Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: oRE+9XQXLviTmS7IwI/KWR9SMwC8cbQn313UeWKSqTM=
Subject key identifier: 45:5B:08:94:10:5B:7A:F7:8B:09:76:11:15:C8:7C:08:0D:63:C2:72
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 0199FC8F133E78A7418A12CA5BB116A89BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 09A1
Signing time: Sun 19 Oct 2025 13:00:58 +0000
Manifest this update: Sun 19 Oct 2025 13:00:58 +0000
Manifest next update: Mon 20 Oct 2025 13:00:58 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: +tsnpsopYggmoCUnJhE1EsPEBsZaCgdXQgGXzOik/2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:13:3e:78:a7:41:8a:12:ca:5b:b1:16:a8:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Oct 19 13:00:58 2025 GMT
Not After : Oct 20 13:00:58 2025 GMT
Subject: CN=455b0894105b7af78b09761115c87c080d63c272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:38:b2:78:e3:2c:79:d7:e5:35:5f:f8:76:
c0:be:07:d0:9b:a0:52:44:f6:d7:7f:69:e7:55:cf:
28:24:38:6b:3d:cb:32:61:66:ba:26:65:a0:31:a8:
aa:f7:0a:5c:ae:e4:b1:db:d4:30:ba:18:dc:f2:91:
80:e7:f0:88:7b:51:bd:fe:3b:e8:dc:26:fc:3f:49:
09:5b:57:39:2b:76:2a:a5:3c:dc:9b:78:9a:8f:54:
a1:83:8c:34:fb:b5:51:53:15:14:ef:e7:b7:a2:1f:
cb:5b:81:5c:c3:cb:9f:a4:2c:26:1e:ae:c2:ce:37:
ba:c8:f2:df:06:67:46:f0:27:b5:ac:be:e8:02:6d:
e2:75:fe:46:69:7c:30:6c:e6:c3:4b:e8:38:c0:39:
40:58:17:07:88:97:78:dc:e2:d2:b5:dc:cc:81:a9:
11:57:bb:29:41:42:5a:6d:a5:05:09:92:99:8d:d4:
e4:a3:cf:e5:21:a6:6d:07:cd:10:35:3b:fd:84:c1:
8c:cc:60:16:6a:1c:62:ed:d4:e5:94:fa:37:d3:d7:
22:37:fc:81:8f:77:e8:c3:ec:0e:81:8b:8e:d2:c5:
7a:98:3d:22:0e:e2:22:48:bd:1f:e6:93:e1:e8:81:
1a:e3:83:6b:05:ee:dc:4e:e8:b1:b7:36:ea:d3:75:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5B:08:94:10:5B:7A:F7:8B:09:76:11:15:C8:7C:08:0D:63:C2:72
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:86:30:d1:c9:9f:b1:a4:c0:c1:28:01:92:9f:38:7c:e9:
23:a6:92:f6:63:3d:ab:8a:aa:3a:d1:64:11:5a:e0:89:b8:0c:
04:a6:d7:7c:1b:58:76:b1:bd:f5:1a:60:87:2e:88:40:05:29:
be:84:80:46:84:d9:a7:52:f7:a0:3e:b5:76:3b:f2:2b:7b:d8:
d8:21:ed:4c:bb:03:8c:57:3b:14:44:e8:40:4a:e0:07:64:22:
45:1d:6b:0e:76:54:2f:ac:a0:de:8e:07:6c:05:5c:f1:5a:fd:
55:8a:24:fa:ba:4e:17:ce:08:1c:3e:77:8f:5c:5d:d4:c3:8e:
65:1a:57:9a:bf:9f:32:c3:0d:69:28:f3:1f:d9:4f:c4:07:af:
d4:dd:04:d1:21:81:97:fd:7b:f6:91:b0:1f:88:ec:ec:c5:87:
7b:92:2e:38:ec:68:2c:80:7a:79:82:f5:54:09:8e:68:f9:eb:
cb:dd:57:ff:51:f7:d1:37:0a:68:bb:a1:f5:ba:89:de:eb:77:
4d:51:03:3c:09:fa:c4:e6:14:82:1e:e4:8c:24:42:73:5d:37:
9a:d2:a3:5f:93:72:0b:9f:83:d0:5a:a4:b7:9c:1a:e3:46:62:
8c:57:02:a5:91:d5:18:f6:f7:6c:be:dc:ce:af:85:cf:94:89:
da:ae:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:57 2025 by rpki-client