Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: bPRvytW/XpZ8wpLHRPs2UF+JDvTIpY1EDn1FJ9591g8=
Subject key identifier: 83:DC:21:09:8B:CF:16:6B:C7:21:EE:96:48:8A:E0:94:16:1C:03:D0
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 0197B6A15AFD4F7D64B86F6EB4F17ED375C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 07F3
Signing time: Sat 28 Jun 2025 13:01:57 +0000
Manifest this update: Sat 28 Jun 2025 13:01:57 +0000
Manifest next update: Sun 29 Jun 2025 13:01:57 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: IPyue60dfw80Xcmr3TiTyEVNMqoVut6GnigOsLaSX4M=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5a:fd:4f:7d:64:b8:6f:6e:b4:f1:7e:d3:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Jun 28 13:01:57 2025 GMT
Not After : Jun 29 13:01:57 2025 GMT
Subject: CN=83dc21098bcf166bc721ee96488ae094161c03d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:8d:15:87:29:23:96:8e:a9:69:4e:87:3b:
9f:33:4a:a0:1e:21:14:21:2f:c4:c6:46:5d:70:a6:
75:d1:b9:6d:57:89:22:ef:f4:8a:ab:52:2f:be:3e:
54:5f:36:8c:df:75:a5:44:a5:bc:6a:1d:76:78:db:
ac:b1:14:be:b2:5c:6e:6a:ab:17:fa:ab:57:f0:cb:
34:ce:55:24:22:e0:e2:6a:38:f7:42:32:65:e5:53:
be:01:95:cc:33:89:ec:f1:35:65:e9:08:86:8a:ba:
6a:6a:ed:2d:5b:ff:cb:1d:be:44:e2:e3:2e:b4:1a:
2b:f4:4d:d1:fc:35:f8:87:a7:fc:d7:dd:7d:bf:60:
b2:cc:88:d0:68:5b:2e:3a:0e:cc:ee:ea:c0:cb:94:
af:28:83:ec:37:99:2a:f0:f4:21:eb:4f:5e:a8:7e:
03:eb:c1:db:3b:c2:12:35:19:7e:98:40:c1:e2:13:
48:a1:b6:05:cf:5f:79:33:9a:2d:29:04:c0:16:e6:
42:fa:ff:77:93:b0:93:6c:cc:61:9b:0c:e9:b4:39:
0b:43:20:16:f1:b9:f6:f5:88:3d:71:b9:af:a5:5a:
db:11:ca:a4:71:71:65:0c:b4:f7:ee:2a:06:3d:6b:
cb:ca:85:47:f6:62:ba:65:87:ef:18:21:0c:bb:07:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:21:09:8B:CF:16:6B:C7:21:EE:96:48:8A:E0:94:16:1C:03:D0
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:32:4e:ec:d7:0e:c1:a4:0c:db:b4:87:85:22:b0:1f:e0:
f5:e5:de:02:30:2f:c4:0f:39:55:79:8e:92:03:1b:87:62:29:
c9:2e:1a:24:2e:d8:36:4d:11:2b:b1:c6:71:92:59:5f:c1:12:
ca:2b:19:dc:e2:83:0b:63:f5:3b:ac:9c:a1:60:3c:4a:5e:c5:
de:ea:eb:9d:49:16:d4:a3:55:d5:66:d7:f1:86:7a:a7:ca:f8:
e3:59:e0:e6:64:5a:a1:e7:ee:5a:f1:ee:18:54:4b:f5:c5:65:
3a:01:d4:16:89:a2:d3:db:b6:70:30:76:f5:49:6f:6c:d0:01:
48:b9:e2:09:ca:65:64:84:a7:21:b0:af:e0:cf:ce:5d:ab:1e:
f1:f4:29:a3:d9:9b:07:e1:bb:68:a8:1f:49:9f:96:3c:0e:04:
25:99:58:69:9e:ab:6b:80:10:f8:f0:0d:2b:46:a8:83:9a:b0:
37:72:17:1a:64:cd:7a:b0:a5:6c:7d:4f:cb:6e:b3:ac:ff:62:
68:b5:de:6c:c5:06:b2:b2:5c:ce:ee:be:bf:73:1a:45:af:da:
7c:27:d9:55:11:4b:be:33:f3:21:dc:66:9e:08:bb:b2:d9:8f:
27:2b:0f:f9:4e:87:ac:dd:cc:8e:62:68:e8:5d:b4:6e:f6:30:
5a:c1:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:37 2025 by rpki-client