Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: fyQdP+jSAjT9M48/DqZAjK4s0hT9x4iNsAvSqXdG0M8=
Subject key identifier: 35:EF:8A:4F:EC:62:7F:7A:B9:DA:F6:8D:79:3A:8D:0F:A9:9E:AE:3B
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019922FA44FC501EC354C3F5C825D44C98D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 10C7
Signing time: Sun 07 Sep 2025 07:00:50 +0000
Manifest this update: Sun 07 Sep 2025 07:00:50 +0000
Manifest next update: Mon 08 Sep 2025 07:00:50 +0000
Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: oJbvBPhehwDNnJdLpdWo2fsB9iiRy/pPS9B1pZgq5lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:44:fc:50:1e:c3:54:c3:f5:c8:25:d4:4c:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Sep 7 07:00:50 2025 GMT
Not After : Sep 8 07:00:50 2025 GMT
Subject: CN=35ef8a4fec627f7ab9daf68d793a8d0fa99eae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:56:cb:75:d4:6a:c8:0b:cb:8d:af:1b:b5:
eb:aa:e9:73:6d:9c:12:3f:13:f9:76:51:7a:e0:6d:
89:b2:49:9b:78:63:b6:b3:cc:8d:29:8b:0f:ed:a7:
2e:1e:13:12:60:9f:53:23:36:52:7c:09:16:30:e0:
ab:48:28:e8:58:14:0f:9a:b9:06:18:d5:fd:f3:6f:
a1:f6:99:71:5b:1a:0b:fb:78:8b:a7:9a:b4:4f:1c:
e3:05:f9:14:ad:bc:f3:83:97:54:22:f8:7d:58:30:
57:2e:f9:25:26:2e:2e:6a:4f:a2:04:f0:6d:62:bd:
cb:6a:1c:2d:d4:4e:4d:04:ef:3b:b9:24:6f:80:c0:
19:46:38:dd:d6:fd:94:59:d4:0e:6d:19:45:b0:c3:
3c:3e:47:80:5f:2e:61:38:2a:0e:99:47:d4:20:0a:
de:30:ea:95:79:24:92:db:df:ef:27:08:c4:8e:b9:
8b:58:f7:18:6a:2b:0c:a1:eb:d6:fb:93:61:fa:d7:
da:68:9c:15:e8:ce:b9:e6:14:b1:3c:88:ae:c6:21:
47:6a:a6:be:c2:b8:cd:b1:0e:06:e6:02:92:89:01:
80:4e:42:bc:22:55:57:ce:42:4e:a8:f2:d4:3e:c7:
f5:6f:7d:63:b2:4c:22:e6:fc:c9:8b:56:e5:89:71:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:8A:4F:EC:62:7F:7A:B9:DA:F6:8D:79:3A:8D:0F:A9:9E:AE:3B
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:58:14:5e:e9:d5:2f:76:b1:53:f7:d1:f5:0e:5e:1e:bf:71:
8c:6a:13:ec:74:c6:53:ed:2b:46:7a:17:fe:40:3e:8a:f8:4b:
89:4b:0f:b1:dd:cc:35:32:88:73:c1:e1:f7:93:93:e3:29:4b:
11:4a:1a:24:fb:3b:16:a7:63:e8:e6:2e:51:aa:bc:65:75:2d:
73:72:43:a8:d7:5c:89:18:b4:c6:6b:36:0f:3c:23:0d:99:a8:
f4:3a:a6:7c:88:96:f8:66:0c:32:b7:1b:c7:7e:ea:68:1d:0f:
09:c8:f2:ea:50:97:4c:05:fa:79:b7:7f:ff:da:f2:77:5a:c7:
f1:a5:55:f2:c7:53:53:db:ed:c9:14:27:43:a0:bd:be:83:6d:
37:42:08:b1:ed:11:da:6a:16:ec:60:bc:d8:c4:f6:9c:14:5f:
21:52:f2:29:da:d5:34:df:5d:2d:6e:70:58:b4:19:04:d8:eb:
3a:09:4d:bc:a2:57:45:12:c0:58:6e:42:d4:55:cb:c1:3e:8d:
2d:d8:0f:c8:5f:a6:90:ec:eb:c5:2f:aa:62:a0:ba:65:78:01:
63:f5:aa:dd:50:98:a0:59:84:41:a6:82:49:fd:ac:09:bd:85:
01:23:71:f6:32:f5:c9:d5:2b:d2:d7:ab:35:3c:52:82:a7:28:
c6:2c:e9:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+kT8UB7DVMP1yCXUTJjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODQwYmY4ZjJlYTQ0NmE0N2RiNmM2MzM5MDY2NjdjNjNl
ZDg4NmUwHhcNMjUwOTA3MDcwMDUwWhcNMjUwOTA4MDcwMDUwWjAzMTEwLwYDVQQD
EygzNWVmOGE0ZmVjNjI3ZjdhYjlkYWY2OGQ3OTNhOGQwZmE5OWVhZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3dWy3XUasgLy42vG7XrqulzbZwS
PxP5dlF64G2JskmbeGO2s8yNKYsP7acuHhMSYJ9TIzZSfAkWMOCrSCjoWBQPmrkG
GNX982+h9plxWxoL+3iLp5q0TxzjBfkUrbzzg5dUIvh9WDBXLvklJi4uak+iBPBt
Yr3Lahwt1E5NBO87uSRvgMAZRjjd1v2UWdQObRlFsMM8PkeAXy5hOCoOmUfUIAre
MOqVeSSS29/vJwjEjrmLWPcYaisMoevW+5Nh+tfaaJwV6M655hSxPIiuxiFHaqa+
wrjNsQ4G5gKSiQGATkK8IlVXzkJOqPLUPsf1b31jskwi5vzJi1bliXHHZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXvik/sYn96udr2jXk6jQ+pnq47MB8GA1UdIwQY
MBaAFG2EC/jy6kRqR9tsYzkGZnxj7YhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMt
YzNlOGVhZGQwMGJhLzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xMjU5NTktNzQ2Yi00YTBmLTk2ZDMtYzNlOGVhZGQwMGJh
LzEvYllRTC1QTHFSR3BIMjJ4ak9RWm1mR1B0aUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVgUXunV
L3axU/fR9Q5eHr9xjGoT7HTGU+0rRnoX/kA+ivhLiUsPsd3MNTKIc8Hh95OT4ylL
EUoaJPs7Fqdj6OYuUaq8ZXUtc3JDqNdciRi0xms2DzwjDZmo9DqmfIiW+GYMMrcb
x37qaB0PCcjy6lCXTAX6ebd//9ryd1rH8aVV8sdTU9vtyRQnQ6C9voNtN0IIse0R
2moW7GC82MT2nBRfIVLyKdrVNN9dLW5wWLQZBNjrOglNvKJXRRLAWG5C1FXLwT6N
LdgPyF+mkOzrxS+qYqC6ZXgBY/Wq3VCYoFmEQaaCSf2sCb2FASNx9jL1ydUr0ter
NTxSgqcoxizpSQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:30 2025 by rpki-client