Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: cgHvt2Dy3OVTEfQOeTKmDqoe3G7jpdX9WOdq29kMKw4=
Subject key identifier: 03:0E:4E:5B:34:66:D2:DD:D9:6A:13:EB:E0:37:6B:34:12:30:02:14
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 019747427A08EAE3A747473EF5404F73E7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 22:00:28 +0000
Manifest this update: Fri 06 Jun 2025 22:00:28 +0000
Manifest next update: Sat 07 Jun 2025 22:00:28 +0000
Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: SNLczrRVRjBXqk5qR6lntgalQIx1ieYtCB0hwF+F/Hw=)
2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:7a:08:ea:e3:a7:47:47:3e:f5:40:4f:73:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Jun 6 22:00:28 2025 GMT
Not After : Jun 7 22:00:28 2025 GMT
Subject: CN=030e4e5b3466d2ddd96a13ebe0376b3412300214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:7b:cf:4b:6f:ab:9d:8f:75:ce:3c:68:84:
ff:c3:1a:d3:da:9f:40:53:69:b1:2e:5f:d5:da:9e:
91:a7:12:6f:fa:57:ba:3f:f5:c1:d4:db:03:47:bd:
06:b9:99:16:12:7e:8a:06:1f:32:9e:a0:c6:6a:62:
6f:f9:5c:d5:3f:88:04:cf:24:89:86:53:03:49:42:
aa:f3:db:87:1d:b7:46:f5:2b:6b:7e:9f:49:4f:c2:
be:c4:f0:9b:a2:7b:c9:92:9e:6c:74:ce:27:e7:2a:
9f:44:83:d3:96:e2:f9:c9:12:1c:87:df:72:13:59:
3f:80:72:d7:ff:9b:17:67:0d:3b:c2:b1:ae:f8:fa:
55:b9:ec:6a:98:66:ea:1c:6d:99:88:8d:d7:e6:13:
94:0f:c5:aa:8e:ca:ae:8e:b7:c0:d7:a9:9f:56:b0:
93:b6:c5:64:43:c0:52:2b:b1:50:ee:3a:38:2e:eb:
9d:22:ae:46:b6:4e:5f:21:b7:62:d1:ab:87:cb:c1:
41:c2:81:db:e1:52:e0:f2:c9:67:d8:da:54:0f:b7:
e0:b5:12:70:a6:64:36:31:9e:e7:04:06:49:5d:d3:
d0:22:36:d5:e6:73:3b:ab:b5:ea:38:dd:1f:93:08:
d9:c6:69:a3:b2:40:f8:6f:a4:ff:cb:0c:25:41:c1:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:4E:5B:34:66:D2:DD:D9:6A:13:EB:E0:37:6B:34:12:30:02:14
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6e:31:c8:54:a4:2b:71:dd:90:48:5f:81:b1:d6:a6:3e:a4:
bf:a5:07:e1:78:c8:23:08:6a:3a:57:8a:c1:e0:32:8b:89:59:
3a:d8:c5:f2:c4:7e:9e:dd:f4:46:2c:88:33:19:d5:b5:ae:90:
76:0d:3a:d7:a5:50:42:0a:9d:6c:7b:4c:83:81:14:35:7f:89:
c7:a6:20:fa:c6:53:39:d5:f3:f1:64:0a:e3:bc:87:64:b3:8d:
17:2e:02:6a:53:7a:1b:b5:31:5b:08:1e:5f:a5:ea:30:a9:58:
d6:1b:62:08:2c:52:39:87:a9:1a:0c:f5:b8:43:12:db:d2:a4:
12:94:7a:df:67:2a:92:4c:97:c5:84:29:59:c3:a7:ee:c3:a4:
56:5a:35:9f:83:1f:27:ea:82:55:c7:9b:23:8a:55:81:bd:2e:
4c:fe:e7:be:41:5f:43:02:16:03:84:c0:70:1f:15:90:f4:cc:
b5:a8:e9:9a:67:60:7e:fe:15:1f:50:83:6c:be:58:e8:31:ac:
1f:cb:b9:32:f2:43:22:7e:e8:13:72:1d:a4:b8:b7:68:30:10:
4f:67:ae:d2:0a:a1:bd:48:06:89:1c:f4:15:7a:95:b6:3a:94:
48:b8:c3:73:2e:86:a0:48:3d:f2:41:f1:4e:1a:d4:38:2d:7c:
3a:5e:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:06:18 2025 by rpki-client