Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: lDzsm01Kgy/nyd+ZqV0V5xmh0oHI0bGzSQ1+qA77/w0=
Subject key identifier: 60:B9:A7:23:73:5D:25:18:3E:13:16:68:65:D0:77:52:A2:8C:9F:5E
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 0199FD340434E606E47306DD892B79CA5CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0921
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: jjConPvEMkbwFP+qNv3K/PiBrZN/C/uXmogJxclKTxc=)
2: vUBtInQXQnp6aIJZLEu8LFVUcuw.roa (hash: XecZfooeE59vNEPEzFn7DI60osYJ07EPCzVg5HN86l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:04:34:e6:06:e4:73:06:dd:89:2b:79:ca:5c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=60b9a723735d25183e13166865d07752a28c9f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:2f:07:5e:1b:9c:c3:21:a8:2c:f9:44:58:
03:96:35:c8:b7:23:e9:31:65:4d:96:3d:20:ca:ac:
b7:1e:99:ed:3a:52:56:17:06:81:9e:8b:b3:8d:1c:
b9:23:e3:81:7e:51:c2:09:74:10:bb:8f:ea:fb:f3:
0a:da:79:ce:37:51:67:22:3f:48:16:a6:55:0b:6c:
83:aa:d6:2e:fc:1e:d6:9f:6c:c6:ac:e4:06:19:a4:
cc:b0:b6:43:8d:78:ec:ba:06:e1:15:a9:a3:f8:b4:
5e:5d:56:a3:4b:21:7d:35:e0:67:30:83:e8:80:24:
2e:c4:89:a8:4c:f9:a4:00:3c:8e:3d:78:40:e8:4e:
ae:cc:48:89:8f:ed:4b:1b:56:07:5c:51:8c:31:ef:
ae:3d:c6:a2:68:50:b9:5b:bb:70:70:9b:9a:d5:bf:
bd:77:a8:b6:1e:04:2b:a3:9e:3d:9f:e1:a4:d5:35:
d3:c1:4f:f2:58:57:32:49:c2:ee:de:cf:ae:bb:01:
55:8b:29:97:13:c1:50:9f:d9:b7:b6:ad:63:8c:92:
ad:bc:9e:dd:13:59:4d:a6:88:64:4b:e8:e3:e6:dc:
ec:19:f5:4f:a9:48:c5:14:6f:2b:0d:ba:2b:7c:9a:
12:11:2e:fa:8a:cc:a9:62:46:fe:19:5a:86:2b:41:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:A7:23:73:5D:25:18:3E:13:16:68:65:D0:77:52:A2:8C:9F:5E
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:96:bd:50:48:fa:60:77:6d:37:25:a5:c2:c9:0b:35:30:
28:89:68:3f:5e:ec:0d:d3:27:e2:dd:6a:97:be:6c:51:6e:cf:
cb:d6:54:ef:4d:86:22:fc:4c:cf:4d:e3:f9:09:80:54:30:c6:
4c:a6:50:02:1b:c9:3a:e5:fd:52:f3:8a:26:d6:f8:98:b1:c7:
ba:91:9c:52:4c:49:02:1b:fe:0c:4f:67:96:25:49:19:14:e7:
6c:85:6d:e1:e5:e7:14:2e:c9:5a:4e:ad:87:4b:5f:c8:97:89:
ae:e7:b0:81:f3:b0:ff:ed:17:e0:55:4e:53:2b:fc:e9:3f:12:
3c:94:d0:00:94:bd:65:8b:c5:df:c0:24:0b:4d:ea:20:cf:4f:
76:b5:42:f4:9a:22:00:6e:99:f2:e7:db:a1:f1:ec:32:0b:46:
72:a7:20:7e:01:dc:c8:b8:27:d9:8a:e7:fa:f2:09:f4:85:e4:
0c:47:e4:36:34:ea:63:c2:39:0b:2c:42:ea:1f:c1:f6:e0:a7:
2e:13:bc:b6:75:04:55:78:ec:d8:9f:a0:c6:67:a3:c8:bf:b4:
7f:fa:37:49:f8:6f:89:df:ec:6d:b5:47:a3:a7:96:d6:0c:45:
08:d7:a8:35:8e:dc:5e:25:de:bc:19:d7:2c:6c:40:8c:48:0d:
c7:0c:67:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NAQ05gbkcwbdiSt5ylzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi
ZDg5ZTkwHhcNMjUxMDE5MTYwMTA4WhcNMjUxMDIwMTYwMTA4WjAzMTEwLwYDVQQD
Eyg2MGI5YTcyMzczNWQyNTE4M2UxMzE2Njg2NWQwNzc1MmEyOGM5ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FMvB14bnMMhqCz5RFgDljXItyPp
MWVNlj0gyqy3HpntOlJWFwaBnouzjRy5I+OBflHCCXQQu4/q+/MK2nnON1FnIj9I
FqZVC2yDqtYu/B7Wn2zGrOQGGaTMsLZDjXjsugbhFamj+LReXVajSyF9NeBnMIPo
gCQuxImoTPmkADyOPXhA6E6uzEiJj+1LG1YHXFGMMe+uPcaiaFC5W7twcJua1b+9
d6i2HgQro549n+Gk1TXTwU/yWFcyScLu3s+uuwFViymXE8FQn9m3tq1jjJKtvJ7d
E1lNpohkS+jj5tzsGfVPqUjFFG8rDborfJoSES76isypYkb+GVqGK0HUWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC5pyNzXSUYPhMWaGXQd1KijJ9eMB8GA1UdIwQY
MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt
NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi
LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpKWvVBI
+mB3bTclpcLJCzUwKIloP17sDdMn4t1ql75sUW7Py9ZU702GIvxMz03j+QmAVDDG
TKZQAhvJOuX9UvOKJtb4mLHHupGcUkxJAhv+DE9nliVJGRTnbIVt4eXnFC7JWk6t
h0tfyJeJruewgfOw/+0X4FVOUyv86T8SPJTQAJS9ZYvF38AkC03qIM9PdrVC9Joi
AG6Z8ufbofHsMgtGcqcgfgHcyLgn2Yrn+vIJ9IXkDEfkNjTqY8I5CyxC6h/B9uCn
LhO8tnUEVXjs2J+gxmejyL+0f/o3Sfhvid/sbbVHo6eW1gxFCNeoNY7cXiXevBnX
LGxAjEgNxwxn4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:37 2025 by rpki-client