Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: HIJmf5y2KpnuhsRpa05R4K5o7f5tpOqRY8nqbCrlKYg=
Subject key identifier: 4C:71:77:E2:CD:58:33:ED:00:DE:09:30:74:9B:35:D8:C9:48:A9:19
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019A71EE80873F1BAC272CA3244F66C6B9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 127E
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: ykiRWvY3eOQOeBq5KNx+TpNB9U9QLbN+9e0zw1EEZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:80:87:3f:1b:ac:27:2c:a3:24:4f:66:c6:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=4c7177e2cd5833ed00de0930749b35d8c948a919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:23:d2:ab:95:d1:1c:c6:43:82:55:eb:16:
35:80:e1:b5:cd:5a:b6:26:7b:55:9c:57:f7:63:3f:
b4:41:30:6a:6d:1b:e5:9a:2b:b5:23:93:8c:43:c4:
89:4c:19:7c:7f:82:4c:7e:c1:4a:d9:c9:70:b3:cd:
b9:63:e9:04:d4:04:45:b9:4b:d3:3b:a0:01:1a:21:
a6:c7:5c:08:8b:80:03:c9:07:8c:7e:1d:65:f1:23:
97:1d:d9:79:2e:be:57:c4:38:16:9c:88:fd:1c:8d:
d3:a8:20:75:ad:61:68:8d:9b:6c:42:7c:5b:2f:96:
0a:68:67:36:7a:c4:b5:81:67:51:82:59:42:b1:b0:
c4:75:2a:f9:d2:96:24:00:b4:7f:95:cb:ff:0c:9d:
5a:e1:f4:dd:a8:75:d1:57:2b:b1:e4:5c:b2:cb:6b:
15:83:28:95:27:74:d8:ca:1f:71:61:a3:6c:f6:41:
79:b5:18:b5:1d:99:bd:63:26:27:16:8d:70:d3:01:
be:85:84:ea:b2:a3:47:6e:6a:14:6f:39:3e:47:5c:
b0:56:c3:08:13:a1:5b:c6:72:68:47:61:0e:a9:96:
cd:83:44:57:4e:54:af:af:2f:b4:e2:a9:2d:0b:63:
f8:be:73:7a:02:c1:cd:ec:47:23:29:69:de:7e:21:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:77:E2:CD:58:33:ED:00:DE:09:30:74:9B:35:D8:C9:48:A9:19
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b8:da:f4:dc:e0:23:bf:c8:32:a2:6a:87:ad:80:c1:6c:da:
81:3b:4d:d2:ad:4e:f6:b4:47:e5:96:38:98:ff:31:4b:1f:e5:
ed:fd:5f:40:7a:eb:53:18:c8:d6:d7:06:cd:b1:39:fd:20:06:
36:ef:86:2e:43:f2:54:85:f2:4e:e8:bb:2c:5e:16:c5:d2:48:
60:be:38:de:f6:b8:8e:a0:1b:9f:85:e7:56:ae:28:92:7a:e4:
2e:62:49:f4:64:1f:f9:a3:7d:71:3c:bd:d8:55:36:1c:a0:ff:
4d:7a:be:c7:6a:bb:95:e3:dc:f1:1b:f9:4a:e7:e8:f5:b6:0c:
cf:15:30:bd:73:16:20:f2:74:d8:06:61:3b:f9:51:a1:38:a4:
35:55:8d:c3:02:74:27:6a:ad:e2:01:01:7c:a1:69:ed:b2:cd:
2b:17:e5:4f:52:16:a5:a9:7e:33:b1:b8:67:72:e9:a6:e7:1f:
75:1d:f1:97:60:2f:9d:94:a7:4f:f2:5a:0a:76:83:54:af:ef:
56:af:fb:7a:8c:0a:d4:89:c7:bc:e4:df:a9:be:98:ac:2a:5b:
2c:70:d8:14:50:26:e1:37:84:a4:5e:c0:c8:c6:43:12:04:bc:
f0:0b:da:9f:89:30:c6:ac:f5:47:77:b4:c9:cb:2a:1c:d1:42:
d0:65:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:17 2025 by rpki-client