Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: /ml1bjAe/aARItjLhoit6sFxjQfTjjCvI2T2G6kjrN0=
Subject key identifier: E0:E4:1B:C0:93:CA:E4:24:8C:D0:BB:73:C4:0A:1B:94:23:1D:CA:99
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 01974667190A2DA99EF38496080254DE569F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 12AF
Signing time: Fri 06 Jun 2025 18:00:51 +0000
Manifest this update: Fri 06 Jun 2025 18:00:51 +0000
Manifest next update: Sat 07 Jun 2025 18:00:51 +0000
Files and hashes: 1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: QZHbgBMKFslr8Cinjkt8+EQJG7MJQPyLLvIhHWJKIhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:19:0a:2d:a9:9e:f3:84:96:08:02:54:de:56:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Jun 6 18:00:51 2025 GMT
Not After : Jun 7 18:00:51 2025 GMT
Subject: CN=e0e41bc093cae4248cd0bb73c40a1b94231dca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:10:ab:02:c5:e3:23:c7:fd:2a:f8:e0:57:
66:d0:74:0b:c4:fe:10:80:0d:ba:d1:0a:f9:cd:95:
99:d3:c1:fe:8e:0c:68:3d:77:15:a6:75:48:6b:7d:
f0:11:6d:71:f2:39:2d:40:23:da:99:aa:6b:08:2e:
ec:d0:09:91:18:69:9d:29:42:93:51:c4:67:1e:36:
f9:e9:09:3a:15:dd:0c:d5:1a:28:10:d9:91:ea:ee:
fb:3a:11:f1:b5:b9:b7:69:3a:54:f4:c9:8b:dd:ed:
46:88:38:3f:5f:47:e4:ce:ce:41:3a:6c:18:14:7e:
b3:85:b8:be:c3:3d:b3:4e:8d:f7:f4:98:45:c5:f2:
c0:f7:da:44:d5:04:db:97:6e:2f:b6:56:a2:9b:30:
74:be:24:23:38:18:a6:97:10:83:e9:e2:d3:bb:f3:
c5:bb:01:06:6a:db:4b:81:95:78:9c:be:36:6c:b4:
75:cb:03:4a:55:97:08:1a:4c:9e:58:2b:02:f1:bd:
ae:2f:c4:5d:64:cb:61:c4:d6:6b:7d:da:70:d9:d5:
02:65:77:51:15:22:4a:a3:04:d3:79:41:13:01:0b:
c5:d0:40:b1:ec:74:6d:42:52:77:d4:a9:1c:3b:d7:
b7:d2:6a:ff:26:84:f2:d4:85:8e:3b:ce:4d:36:60:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:1B:C0:93:CA:E4:24:8C:D0:BB:73:C4:0A:1B:94:23:1D:CA:99
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:ac:6d:cf:18:b7:40:54:d1:50:b6:d3:a3:1a:b7:83:1d:
45:93:c0:9e:a5:9a:25:95:1c:53:26:4e:fc:b9:e5:42:70:f8:
3d:1b:87:3f:51:6b:d7:b4:90:4b:fb:2d:22:8d:19:1c:8c:08:
72:18:3a:6e:1c:3a:dc:73:6f:c1:43:d7:ee:ac:3d:e0:1a:86:
34:e7:18:14:b8:d2:e2:0b:d5:71:86:fe:31:de:d3:f9:be:8a:
3b:bc:94:22:bc:8d:e6:a5:74:82:41:cf:44:69:b7:53:45:0e:
79:44:0e:2f:60:50:33:67:0e:4c:37:bd:8f:67:60:9b:55:db:
0e:c9:bb:11:4b:2e:b1:3e:99:b4:f3:37:55:46:ab:23:d5:d5:
de:cb:76:ef:95:82:f4:ca:77:f3:e2:0b:68:b5:69:af:51:de:
87:8e:cc:b4:d2:18:62:ff:42:89:5b:6c:b7:aa:d5:ed:69:88:
6d:ab:76:65:e4:95:9f:c0:41:25:e9:9a:1f:59:cd:8c:0b:82:
aa:94:19:c9:5a:c2:f6:f9:29:4d:4f:44:d0:b3:a4:13:ef:bb:
8f:23:a3:83:b4:ec:b6:43:5f:ca:54:7e:61:14:53:09:b5:9c:
be:f7:6e:51:60:88:74:e1:ed:3d:e2:03:15:93:34:86:22:a6:
00:64:bb:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZxkKLame84SWCAJU3lafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3
MmIzM2QwHhcNMjUwNjA2MTgwMDUxWhcNMjUwNjA3MTgwMDUxWjAzMTEwLwYDVQQD
EyhlMGU0MWJjMDkzY2FlNDI0OGNkMGJiNzNjNDBhMWI5NDIzMWRjYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RIQqwLF4yPH/Sr44Fdm0HQLxP4Q
gA260Qr5zZWZ08H+jgxoPXcVpnVIa33wEW1x8jktQCPamaprCC7s0AmRGGmdKUKT
UcRnHjb56Qk6Fd0M1RooENmR6u77OhHxtbm3aTpU9MmL3e1GiDg/X0fkzs5BOmwY
FH6zhbi+wz2zTo339JhFxfLA99pE1QTbl24vtlaimzB0viQjOBimlxCD6eLTu/PF
uwEGattLgZV4nL42bLR1ywNKVZcIGkyeWCsC8b2uL8RdZMthxNZrfdpw2dUCZXdR
FSJKowTTeUETAQvF0ECx7HRtQlJ31KkcO9e30mr/JoTy1IWOO85NNmDvxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODkG8CTyuQkjNC7c8QKG5QjHcqZMB8GA1UdIwQY
MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt
MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk
LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArq6sbc8Y
t0BU0VC206Mat4MdRZPAnqWaJZUcUyZO/LnlQnD4PRuHP1Fr17SQS/stIo0ZHIwI
chg6bhw63HNvwUPX7qw94BqGNOcYFLjS4gvVcYb+Md7T+b6KO7yUIryN5qV0gkHP
RGm3U0UOeUQOL2BQM2cOTDe9j2dgm1XbDsm7EUsusT6ZtPM3VUarI9XV3st275WC
9Mp38+ILaLVpr1Heh47MtNIYYv9CiVtst6rV7WmIbat2ZeSVn8BBJemaH1nNjAuC
qpQZyVrC9vkpTU9E0LOkE++7jyOjg7TstkNfylR+YRRTCbWcvvduUWCIdOHtPeID
FZM0hiKmAGS7Zw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:29:45 2025 by rpki-client