Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: oZkzhUygDRJ8VVzOgTESxaEZuR3XU88QDUiww5TNXik=
Subject key identifier: BB:A3:AC:BF:2C:CF:1A:42:8F:DD:7C:4A:C9:87:DF:C0:96:3C:56:51
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 0199FCFD90134EAAFE49D2CD2DFE5FE89B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 0F56
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: 6DyFjxNuZaydS9bKmS0-lDimCWA.roa (hash: w+hli8OO0LCrT1s2As2YzA6/he3KpN8v/KtHkMIY6+4=)
2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: /taTnay3RB/oRfHKmnUcIygr9XlaRFGxZzqjk8XCO3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:90:13:4e:aa:fe:49:d2:cd:2d:fe:5f:e8:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=bba3acbf2ccf1a428fdd7c4ac987dfc0963c5651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:ff:20:87:05:c8:13:6b:54:0c:69:8b:a7:
f7:2a:64:25:de:58:cf:2c:ef:5f:d7:2c:c7:61:9f:
49:09:d6:16:2d:62:ba:15:ee:d9:56:35:8c:c8:7e:
ce:7e:3e:f8:d5:5d:ae:79:80:84:c3:ab:d9:1e:a8:
77:5e:19:b5:8a:63:7b:64:92:7f:bf:90:97:34:e4:
e0:5f:68:0a:be:7a:78:b8:de:cd:1e:4b:a9:0c:07:
11:d5:17:8d:ec:a0:d0:33:fa:43:2f:72:d8:31:34:
c4:dc:d2:9a:26:f5:95:27:45:38:07:99:82:e9:90:
76:9b:e0:f2:2d:c9:99:1f:e0:77:14:4d:08:06:c6:
1e:a3:b3:38:58:aa:f7:92:7b:a2:6c:79:d0:a2:3e:
10:29:38:fd:79:0d:75:49:a4:b4:ff:bc:74:a5:c6:
ca:5c:3e:4b:fc:23:5d:5c:23:7e:a9:92:32:50:56:
9f:a4:6c:a6:31:35:98:2f:f1:fd:84:51:7a:ac:7a:
5b:06:d3:b1:9a:20:20:e8:26:fe:90:41:83:05:73:
5a:74:6e:6d:c2:8d:a4:24:df:1e:f9:d4:ed:0a:aa:
13:76:d5:14:66:11:f5:ec:2d:ec:d1:14:cf:13:d1:
07:a8:da:aa:be:fb:80:42:1b:ea:ef:29:df:23:aa:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:AC:BF:2C:CF:1A:42:8F:DD:7C:4A:C9:87:DF:C0:96:3C:56:51
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d3:e0:e7:a5:ce:b3:1e:11:9a:81:45:de:e7:3d:8f:00:ea:
fa:ac:49:c9:1d:fb:ed:c6:e5:3d:7a:71:1d:11:eb:3c:0a:98:
8d:a2:df:7b:dc:90:46:89:65:4f:a3:97:dd:00:e5:a2:e7:91:
72:b6:8b:8d:03:b3:4b:5e:c3:fa:52:9b:a0:9d:91:3c:17:0e:
ce:c0:29:94:6e:69:49:1d:ae:0b:af:b1:df:40:69:26:8a:ea:
ba:d8:e6:39:5e:ce:c0:b7:a0:02:b4:5f:dc:8e:75:07:a1:a7:
6e:38:58:d5:bc:38:f1:f6:c8:88:9f:68:7f:42:0b:8c:60:0c:
52:c7:44:6a:30:f5:fa:b7:06:4b:86:3c:8a:4e:68:74:3f:53:
ef:28:ee:43:f9:5c:2a:84:a6:3d:cb:1b:58:16:1f:ab:63:48:
64:a4:bd:e8:e9:4d:b4:9f:0e:2b:3d:d6:22:ac:44:68:bc:d4:
ba:6c:18:6d:5c:0f:42:3e:b4:85:8e:ce:28:e6:8c:56:12:10:
18:1f:f3:52:27:a3:2d:b5:ab:3e:f6:d4:1a:a6:2c:02:7d:3f:
46:c7:ab:a9:98:6b:c6:8c:11:a4:c0:e7:9d:5a:da:d0:d5:79:
2f:59:dc:a0:46:92:3c:4c:ad:65:33:79:2a:db:6a:6d:5b:8e:
6f:9e:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:29 2025 by rpki-client