Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier: JFVMzwh/wJIHz4789mlNc87VegyocbcpdzX84GPMZsE=
Subject key identifier: A0:F2:4F:88:13:FB:D0:CA:A8:91:68:9B:98:7A:F7:1E:92:CC:74:6E
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 0198D515B1B7E523CCF15AC838BB6AF97885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number: 0908
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: DEB9iQ/65dO3ljlR4Z5hBWCxHmV4ry8f7/PvNAAK5Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b1:b7:e5:23:cc:f1:5a:c8:38:bb:6a:f9:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=a0f24f8813fbd0caa891689b987af71e92cc746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:6a:a4:c2:51:a4:90:35:27:af:0c:0b:75:
1c:c3:9d:2f:1c:4d:94:40:c3:c1:e0:28:48:da:c5:
60:95:0e:be:fb:4d:56:db:cc:1d:8d:48:d0:98:90:
82:ee:83:71:77:b1:22:ce:22:61:85:ec:c4:0b:b0:
bb:4a:c2:90:9d:58:42:69:2b:04:26:63:9d:80:29:
f1:6a:58:dd:f5:b8:99:e0:d7:0b:75:56:76:8f:67:
3f:7a:56:56:2f:4b:ff:c1:e4:87:74:8c:14:d9:22:
33:c9:69:4b:70:46:6c:9f:a8:f6:65:07:4c:79:ab:
9b:ff:37:d5:69:e3:db:a3:42:c9:4f:60:f7:e4:0f:
6d:e0:ba:22:da:b7:ae:e8:53:8e:88:3b:d6:99:4b:
41:95:74:0f:d1:c6:da:64:07:d9:f7:42:10:33:ea:
69:02:26:80:b5:39:71:c4:13:74:cd:eb:51:ff:d9:
9f:0e:b9:9f:f9:0c:4c:1d:c8:80:bf:c0:54:7c:28:
db:ac:a3:b4:88:0c:74:6a:f3:ed:7d:52:cd:4b:16:
31:90:c1:d9:a7:f6:46:c6:d9:aa:3e:b9:c8:38:95:
55:92:c2:55:60:d0:fb:be:74:25:41:ae:64:f7:47:
ff:b4:55:67:c4:00:7f:f4:32:35:25:5d:ae:e0:37:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:4F:88:13:FB:D0:CA:A8:91:68:9B:98:7A:F7:1E:92:CC:74:6E
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:9d:a0:87:0c:72:d1:4f:10:eb:fd:94:d5:fc:d2:b7:1e:
af:90:83:81:c9:e4:af:3b:5e:5d:1c:b1:05:20:c4:8a:f8:4c:
21:61:e4:02:9c:91:1e:13:93:1c:3c:9b:8f:ad:a1:ba:29:28:
a1:80:dd:6d:82:39:49:08:9b:e7:d3:58:38:f9:1a:dc:d9:b6:
83:32:64:de:94:82:fe:53:ac:d4:f5:58:4e:79:96:8f:17:e7:
35:c5:71:2e:e0:84:80:c3:fa:94:43:30:7b:2e:7d:c0:22:8b:
14:d8:df:10:c2:83:47:7f:e5:01:7d:3f:f6:fb:4e:e6:ac:91:
18:5a:4d:5f:f8:33:bb:23:b0:72:0d:8f:5b:3e:c6:97:c8:88:
f6:3e:e4:ca:f2:3e:35:5b:ec:67:8c:34:10:08:f1:b2:2d:e0:
cb:98:61:1d:04:b7:48:64:8c:8d:91:2c:57:e1:d0:83:9b:63:
11:a3:4d:42:43:59:9a:3b:90:7e:bf:2c:0a:aa:3a:c4:d1:74:
99:9a:c3:c6:eb:fd:ff:b7:91:0e:1b:89:9d:26:95:f9:5a:e2:
f7:ef:aa:28:1e:29:7e:e7:e2:35:04:8d:36:66:ae:e1:ae:81:
48:23:f5:ca:a7:3d:25:df:49:3a:58:c0:ee:5a:7d:c4:26:1d:
38:51:3c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbG35SPM8VrIOLtq+XiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjUwODIzMDQwMDI1WhcNMjUwODI0MDQwMDI1WjAzMTEwLwYDVQQD
EyhhMGYyNGY4ODEzZmJkMGNhYTg5MTY4OWI5ODdhZjcxZTkyY2M3NDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuutqpMJRpJA1J68MC3Ucw50vHE2U
QMPB4ChI2sVglQ6++01W28wdjUjQmJCC7oNxd7EiziJhhezEC7C7SsKQnVhCaSsE
JmOdgCnxaljd9biZ4NcLdVZ2j2c/elZWL0v/weSHdIwU2SIzyWlLcEZsn6j2ZQdM
eaub/zfVaePbo0LJT2D35A9t4Loi2reu6FOOiDvWmUtBlXQP0cbaZAfZ90IQM+pp
AiaAtTlxxBN0zetR/9mfDrmf+QxMHciAv8BUfCjbrKO0iAx0avPtfVLNSxYxkMHZ
p/ZGxtmqPrnIOJVVksJVYND7vnQlQa5k90f/tFVnxAB/9DI1JV2u4DdukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDyT4gT+9DKqJFom5h69x6SzHRuMB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOCdoIcM
ctFPEOv9lNX80rcer5CDgcnkrzteXRyxBSDEivhMIWHkApyRHhOTHDybj62huiko
oYDdbYI5SQib59NYOPka3Nm2gzJk3pSC/lOs1PVYTnmWjxfnNcVxLuCEgMP6lEMw
ey59wCKLFNjfEMKDR3/lAX0/9vtO5qyRGFpNX/gzuyOwcg2PWz7Gl8iI9j7kyvI+
NVvsZ4w0EAjxsi3gy5hhHQS3SGSMjZEsV+HQg5tjEaNNQkNZmjuQfr8sCqo6xNF0
mZrDxuv9/7eRDhuJnSaV+Vri9++qKB4pfufiNQSNNmau4a6BSCP1yqc9Jd9JOljA
7lp9xCYdOFE8VQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:43 2025 by rpki-client