:bc:4b:74:11:b6:dc:55:33:48:31:03:
3d:ea:5f:cc:70:df:0f:2a:ad:64:91:04:25:49:b1:
74:83:85:95:99:45:27:29:0e:85:08:a3:ce:fd:50:
d4:24:41:af:fa:e7:90:76:52:b4:f8:e2:c2:73:0e:
7e:26:89:a3:49:17:a2:2d:8e:0b:57:a9:6c:53:04:
99:22:65:6d:52:71:e0:a6:c1:3f:1f:f9:b5:4f:7e:
79:66:d5:da:63:70:a4:da:92:59:6b:3a:d8:70:e8:
33:ac:78:40:e5:51:95:b0:16:bb:70:4b:0d:50:20:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:97:49:53:84:F0:08:E8:65:C9:46:F4:59:8A:23:4E:F4:61:A6
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:0d:31:f9:9f:82:18:01:2b:3b:e4:d9:44:64:05:71:93:
a5:12:3f:cd:66:7d:10:9e:a3:62:a7:f7:21:4c:37:77:08:12:
cf:47:42:1d:f6:9d:4a:dc:a8:c1:10:2e:b7:23:46:a0:39:23:
cc:20:6a:e1:13:1d:c2:3c:07:20:0d:04:47:d2:0b:92:6b:bc:
51:6e:d9:98:aa:97:77:0a:53:b7:20:21:e9:62:f1:40:2e:8f:
66:39:54:ae:38:6e:1b:73:28:6f:bb:8c:c0:4b:e3:e9:a2:0e:
cc:93:04:4d:b7:32:38:9c:3e:fe:66:b8:69:06:16:d0:f8:8f:
c2:c7:65:82:71:1c:4f:ab:4e:c9:bf:3f:79:f2:90:70:0f:d8:
f6:95:1c:9f:95:e2:b7:52:b0:24:e5:97:99:76:ad:44:51:47:
92:8d:b9:f1:56:78:ea:5a:f6:4a:87:86:29:5b:39:a1:a7:37:
2f:49:3d:0a:16:2d:fe:0f:10:23:6d:be:d1:8c:ad:7d:dd:21:
0a:d5:08:e1:51:f8:80:c9:5c:9c:ba:74:b9:5d:ff:0d:cd:c5:
ac:70:b4:fe:d2:03:07:21:b9:a2:a0:f1:4c:1a:e5:28:f2:24:
5d:d1:fa:2c:e1:7c:fa:35:77:d8:cc:56:12:a9:5f:ec:65:e8:
0a:1d:fd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogmzyej5qmEwRCkxmUkCX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3
MmIzM2QwHhcNMjUxMDI2MTMwMDM1WhcNMjUxMDI3MTMwMDM1WjAzMTEwLwYDVQQD
Eyg4MTM3OTc0OTUzODRmMDA4ZTg2NWM5NDZmNDU5OGEyMzRlZjQ2MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw770uDNYTyFKYAzt0gvHaSfWTlLu
ZMCGiYE/9Ie1In5F1//jNuuAU0FRFcbPVx1VdLoxy/ayFqdZeC+KwMPfPq+7JgWX
FqaeNWsqlalq9PWhhTeBNgG+jNZe5gFmz7GhzBoJaE01Wf41wz0kd8k2F9K5tngv
Vc+mE5Mk1ym47ezoHS/0crMtmtx3vEt0EbbcVTNIMQM96l/McN8PKq1kkQQlSbF0
g4WVmUUnKQ6FCKPO/VDUJEGv+ueQdlK0+OLCcw5+JomjSReiLY4LV6lsUwSZImVt
UnHgpsE/H/m1T355ZtXaY3Ck2pJZazrYcOgzrHhA5VGVsBa7cEsNUCDKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE3l0lThPAI6GXJRvRZiiNO9GGmMB8GA1UdIwQY
MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt
MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk
LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXgNMfmf
ghgBKzvk2URkBXGTpRI/zWZ9EJ6jYqf3IUw3dwgSz0dCHfadStyowRAutyNGoDkj
zCBq4RMdwjwHIA0ER9ILkmu8UW7ZmKqXdwpTtyAh6WLxQC6PZjlUrjhuG3Mob7uM
wEvj6aIOzJMETbcyOJw+/ma4aQYW0PiPwsdlgnEcT6tOyb8/efKQcA/Y9pUcn5Xi
t1KwJOWXmXatRFFHko258VZ46lr2SoeGKVs5oac3L0k9ChYt/g8QI22+0Yytfd0h
CtUI4VH4gMlcnLp0uV3/Dc3FrHC0/tIDByG5oqDxTBrlKPIkXdH6LOF8+jV32MxW
Eqlf7GXoCh39TQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 23:17:09 2025 by rpki-client