Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: Dj7CWSw4zjBD8pznvMw4TTeF867941x8YGifO5i68/8=
Subject key identifier: AD:12:94:4A:51:E5:A6:E2:50:0C:20:62:6A:28:60:94:F0:B2:70:68
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 0198D583B9EAAA91821EC345320C2C4FFD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 0EBD
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: 6DyFjxNuZaydS9bKmS0-lDimCWA.roa (hash: w+hli8OO0LCrT1s2As2YzA6/he3KpN8v/KtHkMIY6+4=)
2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: IgaaS4koWERClstFaMcXb0/IG+Gf45dXsKPkb8d0zkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b9:ea:aa:91:82:1e:c3:45:32:0c:2c:4f:fd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=ad12944a51e5a6e2500c20626a286094f0b27068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:97:ee:b7:25:12:7e:1a:d4:72:1d:4b:d5:
dc:7b:ce:6f:fb:cc:c9:5a:53:1e:09:15:2c:3c:1e:
f3:25:4a:60:84:64:cc:ab:e8:f3:9a:6d:22:dd:68:
14:6e:a6:a0:75:31:2e:1b:48:d5:02:46:da:3f:50:
71:7a:93:f7:67:aa:7d:29:a3:f2:d7:73:c1:9e:c3:
63:e2:be:6c:08:df:84:e5:b7:46:95:4c:c6:b8:ac:
90:79:ad:b6:c6:22:d2:9a:90:7b:10:c1:c8:3e:49:
84:6e:81:49:73:19:3c:39:f2:58:62:8c:23:84:7f:
6a:28:55:7f:e8:7d:fc:d2:f0:ad:e1:19:3a:5f:be:
6d:fe:d1:db:ba:ce:85:ca:1b:8b:c4:ab:d6:61:f9:
9d:a7:7b:a9:b6:5b:88:90:1a:07:41:4a:79:5c:fb:
bc:b7:07:75:90:3c:8f:c9:da:d1:5f:6f:a0:54:30:
3b:dc:d0:91:20:0c:a2:21:2f:73:3f:44:22:ec:55:
0c:4c:d0:d1:b4:a7:bd:d2:d4:2e:5a:5c:95:af:0d:
75:e9:72:21:82:f9:37:6b:61:86:a6:88:46:61:99:
4f:b9:27:44:87:fc:1d:d0:21:1e:e6:08:67:30:a9:
f9:23:d0:bf:c7:8c:d7:b6:ac:dc:26:00:26:79:49:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:94:4A:51:E5:A6:E2:50:0C:20:62:6A:28:60:94:F0:B2:70:68
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:22:f6:9d:a8:b3:08:16:fc:be:f7:d4:0f:a8:9f:f7:b8:
3f:99:3d:56:c8:13:3c:b2:34:43:12:48:7a:c5:92:4d:d0:3f:
ba:80:73:1d:be:5e:07:45:6a:0b:61:34:22:26:01:11:c1:5b:
cf:e9:a9:1e:c7:0b:2a:58:8b:6f:74:b7:d1:49:18:bd:04:78:
b4:75:ca:70:65:73:59:78:f5:e8:a2:a8:3e:77:00:c3:f5:25:
f3:dc:b6:9f:36:3c:e3:2f:05:89:95:b9:e9:5f:93:6c:e4:c7:
e6:60:b4:93:33:a0:bd:24:83:cd:0d:76:95:0a:c2:60:3e:0f:
fb:74:a7:e2:fb:09:8e:af:65:b5:5f:df:56:7a:9b:93:42:25:
b2:27:0a:f2:f3:2c:a5:94:55:7c:b1:8e:4e:37:e4:fc:a2:aa:
8e:f6:2f:97:6c:cd:a9:5a:1d:53:b0:d2:53:c8:78:28:3d:d9:
35:d2:97:d7:4d:f9:e6:b1:51:5e:57:88:ed:01:3c:07:ca:64:
8b:5d:f1:8f:7b:2e:9e:6c:35:37:cc:42:4d:7a:27:d1:b5:dc:
d6:0f:13:ef:4e:76:db:ed:da:81:1b:ab:00:27:07:fc:d9:48:
1f:41:4e:5f:49:30:78:ae:80:a3:bc:ae:df:e5:e2:d3:d9:ad:
ef:d2:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:36 2025 by rpki-client