Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: E/vnIipi21SxEZkifWuLRZ9LywZUVgQA0BwJH64Vbeg=
Subject key identifier: 05:26:BE:B0:05:1C:25:E1:B5:4E:30:2D:C7:39:F8:3D:9B:33:C1:1B
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 0198D7735FCE288AB7E89EB661BD099EE7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 15:01:59 +0000
Manifest this update: Sat 23 Aug 2025 15:01:59 +0000
Manifest next update: Sun 24 Aug 2025 15:01:59 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: Jaj49FDIg9x74-Mgv5pjh9hL3VA.roa (hash: RiqG1dHCuH2e+rEOq+su9EZpKh6AH03adatnHOfLKXM=)
3: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: Ii9sr7FSaT9Akks/0EMURYTJn+Qu4ee8M6uhyBhz2Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5f:ce:28:8a:b7:e8:9e:b6:61:bd:09:9e:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Aug 23 15:01:59 2025 GMT
Not After : Aug 24 15:01:59 2025 GMT
Subject: CN=0526beb0051c25e1b54e302dc739f83d9b33c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:d9:e4:96:5f:6d:73:2f:24:7c:29:d0:aa:
38:d7:a0:42:f7:83:3b:b3:68:28:61:76:91:c3:a1:
ef:e9:6f:94:9a:d1:7c:94:4a:35:ba:4a:56:90:c8:
8a:0a:fa:52:97:ca:36:56:e2:55:ca:3a:68:5a:42:
0d:bb:86:24:8c:b0:36:d7:dd:e4:68:97:b4:f1:dd:
57:69:2a:4d:75:9a:74:58:62:2f:9a:d7:d5:20:97:
33:a0:e6:7b:d9:28:75:20:ba:98:ae:6e:54:fc:9f:
60:7b:d3:43:aa:6e:28:42:55:14:d1:eb:3f:44:bd:
55:90:60:09:0b:b0:74:b7:1b:08:31:67:f0:25:87:
ef:55:a1:0b:aa:53:e4:5a:1d:f1:24:bb:e8:8a:ab:
72:96:a6:40:09:af:cf:e7:06:15:59:11:73:f8:a1:
b5:79:ef:80:ce:d7:9f:24:a7:2a:61:40:16:2d:6c:
84:cf:f4:15:f9:e0:35:2f:b4:41:e2:06:6c:02:22:
65:13:80:0c:f7:5e:8d:1c:c2:8c:bf:a0:48:91:1d:
5a:ee:82:81:12:56:3f:df:d8:98:07:d6:d1:f7:97:
b3:00:42:cc:4b:02:84:8c:3e:d4:52:8a:80:c5:b3:
50:26:f7:af:38:4c:7b:51:f3:a1:16:8a:bd:39:c5:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:BE:B0:05:1C:25:E1:B5:4E:30:2D:C7:39:F8:3D:9B:33:C1:1B
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:d2:86:a9:3e:e2:8c:c1:f3:d4:26:f0:7a:de:4e:38:0a:
18:6d:5f:5e:70:e3:f2:77:71:bc:df:b9:7c:69:aa:85:9d:b1:
51:05:80:b5:a2:f9:d2:00:6e:9c:6b:61:f3:aa:9f:e6:ed:89:
d0:53:0f:44:6d:6e:1e:47:71:a1:45:d8:ba:56:5f:bc:88:41:
7d:67:df:e4:59:c3:52:aa:6a:a2:80:fe:5d:96:76:a4:b3:4d:
9a:73:76:25:4f:dc:ce:29:97:81:75:32:e8:83:a3:45:7f:65:
52:d6:89:22:a3:af:28:8b:26:cb:36:c7:42:58:4e:0c:4d:1b:
94:38:36:57:4f:bc:58:ed:a2:4b:52:e6:a3:0e:9d:1b:7b:2b:
65:d4:08:db:e5:c2:9d:49:61:a9:f7:e0:83:fa:9c:44:1f:92:
4a:f8:f5:9f:5b:1c:48:e2:e7:33:d0:0c:cf:fb:29:66:b9:80:
2c:be:c5:16:50:89:6c:0e:65:71:4d:56:07:3b:17:e0:83:6b:
6f:6f:b5:80:6d:f1:23:8e:ff:88:e9:fd:fa:a2:7f:2d:ee:db:
36:b6:cf:9b:ac:cc:a6:72:1a:9b:37:4e:17:7e:d4:68:3c:66:
fc:13:cb:75:ec:45:93:47:58:35:fb:23:02:49:cb:59:73:ef:
9a:a1:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:27 2025 by rpki-client