Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: L0WYFFTZTimV3jjO5LeUVR6Bep7hUeNdXYy/wXGrbuc=
Subject key identifier: 32:B9:09:9E:5A:54:FA:D5:32:1F:C1:71:43:9B:F8:FB:D6:94:E1:29
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 019A1D633F409C47E322B931DFBB0404A553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 22:00:34 +0000
Manifest this update: Sat 25 Oct 2025 22:00:34 +0000
Manifest next update: Sun 26 Oct 2025 22:00:34 +0000
Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: 5Y7eYQx1RSpW/WIfoMlsJLNdbGryj1jyVHSTDkDKXZA=)
2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:3f:40:9c:47:e3:22:b9:31:df:bb:04:04:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Oct 25 22:00:34 2025 GMT
Not After : Oct 26 22:00:34 2025 GMT
Subject: CN=32b9099e5a54fad5321fc171439bf8fbd694e129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:7a:74:dd:46:47:b6:28:eb:29:3a:b0:6b:
a9:48:86:77:14:d0:a6:7d:e5:94:34:60:c1:ee:7a:
7d:18:cd:68:c4:f0:2b:4b:8b:a1:68:e6:b2:44:eb:
6c:f8:96:ea:83:ac:55:0e:e9:b1:56:0d:03:4e:fd:
51:15:8b:48:d8:f8:7d:47:bd:4a:b9:23:55:aa:14:
02:dc:3b:7f:ec:6d:78:1c:f2:f9:e6:56:32:61:5d:
cf:50:06:e3:15:e7:0c:f9:56:ed:56:81:43:59:e9:
16:2c:8a:c6:f0:44:18:35:72:99:be:98:61:e2:4f:
ab:b4:f6:69:bd:02:bb:02:f0:8d:74:e4:9a:3f:9a:
ac:66:2c:f3:05:34:84:57:5f:49:e9:be:92:37:95:
fa:38:99:ca:70:4c:f4:b6:d1:6b:ed:d6:b7:09:6d:
e0:5d:1f:c3:5a:80:9a:eb:b7:95:fd:85:4c:47:be:
f2:b9:12:15:cd:db:9f:b3:84:22:dd:f8:d2:4a:6f:
76:33:d9:16:e7:39:b9:aa:76:00:1a:d1:5c:0e:16:
93:10:56:d9:9a:b3:20:e3:10:39:88:28:a2:ba:bf:
2a:7c:87:c8:a7:e7:a2:73:47:d0:8a:5a:cb:1b:2e:
b6:a5:6a:34:3a:37:f8:47:6a:42:7f:00:39:9e:c2:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:09:9E:5A:54:FA:D5:32:1F:C1:71:43:9B:F8:FB:D6:94:E1:29
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d4:60:aa:a6:00:a3:c0:93:c8:74:c1:83:cd:ad:5a:b6:9f:
65:e0:67:8d:e3:af:6f:fe:92:b4:5c:d1:87:0e:20:1a:28:12:
3e:5f:7e:fe:5f:5b:e5:2c:47:01:1c:60:63:30:d2:1c:eb:97:
3f:17:00:46:a1:c0:7c:b0:02:f0:59:2b:59:b2:b6:6e:97:cc:
f3:1b:95:88:23:99:1f:e9:23:9d:90:79:95:e7:ec:07:01:cf:
59:83:84:7f:55:ec:92:c1:9b:3e:8e:e9:23:a9:61:21:61:d1:
f8:26:1d:43:22:98:41:5d:60:f9:f2:8b:1f:14:f5:6b:15:96:
f2:ec:39:b9:97:49:70:5f:23:e0:76:31:04:65:1e:89:8f:2c:
e1:80:00:80:c8:22:65:40:1e:34:54:c0:7b:8a:cb:22:65:20:
bb:8d:45:82:5a:14:21:2b:dc:9b:e4:2b:f7:bd:18:be:ad:be:
50:94:19:2e:d0:70:47:e7:17:5d:9c:33:a0:00:69:1d:e0:01:
fb:f2:af:d6:5d:39:33:4a:2e:aa:cb:62:af:f7:b8:0b:81:2d:
19:98:1b:14:09:5a:38:ad:a1:64:fb:c7:26:dc:9c:af:fc:a7:
45:43:98:0c:f3:68:dc:af:7b:be:1c:82:f0:3c:da:6f:79:13:
e1:cb:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:25:32 2025 by rpki-client