Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: 0yhylrSWUwB4XomTrexvEt/UpQn8xy7c8kIjnDfV0Og=
Subject key identifier: 6D:44:20:07:AF:EC:7A:1A:6E:0F:A6:E3:66:AF:73:0E:04:B3:B1:11
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019A00DA252714D3C288BFAF7499E0135958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0DC5
Signing time: Mon 20 Oct 2025 09:01:27 +0000
Manifest this update: Mon 20 Oct 2025 09:01:27 +0000
Manifest next update: Tue 21 Oct 2025 09:01:27 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: 2sCMrtvpXcYELMNQkxWwpqqOu9IwgBPNSruwxc24EGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:25:27:14:d3:c2:88:bf:af:74:99:e0:13:59:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Oct 20 09:01:27 2025 GMT
Not After : Oct 21 09:01:27 2025 GMT
Subject: CN=6d442007afec7a1a6e0fa6e366af730e04b3b111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:b5:bb:b1:14:cc:71:f9:4f:85:e8:34:6b:
fe:91:26:e1:c1:b0:ce:7c:0d:fe:e1:8c:71:38:02:
49:92:3d:16:aa:de:d3:35:6d:f5:6d:69:a5:e7:4d:
e2:13:bc:3c:b9:90:fe:24:1d:09:a2:50:02:ee:58:
14:8a:c1:de:da:32:0e:3f:1a:64:57:4b:17:b8:85:
cc:ee:bf:e7:62:54:ac:20:85:66:7c:4a:61:34:5b:
ca:64:5a:5f:57:65:7c:53:f7:11:3b:d7:ec:54:38:
9a:57:c2:b7:9f:02:d3:15:31:96:6c:19:db:04:25:
d0:d8:39:08:fb:f2:a4:c4:b9:a3:53:c9:73:2b:23:
aa:f7:01:a4:cc:cd:eb:b3:fb:43:a4:3f:f3:68:6c:
c6:b1:ba:5c:cc:53:4e:1a:7b:a3:10:c4:9a:33:96:
5c:eb:f1:ce:3f:62:41:a1:5c:15:3a:7b:5a:ea:70:
58:4b:e7:54:b8:76:45:f7:50:0d:3d:b5:fb:67:ca:
73:db:78:5f:7f:e2:9c:ef:3f:14:a0:3b:72:e7:3b:
6e:fc:df:5b:90:cd:80:2c:da:e9:20:44:72:07:12:
c7:12:7f:cf:64:97:08:23:25:24:ec:14:97:c3:ce:
0d:83:79:89:3b:82:14:37:d7:d4:9c:0c:c5:06:df:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:44:20:07:AF:EC:7A:1A:6E:0F:A6:E3:66:AF:73:0E:04:B3:B1:11
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:16:4f:a5:f4:9d:c4:12:03:8f:62:46:57:3c:96:8a:fd:52:
e6:9a:e9:60:2f:22:a4:ac:e9:ca:2b:97:fa:aa:97:c9:7d:e9:
60:a8:bd:40:97:13:de:c8:bf:3d:f7:a3:2b:ca:5a:64:b2:7d:
2d:c6:92:89:33:95:6e:51:c0:f9:cd:60:71:e0:76:5b:02:0a:
df:8c:ea:25:66:ee:7e:b3:80:f7:aa:5a:f3:9c:56:9b:3f:1b:
0e:a1:83:da:c1:bd:e3:aa:7e:41:af:88:30:02:de:d9:ca:32:
f8:63:4e:95:a1:15:cf:72:4a:6f:e5:2c:64:36:a3:9e:db:11:
6d:94:3f:b2:67:ae:2c:af:26:1d:3e:b3:67:b2:2e:b5:bd:84:
23:b4:a4:22:22:35:e3:8b:35:c6:f1:0b:44:1e:f5:87:4f:0e:
5a:14:ab:c0:09:dd:0b:a0:aa:df:59:62:f6:5d:39:02:b2:6d:
a9:c8:66:74:84:0e:0c:5d:d8:0c:ef:e7:32:d4:69:80:65:35:
e3:f3:e1:eb:45:11:48:0b:d8:f2:9f:46:9d:be:07:8f:cd:cc:
08:e1:7e:a0:f1:84:df:5a:05:78:4c:4f:61:dd:80:30:17:9e:
49:22:cb:32:b7:35:6d:f7:cf:d5:37:87:c5:81:62:13:cf:62:
33:c4:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:08 2025 by rpki-client