Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: xN3tUf6MhBkSjNOVC0P5mq4+xpk9l3PqvLGCuzUQNJU=
Subject key identifier: BD:64:86:47:3D:2C:8A:2C:72:28:3F:46:C1:19:C9:1D:E6:C8:5F:09
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 0198D472E53B7049723D94AAF3761E9091A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0887
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: h5F9M+pLTXu7ZSFO1N7tDCsfaXNC4bsi5sXNPaFRyr8=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e5:3b:70:49:72:3d:94:aa:f3:76:1e:90:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=bd6486473d2c8a2c72283f46c119c91de6c85f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:0a:d2:ea:5e:ea:51:5d:ea:64:69:ab:97:
83:3a:1f:67:b6:90:c4:aa:90:e7:33:d4:d1:10:4d:
7d:d2:64:eb:a4:73:06:e0:a0:8f:99:3c:e0:4a:44:
67:e1:4e:ee:d0:1e:40:dc:89:2b:42:25:da:0b:3f:
9d:53:a8:2f:ba:2f:a2:34:1f:5b:f8:e2:6b:21:c3:
e0:d8:c9:cd:4b:af:ed:be:30:25:5e:69:f6:aa:ff:
32:cb:87:2b:da:76:28:1d:94:0e:4d:a8:ec:b6:2b:
30:13:4e:50:cb:a7:88:ec:a3:a3:97:e7:ba:19:e1:
23:b2:7a:a1:8c:be:bf:78:e3:81:58:45:8c:68:33:
72:c0:24:96:c8:94:60:a9:e2:7c:3a:14:71:4c:86:
a5:e9:76:90:88:d4:80:88:97:d1:de:ee:96:9d:5f:
a4:6b:fb:93:15:c1:20:a7:ca:f3:e4:49:a1:90:7a:
be:57:9b:04:80:83:0c:80:04:29:be:41:ca:2b:fe:
f0:fc:c2:81:9b:a0:2e:d5:1c:67:55:3c:c9:71:d7:
45:bc:cd:ab:a0:98:c3:f9:cb:96:76:ed:32:05:70:
ad:b4:b6:bd:76:ef:68:98:b6:a9:83:98:dc:4b:34:
2f:f2:0e:92:66:ce:ac:7d:6f:bc:ab:99:e8:ea:02:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:86:47:3D:2C:8A:2C:72:28:3F:46:C1:19:C9:1D:E6:C8:5F:09
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:c7:e6:fc:87:f4:04:f0:3d:ba:d8:57:09:98:c0:99:8c:
9b:32:a6:28:3d:5e:d3:5d:c6:27:f5:fa:93:bf:85:37:2f:3f:
bb:a9:4f:c3:47:32:3c:0f:24:1b:76:2b:3a:79:12:e1:77:54:
ea:1f:7f:84:69:09:bf:06:48:98:bd:57:80:2f:e1:34:20:24:
35:4e:b7:c7:08:c8:1e:fb:bb:3e:ea:39:bd:63:73:4c:93:d3:
72:bb:d6:91:f1:f5:b9:90:7d:87:72:a9:b8:c8:2d:41:a7:28:
dd:3a:54:38:b3:f1:19:50:81:e0:13:5f:ea:b1:82:9f:7e:fe:
79:1c:3e:05:6a:19:59:39:66:46:e0:32:da:eb:7e:95:af:21:
3e:a3:4b:ff:9f:c7:f9:35:13:e8:8e:07:b2:98:8f:5d:41:51:
99:5e:da:cf:96:91:9c:34:cf:6e:07:a5:10:25:35:37:04:f6:
c1:bc:d6:19:d0:71:07:c2:b9:92:1d:f3:cf:8c:74:ec:74:a5:
36:57:ad:e5:24:dc:2c:0a:92:3b:2b:cc:4a:a0:b4:bc:5d:be:
cf:60:f2:c4:ae:f3:79:fc:38:61:16:70:cf:98:f7:eb:63:65:
ab:25:64:43:7a:ba:55:b3:ee:d6:dc:00:cd:1c:d1:65:59:e0:
b9:75:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:13 2025 by rpki-client